Implement a proxy layer with a fixed IP that forwards requests to Azure Front Door.

1. It's the most secure, supportable, and maintainable solution under these constraints.

2. Azure Firewall or App Gateway with a custom domain works well and integrates natively.

3.You retain Front Door’s benefits (caching, global distribution, WAF) without client-side limitations.