The client sends Tor cells encapsulated in HTTPS to a CDN front domain. The CDN forwards by SNI match to a meek-server bound to your VPS. To a censor observing the client's traffic, only the CDN domain is visible, not the meek-server endpoint.
Domain fronting was widely shut down by major CDNs (Google, AWS) in 2018. Azure retained partial support, hence meek-azure remains operational in 2026 albeit with reduced reach. Operators frequently rotate CDN accounts because Azure terms-of-service enforcement is inconsistent.