An enterprise is designing a multi-region web application deployment on Azure Virtual Machines. The design must satisfy the following architectural requirements:
* Provide global HTTP/S load balancing with SSL/TLS termination and Web Application Firewall (WAF) protection at the network edge.
* Enable regional routing within each Azure region to distribute traffic to separate backend pools based on the URL path (such as routing `/api/*` and `/static/*` differently).
* Ensure compatibility with backend virtual machines that are configured with Standard SKU public IP addresses.
Which two load balancing services should you include in the architectural design?
- Azure Front DoorAnswer
- Azure Application GatewayAnswer
- CAzure Traffic Manager
- DAzure Basic Load Balancer
Answer
Azure Front Door and Azure Application Gateway
To satisfy all requirements, the design must use Azure Front Door for global Layer 7 traffic routing, SSL/TLS termination, and WAF protection at the edge. It must also use Azure Application Gateway at the regional level to inspect URL paths and direct traffic to the appropriate backend pools. Both services support integration with backend VMs using Standard SKU resources.
Step-by-Step Solution
Key Concept
Combining global and regional Layer 7 load balancing services while maintaining SKU compatibility.