Question

Difficulty: MediumApplication Load Balancing and Delivery

An enterprise is designing a multi-region web application deployment on Azure Virtual Machines. The design must satisfy the following architectural requirements:

* Provide global HTTP/S load balancing with SSL/TLS termination and Web Application Firewall (WAF) protection at the network edge.
* Enable regional routing within each Azure region to distribute traffic to separate backend pools based on the URL path (such as routing `/api/*` and `/static/*` differently).
* Ensure compatibility with backend virtual machines that are configured with Standard SKU public IP addresses.

Which two load balancing services should you include in the architectural design?

  1. Azure Front DoorAnswer
  2. Azure Application GatewayAnswer
  3. C
    Azure Traffic Manager
  4. D
    Azure Basic Load Balancer

Answer

Azure Front Door and Azure Application Gateway
To satisfy all requirements, the design must use Azure Front Door for global Layer 7 traffic routing, SSL/TLS termination, and WAF protection at the edge. It must also use Azure Application Gateway at the regional level to inspect URL paths and direct traffic to the appropriate backend pools. Both services support integration with backend VMs using Standard SKU resources.

Step-by-Step Solution

1
Analyze the global load balancing requirement.
Azure Front Door is selected for global Layer 7 traffic routing, providing edge SSL/TLS termination and WAF capabilities.
Global routing with HTTP/S offloading requires an edge service that supports Layer 7 features.
2
Analyze the regional routing requirement.
Azure Application Gateway is selected to perform regional URL path-based routing inside each region.
URL path-based routing requires a regional Layer 7 load balancer that can inspect HTTP request paths.
3
Verify SKU compatibility with the backend virtual machines.
Ensure Standard SKU resources are used consistently.
Azure Application Gateway and Azure Front Door do not impose Basic SKU load balancer constraints, keeping the Standard SKU public IP virtual machines compatible.

Key Concept

Combining global and regional Layer 7 load balancing services while maintaining SKU compatibility.
Rate this question