Question

Difficulty: EasyApplication Load Balancing and Delivery

A healthcare provider is deploying a regional medical records synchronization service on virtual machines in a single Azure region. The service requires low-latency TCP communication on port 5000, does not require SSL/TLS termination, and does not require URL-based routing. To distribute traffic, the provider attempts to configure an Azure Standard Load Balancer. However, the deployment fails because the backend virtual machines are associated with Basic SKU public IP addresses.

Which action should you recommend to resolve the deployment failure while meeting all service requirements?

  1. Upgrade the public IP addresses of the virtual machines to the Standard SKU.Answer
  2. B
    Replace the load balancer with an Azure Application Gateway instance.
  3. C
    Replace the load balancer with an Azure Front Door profile.
  4. D
    Replace the load balancer with an Azure Traffic Manager profile.

Answer

Upgrade the public IP addresses of the virtual machines to the Standard SKU.
Upgrading the public IP addresses of the virtual machines to the Standard SKU is the correct solution. Standard Load Balancer backend pools require Standard SKU IP addresses. This change satisfies the validation constraint while keeping the layer-4 TCP load balancing architecture intact to support the port 5000 service requirement.

Step-by-Step Solution

1
Identify the protocol and routing requirements of the service.
The service requires regional distribution of low-latency TCP traffic on port 5000 with no HTTP/S layer-7 routing or SSL/TLS termination.
This limits the suitable load balancers to Layer 4 solutions (Azure Load Balancer) and excludes Layer 7 options (Application Gateway, Front Door) and DNS-based routing (Traffic Manager).
2
Analyze the cause of the deployment failure.
Azure Standard Load Balancer is incompatible with Basic SKU public IP addresses on the backend virtual machines.
Azure resource rules mandate that all resources connected to a Standard Load Balancer must use the Standard SKU to ensure security and predictability.
3
Determine the resolution that maintains the required service architecture.
Upgrading the virtual machines' public IP addresses to the Standard SKU resolves the validation error.
This allows the Standard Load Balancer to successfully bind to the virtual machines while satisfying the TCP port 5000 and regional distribution requirements.

Key Concept

Azure Load Balancer SKU alignment and protocol routing constraints
Rate this question