Question

Difficulty: MediumApplication Load Balancing and Delivery

An enterprise is designing a regional application architecture in the East US region. The application consists of two tiers:

- A web tier hosted on Azure Virtual Machines that requires SSL/TLS termination, URL path-based routing, and HTTP/S load balancing.
- A database tier hosted on Azure Virtual Machines that requires internal TCP load balancing.

All virtual machines in the database tier currently have Basic SKU Public IP addresses assigned.

You need to recommend the load balancing services and the required configuration changes to support this architecture. Which two actions should you recommend?

  1. Deploy Azure Application Gateway to load balance the web tier.Answer
  2. Deploy a Standard Azure Load Balancer to load balance the database tier, and upgrade the database virtual machines' Public IP addresses to Standard SKU.Answer
  3. C
    Deploy Azure Traffic Manager to load balance the web tier and perform SSL/TLS termination.
  4. D
    Deploy a Standard Azure Load Balancer to load balance the database tier, and retain the Basic SKU Public IP addresses on the database virtual machines.
  5. E
    Deploy a Basic Azure Load Balancer to load balance the database tier, and assign Standard SKU Public IP addresses to the database virtual machines.

Answer

To support this architecture, you should deploy Azure Application Gateway to load balance the web tier, and deploy a Standard Azure Load Balancer to load balance the database tier while upgrading the database virtual machines' Public IP addresses to Standard SKU.
Deploying Azure Application Gateway satisfies the Layer 7 requirements (SSL/TLS termination and URL path-based routing) for the web tier. Deploying a Standard Azure Load Balancer meets the database tier's Layer 4 TCP load balancing needs, and upgrading the virtual machines' Public IPs to the Standard SKU ensures SKU compatibility and avoids validation errors.

Step-by-Step Solution

1
Determine the requirements for the web tier.
The web tier requires URL path-based routing and SSL/TLS termination, which are Layer 7 features. Azure Application Gateway is the appropriate regional load balancer for these capabilities.
Layer 4 load balancers like Azure Load Balancer cannot perform content routing or SSL/TLS offloading.
2
Determine the load balancing requirements for the database tier.
The database tier requires internal TCP load balancing, which is a Layer 4 capability. A Standard Azure Load Balancer is suitable for this regional backend traffic.
Standard Azure Load Balancer provides low-latency Layer 4 distribution.
3
Evaluate SKU compatibility constraints for the database tier.
Because the virtual machines currently use Basic SKU Public IPs, they cannot be added to the backend pool of a Standard Load Balancer. They must be upgraded to Standard SKU Public IPs.
Azure enforces SKU consistency within the load balancer configurations; mixing Basic and Standard SKUs results in configuration failures.

Key Concept

Choosing load balancing services based on OSI layer capabilities and ensuring matching resource SKUs to avoid validation errors.
Rate this question