Question

Difficulty: EasyApplication Load Balancing and Delivery

A logistics company is modernizing a web-based vehicle tracking API hosted on a pool of Azure Virtual Machines in a single region. The API requires SSL/TLS termination and URL path-based routing to direct traffic to different backend pools. The virtual machines are currently configured with Basic SKU Public IP addresses for management. You need to recommend a regional load balancing solution that meets these requirements. Which Azure service should you select?

  1. Azure Application Gateway (Standard v2)Answer
  2. B
    Azure Load Balancer (Standard SKU)
  3. C
    Azure Traffic Manager
  4. D
    Azure Front Door

Answer

Azure Application Gateway (Standard v2) is the correct service because it provides Layer 7 load balancing features, including SSL/TLS termination and URL path-based routing, within a single region. Because it routes traffic to the backend using private IP addresses, it does not conflict with the existing Basic SKU Public IP configurations on the backend virtual machines.
Azure Application Gateway (Standard v2) is designed for regional Layer 7 load balancing. It natively supports SSL/TLS termination and URL path-based routing. Since it forwards traffic to backend VMs via private IP addresses, the SKU of the virtual machines' public IPs does not impact its deployment.

Step-by-Step Solution

1
Analyze protocol and routing requirements.
The application is web-based, requiring Layer 7 features (SSL/TLS termination and URL path-based routing).
This rules out Layer 4 solutions like Azure Load Balancer.
2
Determine the geographic scope of the load balancer.
The workload is located in a single region.
This makes regional load balancers like Azure Application Gateway preferred over global services like Azure Front Door or Azure Traffic Manager.
3
Verify SKU compatibility with existing virtual machine configurations.
Backend virtual machines have Basic SKU Public IPs, which cannot be mixed with a Standard Load Balancer backend pool. However, Azure Application Gateway operates via private IPs and does not trigger this SKU mismatch.
Ensures the selected architecture is valid and will not fail deployment.

Key Concept

Azure Application Gateway is a regional Layer 7 load balancer that supports SSL/TLS termination and URL path-based routing, and it avoids the Basic/Standard SKU mismatch constraint because it routes traffic over private IPs.
Rate this question