Question

Difficulty: EasyApplication Load Balancing and Delivery

A company is modernizing a web application that will be hosted in a single Azure region. The solution must meet the following requirements:
- Support SSL/TLS termination at the load balancer.
- Support URL path-based routing (HTTP/HTTPS).
- Provide regional zone-redundant high availability.
- Ensure the configuration does not fail validation due to SKU mismatches.

Which load balancing configuration should you recommend?

  1. Azure Application Gateway (Standard v2) with backend virtual machines distributed across multiple Availability ZonesAnswer
  2. B
    Azure Traffic Manager configured to route traffic based on URL paths
  3. C
    A Standard Azure Load Balancer configured to distribute traffic to backend virtual machines that utilize Basic SKU public IP addresses
  4. D
    An Azure Application Gateway with all backend virtual machine instances deployed within a single Availability Zone to achieve zone-redundant high availability

Answer

Azure Application Gateway (Standard v2) with backend virtual machines distributed across multiple Availability Zones
The correct configuration is the Azure Application Gateway (Standard v2) with backend virtual machines distributed across multiple Availability Zones. This service operates at Layer 7, providing the required SSL/TLS termination and URL path-based routing. Distributing the virtual machines across multiple Availability Zones satisfies the zone-redundant high availability requirement.

Step-by-Step Solution

1
Identify the protocol and routing requirements.
The application requires HTTP/HTTPS routing, SSL/TLS termination, and path-based routing, which necessitates a Layer 7 load balancer.
Layer 4 load balancers like Azure Load Balancer and DNS-based service routing like Traffic Manager do not inspect HTTP/HTTPS payloads.
2
Evaluate the high availability and regional constraints.
The solution must be regional and zone-redundant, meaning backend virtual machines must be distributed across multiple Availability Zones.
Placing all instances in a single Availability Zone fails zone-redundancy requirements.
3
Check validation and SKU constraints.
Avoid mixing Basic and Standard SKU configurations.
A Standard Load Balancer cannot connect to resources with Basic SKU public IP addresses, whereas Application Gateway v2 works seamlessly with standard configurations.

Key Concept

Application Load Balancing and Delivery
Rate this question