Question

Difficulty: MediumApplication Load Balancing and Delivery

An organization is designing a high-availability infrastructure in a single Azure region for a suite of services hosted on Azure Virtual Machines. The VMs currently utilize Standard SKU public IP addresses. The infrastructure must meet the following requirements:

- Handle web application traffic (HTTPS) with support for URL-path routing and SSL/TLS termination.
- Load balance incoming custom TCP traffic on port 9500 to a separate backend pool of virtual machines.
- Avoid mixing Basic and Standard SKU resources to prevent validation errors.

Which two load balancing services should you include in the design?

  1. Azure Application Gateway (Standard v2 SKU)Answer
  2. Azure Load Balancer (Standard SKU)Answer
  3. C
    Azure Load Balancer (Basic SKU)
  4. D
    Azure Traffic Manager

Answer

The load balancing design should include Azure Application Gateway (Standard v2 SKU) for Layer 7 web traffic and Azure Load Balancer (Standard SKU) for Layer 4 TCP traffic.
Azure Application Gateway (Standard v2 SKU) is correct because it operates at Layer 7, providing the required SSL/TLS termination and URL-path routing for HTTPS traffic. Azure Load Balancer (Standard SKU) is correct because it operates at Layer 4, providing high-throughput load balancing for custom TCP traffic on port 9500. Additionally, since the backend VMs use Standard SKU public IP addresses, using the Standard SKU Load Balancer avoids validation errors associated with mixing Basic and Standard SKUs.

Step-by-Step Solution

1
Analyze the web traffic requirements (HTTPS, URL-path routing, and SSL/TLS termination).
Determine that the HTTPS web traffic requires a Layer 7 load balancer. Identify Azure Application Gateway as the regional load balancer that supports SSL/TLS offloading and path-based routing.
Azure Application Gateway operates at the application layer (Layer 7) and supports URL-path routing and SSL offloading.
2
Analyze the custom TCP traffic on port 9500.
Determine that the TCP traffic requires a Layer 4 load balancer since it does not utilize HTTP/S protocols.
Azure Load Balancer is a high-throughput, low-latency Layer 4 load balancer that handles TCP/UDP traffic.
3
Evaluate the SKU compatibility requirements.
Select the Standard SKU for the Azure Load Balancer because the virtual machines are configured with Standard SKU public IP addresses.
Azure enforces strict SKU matching rules where Basic SKU and Standard SKU resources cannot be mixed in the same configuration.

Key Concept

Selecting and combining Azure load balancing services based on layer features (Layer 4 vs Layer 7) and SKU compatibility requirements.
Rate this question