Soru

Zorluk: OrtaDesign Traffic Routing and Failover Strategies

You are designing a high-availability infrastructure for a multi-tier web application deployed across the East US and West US regions. The design must meet the following requirements:
- Route incoming client requests to the closest regional endpoint with low latency using Anycast routing.
- Terminate SSL/TLS sessions at the global routing layer.
- Within each region, distribute client requests to different backend pools based on the URL path (e.g., routing /api/* to an API tier and /web/* to a web tier).

Which two Azure services should you include in your traffic routing and failover design to meet these requirements?

  1. Azure Front DoorCevap
  2. Azure Application GatewayCevap
  3. C
    Azure Traffic Manager
  4. D
    Azure SQL Database auto-failover groups

Cevap

Azure Front Door and Azure Application Gateway
Azure Front Door provides global Anycast-based routing and edge SSL termination, satisfying the requirement to handle global traffic at the edge. Azure Application Gateway operates regionally at Layer 7 and supports URL path-based routing, satisfying the requirement to distribute traffic to specific backend pools based on paths within each region. Together, they form a complete multi-tier routing architecture.

Adım Adım Çözüm

1
Evaluate the requirement for global load balancing, low-latency Anycast routing, and SSL termination at the edge.
This requires a global Layer 7 load balancer. Azure Front Door meets these criteria.
Traffic Manager is DNS-based and cannot offload SSL, while regional load balancers cannot provide Anycast routing globally.
2
Evaluate the requirement for regional routing based on URL paths (such as /api/* and /web/*).
This requires a regional Layer 7 load balancer inside the VNets. Azure Application Gateway meets these criteria.
URL path-based routing requires application-layer (Layer 7) packet inspection, which is a native capability of Application Gateway.
3
Combine the services to form the end-to-end design.
Azure Front Door acts as the entry point for global clients and routes traffic to Azure Application Gateways in each region.
This tiering provides global routing and protection at the edge (Front Door) and fine-grained internal routing within VNets (Application Gateway).

Anahtar Kavram

Combining global and regional Layer 7 load balancing for optimal routing, SSL offloading, and path-based delivery.
Tahmini Süre:1m 30s
Bu soruyu puanla