Soru

Zorluk: OrtaDesign Traffic Routing and Failover Strategies

An organization is designing a high-availability solution for an enterprise web application deployed across the East US and West US regions. The design must meet the following requirements:
- Web traffic must be routed to the closest region to minimize latency for users.
- Secure Sockets Layer (SSL) termination must be handled at the global entry point to offload cryptographic processing from the backend servers.
- The solution must support URL path-based routing to direct traffic for `/static/*` and `/api/*` to different backend pools.
- Health monitoring must detect a regional outage and failover traffic within 30 seconds.

Which two actions should you include in the design to meet these requirements?

  1. Deploy Azure Front Door to route client requests globally and perform SSL termination at the edge.Cevap
  2. Configure Azure Front Door health probes with a probe interval of 20 seconds.Cevap
  3. C
    Deploy Azure Traffic Manager with a priority routing policy to perform SSL offloading at the global level.
  4. D
    Use Azure Traffic Manager to parse incoming URL paths and route requests to the regional endpoints.

Cevap

Deploy Azure Front Door to route client requests globally and perform SSL termination at the edge, and configure Azure Front Door health probes with a probe interval of 20 seconds.
Deploying Azure Front Door satisfies the Layer 7 requirements, including SSL termination at the edge and URL path-based routing, because Front Door is a global HTTP/HTTPS load balancer. In addition, setting the health probe interval to 20 seconds allows Azure Front Door to detect backend failures and failover traffic within the 30-second requirement.

Adım Adım Çözüm

1
Evaluate the requirement for SSL termination and URL path-based routing at the global load balancing layer.
Identify that Azure Front Door operates at Layer 7 (HTTP/HTTPS) and natively supports both SSL offloading and path-based routing, whereas Azure Traffic Manager operates at the DNS level and cannot perform these functions.
This allows for the elimination of DNS-based routing solutions for Layer 7 features.
2
Determine the configuration needed to meet the failover time constraint of under 30 seconds.
Select a health probe interval of 20 seconds for the global load balancer to ensure unhealthy endpoints are detected and bypassed within 30 seconds.
Fast detection requires frequent health probe intervals so that the system reacts quickly to regional failures.

Anahtar Kavram

Azure Front Door provides Layer 7 global routing, SSL offloading, and rapid failover via Anycast and customizable health probes, whereas Azure Traffic Manager is a DNS-level routing mechanism that does not inspect HTTP traffic.
Bu soruyu puanla