An organization is designing a regional web application hosted on Azure Virtual Machines in the West US region. The architecture must satisfy the following requirements:
- Provide URL path-based routing to direct traffic to different backend pools.
- Support SSL/TLS termination at the load balancer.
- Ensure that the backend virtual machines are not accessible from the public internet.
The existing virtual machines are currently configured with Basic SKU Public IP addresses.
Which load balancing configuration should you recommend to meet the requirements?
- Remove the Basic SKU Public IP addresses from the virtual machines and deploy Azure Application Gateway.Cevap
- BAssociate the virtual machines using their existing Basic SKU Public IP addresses with a Standard SKU Azure Load Balancer.
- CDeploy Azure Traffic Manager to route incoming client traffic to the virtual machines based on the URL path.
- DDeploy Azure Front Door and configure it to route traffic directly to the private IP addresses of the virtual machines.
Cevap
Remove the Basic SKU Public IP addresses from the virtual machines and deploy Azure Application Gateway.
The correct option is to remove the Basic SKU Public IP addresses and deploy Azure Application Gateway. Azure Application Gateway is a regional Layer 7 load balancer that supports URL path-based routing and SSL/TLS termination. It interacts with the backend virtual machines using their private IP addresses, which allows the public IP addresses to be removed from the virtual machines, ensuring they are not directly exposed to the public internet.
Adım Adım Çözüm
Anahtar Kavram
Application-layer load balancing using Azure Application Gateway