AZ 700T00A ENU PowerPoint - 05

AZ-700T00A
Load balancing HTTP(S) traffic in

Azure
© Copyright Microsoft Corporation. All rights reserved.

Module Overview
• Design Azure Application Gateway

• Configure Azure Application Gateway
• Exercice: Deploy Azure Application Gateway
• Design and configure Azure Front Door
• Exercise: Create a Front Door for highly available web application using the
Azure portal

Design Azure Application
Gateway

Design Azure Application Gateway overview
• Application Gateway features
• Determine Application Gateway Routing
• Choosing an Azure App Gateway SKU
• Application Gateway configuration planning
• Learning Recap

Application Gateway features
The web servers can be Azure virtual

Manages web Routes traffic to a pool of web servers machines, Azure virtual machine scale
app requests based on the URL of a request sets, Azure App Service, and even
on-premises servers
Determine Application Gateway Routing
Path-based routing Multiple-site routing

Choosing an Azure App Gateway SKU
• Application Gateway Standard (V2) can be

configured for autoscaling or fixed size
deployments.
• V2 SKU doesn't offer different instance sizes
• List of Application Gateway service limits
The Application Gateway

Average back-end Small Medium Large
Standard (V1) is offered
page response size
in three
sizes: Small, Medium, 6 KB 7.5 Mbps 13 Mbps 50 Mbps
and Large. Small instance
sizes are intended for 100 KB 35 Mbps 100 Mbps 200 Mbps
development and testing
scenarios.
Application Gateway configuration planning

Learning Recap – Design Azure Application Gateway
What is Azure Application Gateway | Microsoft Docs

Check your Load balance your web service traffic with Application Gateway –
knowledge Learn | Microsoft Docs
questions and
additional
study

Configure Azure Application
Gateway

Configure Azure Application Gateway Overview
• Configure Application Gateway • Associated back-end pool
• Configure Health Probes • Configure URL-based routing
• Configure Listeners • Configure rewrite policies
• Redirection Overview • Demonstration
• Application Gateway Request routing rules • Learning Recap

Configure Application Gateway
Frontend IP
Listeners
Routing rules
Backend pools
Web application
firewall (optional)
Health probes
Configure health probes
Default health probe
Custom health probe
Probe matching

Configure listeners
Basic or Multi Site
Order of Processing Listeners
Frontend IP address
Frontend Port
Protocol HTTP or HTTPS

Redirection overview
Global redirection: Redirects from one listener to

another listener on the gateway. This enables HTTP to
HTTPS redirection on a site
The following types of redirection are
supported:
Path-based redirection: Enables HTTP to HTTPS
• 301 Permanent Redirect
redirection only on a specific site area, for example a
• 302 Found
shopping cart area denoted by /cart/*.
• 303 See Other
• 307 Temporary Redirect
Redirect to external site: Requires a new redirect

configuration object, which specifies the target listener
or external site to which redirection is desired

Application Gateway Request routing rules
Rule Types: Associated listener Associated back-end pool
Basic Associate a listener to the rule basic rule: one back-end pool
Path-based so that the request-routing is allowed. All requests on the
rule that's associated with the associated listener are
listener is evaluated to forwarded to that back-end
Order of processing rules determine the back-end pool pool.
For the v1 and v2 SKU, pattern to route the request to.
matching of incoming requests path-based rule: multiple
back-end pools correspond to
is processed in the order that
each URL path. Requests that
the paths are listed in the URL
match the URL path are
path map of the path-based
forwarded to the
rule.
corresponding back-end pool.

Configure URL Path-based routing
URL Path Based Routing allows

you to route traffic to back-end
server pools based on URL Paths
of the request

Configure rewrite policies
A rewrite rule set contains:

Request routing rule association
Rewrite Condition
Rewrite type
o Rewriting request headers
o Rewriting response headers
o Rewriting URL components:
o URL path
o URL Query String
o Re-evaluate path map

Demo
• Create an application gateway

• Add backend targets
• Test the application gateway

Learning Recap – Configure Azure Application Gateway
Introduction to Azure Application Gateway

Check your
knowledge Load balance your web service traffic with Application Gateway
questions and Load balance HTTP(S) traffic in Azure
additional
study Encrypt network traffic end to end with Azure Application Gateway

Exercise: Deploy Azure
Application Gateway

Exercise – deploy Azure Application Gateway
•Task 1: Create an application

gateway
•Task 2: Add backend targets
•Task 3: Add backend servers to

backend pool
•Task 4: Test the application

gateway

Learning Recap – Deploy Azure Application Gateway
What is Azure Application Gateway | Microsoft Docs

Check your Quickstart: Direct web traffic using the portal – Azure Application Gatew
knowledge ay | Microsoft Docs
questions and
additional
study

Design and configure Azure
Front Door

Design and Configure Azure Front Door Overview
• What is Azure Front Door • Configure health probes
• Azure Front Door Standard and Premium • Secure Front Door with SSL and end-to-end
SSL encryption
• Create a Front Door in the Azure portal
• Demo
• Configure routing and redirection rules
• Learning Recap
• Configure an origin (Backend)

What is Azure Front Door
Global, scalable entry-point that uses the
Microsoft global edge network to create fast,
secure, and widely scalable web applications
Accelerated application performance by using

split TCP-based anycast protocol
Intelligent health probe monitoring for

backend resources
URL-path based routing for requests
Enables hosting of multiple websites for

efficient application infrastructure
Azure Front Door Standard and Premium
Azure
CDN
Azure Front Door Azure Front Door

Standard and
Premium SKU
Azure WAF
Azure Front Door Standard SKU:

Azure Front Door Premium SKU builds on
• Content delivery optimized
capabilities of Standard SKU, and adds:
• Static and dynamic content acceleration
• Extensive security capabilities across WAF
• Global load balancing
• Bot protection
• SSL offload
• Private Link support
• Domain and certificate management
• Integration with Microsoft Threat Intelligence and
• Enhanced traffic analytics
security analytics.
• Basic security capabilities
Create a Front Door in the Azure portal
Quick Create or Custom Create
Select between Standard and Premium tier
Globally unique endpoint name
Select Origin type, for example: App

service or App Gateway
Configure routing and redirection rules
Routing architecture overview
Front Door matches the incoming request to the left-hand

side of the route. The right-hand side defines how Front Door
processes the request
Incoming match (left-hand side)

• HTTP Protocols (HTTP/HTTPS)
• Hosts (for example, www.foo.com, *.bar.com)
• Paths (for example, /*, /users/*, /file.gif)
Route data (right-hand side)

The decision of how to process the request, depends on
whether caching is enabled or not for the specific route
Configure an Origin (Backend)
Origin type
Host name
Origin host header
HTTP & HTTPS port

Configure health probes
Front Door supports the following HTTP

methods for sending the health probes:
GET: The GET method means retrieve

whatever information (in the form of an
entity) is identified by the Request-URI.
HEAD: The HEAD method is identical to GET

except that the server MUST NOT return a
message-body in the response. For new
Front Door profiles, by default, the probe
method is set as HEAD.

Secure Front Door with SSL and end-to-end SSL encryption
Create HTTP to HTTPS redirect

rule
Create a routing rule for HTTP to

HTTPS redirect
Add routing rule to handle the

HTTPS traffic
On the Route Details section, set

the Route Type to Forward.
Demonstration – deploy Azure Front Door
• Create two instances of a web app
• Create a Front Door for your application
• View Azure Front Door in action

Exercise: Create a Front Door
for a highly available web
application

Exercise: create a Front Door for a highly available web
application
Task 1: Create two instances of a

web app
Task 2: Create a Front Door for

your application
Task 3: View Azure Front Door

in action
Task 4: Clean up resources

Learning Recap – Deploy Front Door
Quickstart
Check your : Set up high availability with Azure Front Door Service – Azure portal |
Microsoft Docs
knowledge
questions and
additional
study

End of presentation

AZ 700T00A ENU PowerPoint - 05

Uploaded by

Copyright:

Available Formats

AZ 700T00A ENU PowerPoint - 05

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

AZ 700T00A ENU PowerPoint - 05

Uploaded by

Copyright:

Available Formats

AZ-700T00A

Load balancing HTTP(S) traffic in

© Copyright Microsoft Corporation. All rights reserved.

• Design Azure Application Gateway

© Copyright Microsoft Corporation. All rights reserved.

© Copyright Microsoft Corporation. All rights reserved.

• Application Gateway features

• Determine Application Gateway Routing

• Choosing an Azure App Gateway SKU

• Application Gateway configuration planning

© Copyright Microsoft Corporation. All rights reserved.

The web servers can be Azure virtual

© Copyright Microsoft Corporation. All rights reserved.

• Application Gateway Standard (V2) can be

The Application Gateway

© Copyright Microsoft Corporation. All rights reserved.

What is Azure Application Gateway | Microsoft Docs

© Copyright Microsoft Corporation. All rights reserved.

© Copyright Microsoft Corporation. All rights reserved.

• Configure Application Gateway • Associated back-end pool

• Configure Health Probes • Configure URL-based routing

• Configure Listeners • Configure rewrite policies

• Redirection Overview • Demonstration

• Application Gateway Request routing rules • Learning Recap

© Copyright Microsoft Corporation. All rights reserved.

Default health probe

Custom health probe

© Copyright Microsoft Corporation. All rights reserved.

Basic or Multi Site

Order of Processing Listeners

Protocol HTTP or HTTPS

© Copyright Microsoft Corporation. All rights reserved.

Global redirection: Redirects from one listener to

Redirect to external site: Requires a new redirect

© Copyright Microsoft Corporation. All rights reserved.

Rule Types: Associated listener Associated back-end pool

© Copyright Microsoft Corporation. All rights reserved.

URL Path Based Routing allows

© Copyright Microsoft Corporation. All rights reserved.

A rewrite rule set contains:

© Copyright Microsoft Corporation. All rights reserved.

• Create an application gateway

© Copyright Microsoft Corporation. All rights reserved.

Introduction to Azure Application Gateway

© Copyright Microsoft Corporation. All rights reserved.

© Copyright Microsoft Corporation. All rights reserved.

•Task 1: Create an application

•Task 2: Add backend targets

•Task 3: Add backend servers to

•Task 4: Test the application

© Copyright Microsoft Corporation. All rights reserved.

What is Azure Application Gateway | Microsoft Docs

© Copyright Microsoft Corporation. All rights reserved.

© Copyright Microsoft Corporation. All rights reserved.

• What is Azure Front Door • Configure health probes

© Copyright Microsoft Corporation. All rights reserved.

Accelerated application performance by using

Intelligent health probe monitoring for

URL-path based routing for requests