What Azure Services Can Help Distribute Connections to App1 on Azure Virtual Machines? | Exam AZ-104 Study Guide
Question
You have an Azure subscription.
Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.
You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.
You need to ensure that the connections to App1 are spread across all the virtual machines.
What are two possible Azure services that you can use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D. E.AE
Network traffic from the VPN gateway is routed to the cloud application through an internal load balancer. The load balancer is located in the front-end subnet of the application.
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview https://docs.microsoft.com/en-us/azure/application-gateway/overviewTo ensure that the connections to App1 are spread across all the virtual machines, we can use either an internal load balancer or an Azure Application Gateway.
Internal Load Balancer: An internal load balancer (ILB) is used to distribute incoming network traffic among multiple virtual machines. The ILB is designed to handle traffic that originates from within the virtual network, allowing you to route traffic to specific virtual machines based on various criteria such as round-robin, source IP address, or session persistence. To use ILB for distributing traffic to the virtual machines hosting App1, you can create a load balancer rule for the required ports, protocols, and backend pool consisting of the virtual machines. The ILB distributes incoming traffic to the virtual machines based on the rule and the selected algorithm. It can be used to balance traffic for any TCP or UDP-based protocol.
Azure Application Gateway: Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. It provides routing, SSL termination, and Web Application Firewall (WAF) capabilities. With Application Gateway, you can distribute incoming HTTP and HTTPS traffic among multiple virtual machines running App1. It supports various algorithms like round-robin, hash-based, and session affinity to distribute traffic to backend pools. It also provides advanced features like URL-based routing and SSL offloading.
In conclusion, an internal load balancer and Azure Application Gateway are two possible Azure services that can be used to ensure that the connections to App1 are spread across all the virtual machines. An internal load balancer is ideal for distributing any TCP or UDP-based protocol, while the Azure Application Gateway is suited for distributing HTTP and HTTPS traffic to web applications.
