Azure Load Balancer | Securely Distribute Network Traffic with HTTPS, Round Robin Routing, and SSL Offloading

Secure Load Balancing for Azure Solution

Question

You are designing an Azure solution.

The network traffic for the solution must be securely distributed by providing the following features:

-> HTTPS protocol

-> Round robin routing

-> SSL offloading

You need to recommend a load balancing option.

What should you recommend?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

If you are looking for Transport Layer Security (TLS) protocol termination ("SSL offload") or per-HTTP/HTTPS request, application-layer processing, review

Application Gateway.

Application Gateway is a layer 7 load balancer, which means it works only with web traffic (HTTP, HTTPS, WebSocket, and HTTP/2). It supports capabilities such as SSL termination, cookie-based session affinity, and round robin for load-balancing traffic. Load Balancer load-balances traffic at layer 4 (TCP or UDP).

https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-faq

Based on the requirement of HTTPS protocol, round robin routing, and SSL offloading, the recommended load balancing option for this Azure solution is the Azure Application Gateway (option D).

Here is the detailed explanation for each of the load balancing options:

Option A: Azure Load Balancer Azure Load Balancer is a Layer 4 load balancer that can distribute traffic to virtual machines or other resources within a virtual network. It supports TCP and UDP protocols, but it does not provide SSL offloading. Therefore, it cannot meet the requirement of SSL offloading mentioned in the question.

Option B: Azure Traffic Manager Azure Traffic Manager is a DNS-based traffic routing service that can distribute traffic across different regions or endpoints. It supports HTTPS protocol, but it does not provide round robin routing or SSL offloading. Therefore, it cannot meet the requirements mentioned in the question.

Option C: Azure Internal Load Balancer (ILB) Azure Internal Load Balancer is a Layer 4 load balancer that can distribute traffic to resources within a virtual network. It supports TCP and UDP protocols, but it does not provide SSL offloading. Therefore, it cannot meet the requirement of SSL offloading mentioned in the question.

Option D: Azure Application Gateway Azure Application Gateway is a Layer 7 load balancer that can distribute traffic to web servers, and it provides advanced features such as SSL offloading and round robin routing. It supports HTTPS protocol, and it can offload SSL processing from web servers, which can improve the performance and scalability of web applications. Therefore, it can meet all the requirements mentioned in the question.

In summary, based on the requirements of HTTPS protocol, round robin routing, and SSL offloading, the recommended load balancing option is Azure Application Gateway (option D).