Migrating .NET Core Web Application to Azure | Solution Recommendation

Deploying the Web Application Using Azure Kubernetes Service (AKS)

Question

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are designing an Azure solution for a company that wants to move a .NET Core web application from an on-premises data center to Azure. The web application relies on a Microsoft SQL Server 2016 database on Windows Server 2016. The database server will not move to Azure.

A separate networking team is responsible for configuring network permissions.

The company uses Azure ExpressRoute and has an ExpressRoute gateway connected to an Azure virtual network named VNET1.

You need to recommend a solution for deploying the web application.

Solution: Deploy the web application by using an Azure Kubernetes Service (AKS) container on VNET1.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B

Instead, use VNet Integration.

Note: VNet Integration gives your web app access to resources in your virtual network. VNet Integration is often used to enable access from apps to a databases and web services running in your VNet.

https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

The solution recommended, which is to deploy the web application by using an Azure Kubernetes Service (AKS) container on VNET1, is not sufficient for meeting the stated goal.

The main issue with the recommended solution is that it does not address the fact that the database server will remain on-premises, which means that the web application will need to connect to it over the network. Additionally, the networking team is responsible for configuring network permissions, so it is important to consider their involvement in the solution.

While deploying the web application using AKS on VNET1 can provide a scalable and flexible platform for hosting the application, it does not address the networking requirements needed for the application to connect to the on-premises database server. AKS would still require a network connection to the on-premises data center, which raises concerns about network security and reliability.

To address these concerns, an appropriate solution would be to deploy the web application in Azure as an App Service that can connect securely to the on-premises SQL Server database using a virtual network gateway or a VPN connection. This would provide secure and reliable network connectivity between the web application and the on-premises database server, while also allowing the networking team to configure the necessary network permissions.

In summary, the recommended solution does not meet the goal because it does not address the need for the web application to connect securely to the on-premises database server. A more appropriate solution would be to deploy the web application as an Azure App Service that can connect to the on-premises database securely over a virtual network gateway or a VPN connection.