Exam AZ-305 topic 3 question 9 discussion

Correct answer A https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview Front Door is an application delivery network that provides global load balancing and site acceleration service for web applications. It offers Layer 7 capabilities for your application like SSL offload, path-based routing, fast failover, caching, etc. to improve performance and high-availability of your applications. Traffic Manager does not provide SSL Offloading. And the other options are not global options (multi-region)

Correct answer A

High Availability: Azure Front Door provides global load balancing and failover capabilities. It can route traffic to the closest healthy AKS cluster based on latency or priority, ensuring applications remain available even if one AKS cluster fails. SSL Offloading: Azure Front Door can terminate SSL connections at the edge, meaning it handles SSL/TLS encryption and decryption. This relieves the AKS clusters and their containers from having to manage SSL certificates directly, simplifying deployment and management. Global Scalability: Front Door is designed to handle global-scale traffic and can optimize the delivery of web applications by caching content closer to the users, thereby improving performance and reducing latency.

AZ FD supports both HTTP and HTTPS and global Traffic Manager is Global but it is DNS based and doesn't encrypt traffic other two are NOT regional more like local i.e. per regions (can be xcross region but you need multiple)

Correct answer A https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks-multi-region/aks-multi-cluster AKS Ingress controller - It is a component of the AKS cluster and not a service to handle traffic between 2 or more AKS clusters. An Ingress controller abstracts away the complexity of Kubernetes application traffic routing and provides a bridge between Kubernetes services and external ones.

A is correct, see blueprint: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/containers/aks-multi-region/aks-multi-cluster

An AKS Ingress controller is a Kubernetes resource that allows the management of external access to the services in an AKS cluster. It provides traffic routing and load balancing for inbound traffic to the applications running in the cluster. By using an AKS Ingress controller, you can ensure that the applications remain available if a single AKS cluster fails. The controller can route traffic to the remaining available AKS cluster(s), ensuring that the application remains available to users. Additionally, an AKS Ingress controller supports SSL/TLS encryption of internet traffic, which ensures that the connection traffic over the internet is encrypted by using SSL without having to configure SSL on each container.

Azure Front Door is also a viable option for providing traffic routing, load balancing, and failover across multiple regions. It can provide SSL termination and caching for faster performance. However, compared to the AKS ingress controller, Azure Front Door is a higher-level service that operates at the HTTP/HTTPS layer and is optimized for HTTP traffic. It is typically used for web applications that require advanced routing, traffic management, and SSL offloading. On the other hand, the AKS ingress controller is a Kubernetes-native solution that operates at the layer 7 (HTTP) and layer 4 (TCP) level, and can provide more granular control over traffic routing and application-level routing rules. Therefore, the choice between Azure Front Door and AKS ingress controller ultimately depends on the specific requirements and characteristics of the applications being deployed. For applications running on Kubernetes, using the AKS ingress controller is often the most straightforward and cost-effective option.

Azure Traffic Manager is at DNS level so you have to configure SSL on every container.... -> Azure Front Door is the choice

azure front door

A is the answer. https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview#azure-load-balancing-services Front Door is an application delivery network that provides global load balancing and site acceleration service for web applications. It offers Layer 7 capabilities for your application like SSL offload, path-based routing, fast failover, caching, etc. to improve performance and high-availability of your applications.

I was surprised to find out that Traffic Manager doesn't support https. Can someone provide some good example of its usage?

https://github.com/phillipgibson/Cloud-Azure-AKS-Using-AFD-with-AKS#using-azure-front-door-service-afd-with-azure-kubernetes-service-aks-walkthrough

A. Azure Front Door

A. Azure Front Door

AKS Ingress Controller is part of App GW which is not Global.

Front Door support SSL offloading.