Up:: Microsoft Azure Developer Associate AZ-204 2023

Azure Front Door

08:23:22 Introduction
- Is a Traffic Manager, Traffic Accelerator, Global Load Balancer and Content Distribution Network (CDN)
- Features
  - Caching - like CDNs with rules and expiring policies
  - Resiliency - by distributing incoming traffic across multiple or different Azure Regions
  - Cookie-based session affinity - for restful applications when traffic needs to be redirected back to the same back-end (stateful)
  - Health probe - to determine the healthiest and closest back-end to the client request
  - Web Application Firewall (WAF) - protecting back-ends from malicious attacks and vulnerabilities
  - URL redirect - redirecting traffic based on:
    - Protocol, HTTP or HTTPS
    - Hostname
    - Path
    - Query String
  - URL rewrite - rewrite incoming requests to a different back-end request.
- Core Components
  - Profile
  - Endpoint
  - Origin Groups
  - Origin
  - Route
  - WAF policy
- Tiers
  - Standard (Delivery Optimized)
    - Content delivery
  - Premium (Security Optimized)
    - Everything in standard
- Routing
  - is the path that the HTTP Request will take to reach your backend service configured in Azure Front Door
  - Four traffic routing methods
    - Latency - request sent to lowest latency backends acceptable within a sensitivity range
    - Priority - requests are sent based on a user-defined number
    - Weighted - requests are distributed to backends according to the weight coefficients
    - Session Affinity - requests for the same end user gets sent to the same backend.
- Origin
  - is what AZure Front Door will point at to the end user
  - Origin is the endpoint that points to your backend
    - Supported origins
      - Azure Blob storage
      - Azure Storage
      - Cloud Service
      - App services
      - Static Web app
      - API Management (APIM)
      - Application Gateway
      - Public IP Address
      - Azure Traffic Manager
      - Azure Spring Cloud
      - Azure Container Instances (ACI)
      - Custom (provide a host name)
    - Priority
      - number between 1-5
      - lower number higher priority
      - backends can have the same priority number
    - Weights
      - split of traffic distribution between origins of the same priority
      - number between 1-1000
      - default is 50
- Origin Groups
  - Collection of origins
  - Origins must belong to an Origin Group
  - Allows you to apply
    - Health Probes - the health of your origins
    - Load Balancing Settings - balance your origins
  - For traffic to reach Origin Group, an Endpoint needs to be associated to the Origin Group via a Route
- Health Checks
  - Aka Health Probes
  - Feature under origin groups
  - pings origin to check if a healthy response is returned.
- Load Balancing Settings
  - Feature under Origin Groups
- Custom Domain Names
  - can associate multiple custom domain name
  - can use Azure DNS
- Endpoint Manager
  - Provides an overview of endpoints you’ve configured.
  - no relation to Microsoft Endpoint Manager (Security Service)
  - azurefd.net
- Routes
- Traffic Acceleration
  - Without make changes to application code, Azure Front Door can speed up global delivery of your application
  - It directs traffic to nearest edge location to onramp into the Azure Network
  - Traffic tha follows within the internal Azure Network travels at an accelerated speed while also taking the most direct path.
- Rule Sets
  - Allows you to customize how HTTP requests gets handled at the edge and provides a more controlled behavior to your web application
  - Conditions
    - Device Type
    - HTTP Version
    - …
  - Operators
    - Equal
    - Contains
    - RegEx
    - …
  - Actions
    - Cache Expiration
    - Cache key query string
    - Modify request/response header
    - URL Redirect
    - URL Rewrite
    - Origin Group override
08:42:36 Azure Front Door Follow Along