Azure App service, Key vault, Traffic Manager | Azure Job-Oriented Recap Day 8

In this post, I am going to share some quick tips, including Q/A’s and useful links from Azure Job Oriented Day 8 Training of our recently launched new batch of Microsoft Azure Job Oriented, in which we have 25+ hands-on labs in the course.

On our Day 8 Live Session, we covered  Azure App service, Key vault , Traffic Manager.

The last week In Day 7 session we covered about Azure SLA, Load Balancer, Application Gateway.

Two weeks before In Day 6 session we covered about Azure Firewall.

Three weeks before In Day 5 session we covered about Azure NSG,ASG and Bastion host.

Four weeks before In Day 4 session we covered about Azure VPN Gateway , Express Route.

Five weeks before In Day 3 session we covered about Azure Networking and VNet peering.

Six weeks before In Day 2 session we covered about Azure Resource Manager, Subscriptions, NSG, and PowerShell.

Seven weeks before In Day 1 session we covered about Azure Cloud Fundamentals, App Services, and Scaling Strategies.

What is Azure App Service?

The Azure App Service is a platform as a service(PAAS) which is  fully managed platform for developing, deploying, and scaling online and mobile applications. It supports several programming languages, offers continuous integration and delivery, automatic scalability, and integrated security, allowing developers to concentrate on code rather than infrastructure management.

Q1) What types of applications can I deploy with Azure App Service?

Ans. Web apps, APIs, mobile backends, and serverless functions are among the applications supported by Azure App Service.

Q2) What programming languages and frameworks are supported by Azure App Service?

Ans. Azure App Service supports multiple programming languages and frameworks, including .NET, Java, Python, Node.js, PHP, Ruby, and more.

Q3) How does scaling work in Azure App Service?

Ans. Azure App Service offers automatic scalability based on data such as CPU consumption, memory usage, and request count. You can also change the pricing tier or increase the number of instances to manually scale up or down.

Q4) How do I monitor the performance of my app in Azure App Service?

Ans. Azure offers monitoring and diagnostics tools, like as Application Insights, that allow you to measure performance, diagnose problems, and receive insights into how your application is working. Metrics such as response time, request rates, and error rates can be tracked.

What is Azure Key Vault?

Azure Key Vault is a  service that allows you to securely manage and control cryptographic keys, secrets, certificates, and other sensitive data used by your apps and services. Key Vault acts as a central repository for storing and managing these sensitive resources, assisting you in protecting your data and simplifying the key and secret management process. It includes features such as access control, versioning, auditing, and connection with other Azure services and applications, ensuring that your sensitive data is secure while still being conveniently accessible to authorized users and services.

Q1) What is a Key Vault key?

Ans. A cryptographic key used for encryption, decryption, signature, and verification is referred to as a Key Vault key. Azure Key Vault can produce and store keys, and it integrates with hardware security modules to give further security.

Q2) What is a Key Vault secret?

Ans. A Key Vault secret is a safe, named value that can hold sensitive data. Passwords, API keys, and connection strings are examples of secrets.

Q3) What is a Key Vault certificate?

Ans. A digital certificate such as a Key Vault certificate can be used for authentication, secure communication, and other purposes. Azure Key Vault enables you to securely import, manage, and use certificates.

Q4) How does Azure Key Vault manage access control?

Ans. Azure RBAC and access policies are used by Azure Key Vault to control who has access to keys, secrets, and certificates. Azure RBAC is a granular authorization system that lets you provide specific permissions to users, groups, and service principals. Access policies are an earlier authorization scheme that allows you to apply particular permissions to Key Vault security principals.

What is Azure Traffic Manager?

Azure Traffic Manager is a globally distributed, DNS-based traffic routing service. It allows you to improve the availability and responsiveness of your applications by routing user traffic to the most appropriate endpoints based on factors such as performance, failover, and geographic proximity. Traffic Manager improves application availability, load dispersion, and resilience by dispersing user requests across various Azure regions or external endpoints. As a result, it is suited for applications requiring high availability, better performance, and disaster recovery capabilities.

Types of Routing method

• Priority: It routes traffic to the highest-priority accessible endpoint. If the highest-priority endpoint is unavailable, traffic is routed to the endpoint with the next-highest priority. This strategy is frequently used in circumstances involving a primary endpoint and backup endpoints for failover.
  
• Weighted : It allows you to divide traffic among different endpoints based on weights that you designate. Higher weights are subjected to increased traffic. This is beneficial when you wish to direct a greater proportion of traffic to specific endpoints, possibly because of their capacity or capabilities.
  
• Performance: It directs traffic based on the latency or responsiveness of the endpoint. It directs traffic to the endpoint with the lowest latency or response time. This approach guarantees that users are delivered to the endpoint with the greatest performance for their location.
  
• Geographic: It is also known as Geo DNS, directs traffic based on the user’s geographical location. Based on their physical location, it routes users to the next available endpoint. This strategy is especially effective for improving user experience and reducing latency.
  
• Multivalue: You can configure numerous endpoints for a single DNS record using multivalue routing. The DNS response includes numerous IP addresses when queried, and the client selects one of the accessible endpoints. This technique is useful in situations where endpoints have identical capabilities.
• Subnet: Subnet routing directs traffic based on the incoming request’s source IP subnet. It’s beneficial in circumstances where specific subnets or regions must be steered to specified endpoints, giving you control over traffic distribution based on network topology.

Q1) Can I use Azure Traffic Manager for disaster recovery?

Ans. Yes, Azure Traffic Manager can be utilized in disaster recovery scenarios by routing traffic to a backup datacenter or region if the primary site fails.

Q2) What types of endpoints can I use with Azure Traffic Manager?

Ans. Endpoints in Azure Traffic Manager can be of two types: Azure endpoints, external endpoints . External endpoints point to resources outside of Azure, whereas Azure endpoints point to other Traffic Manager profiles. This enables the creation of more complicated traffic-routing schemes.

Q3) Is SSL/TLS encryption supported by Azure Traffic Manager?

Ans. Yes, SSL/TLS encryption is supported by Azure Traffic Manager. Endpoints can be configured using SSL/TLS certificates to ensure secure connection between clients and endpoints.

Q4) Can I monitor the health of my endpoints with Azure Traffic Manager?

Ans. Yes, Azure Traffic Manager sends health probes to your endpoints on a regular basis to monitor their health. If an endpoint is considered to be unhealthy, Traffic Manager can prevent traffic from being routed to it.

Frequently Asked Questions

Related/References

• [AZ-104] Microsoft Azure Administrator Exam: Everything You Need To Know
• Activity Guides/Hands-on Lab Exercise
• Cloud Services Model
• Cloud Computing – Overview & Benefits
• Azure Region and Availablity Zone
• How to create a free tier account on Azure
• Microsoft Azure Core Services For Beginners

Next Task For You

Begin your journey toward Mastering Azure Cloud and landing high-paying jobs. Just click on the register now button below to register for a Free Class on Mastering Azure Cloud: How to Build In-Demand Skills and Land High-Paying Jobs. This class will help you understand better, so you can choose the right path and clear the certification exam.