Brilliant video - I was struggling to understand the purpose and use case scenario for this, but this demo is excellent, I get it now - thanks for sharing.
Thanks for this informative video Dean! Appreciate the efforts that you take for creating such a nice content. There have been lot of request(s) from the community for creating a video on Azure Traffic Manager, I would suggest that RU-vid has tons of videos on Azure traffic manager but most of the videos have been recorded by people long back or back in days when we didn't had routing methods like Multivalue or Subnet. It will be nice, if you can prepare a video which will outline any use cases around MV and Subnet. The other routing methods are pretty straight forward and easy to understand but the documentation around MV and Subnet doesn't really make lot of sense from understanding point of view and from implementation point of view.
Hi Dean, great video! Not sure if it's the purpose of your videos, but I would like to see included the costs and recommended use cases for things like Front Door , when should be used over other applications (that can achieve similar or exact same thing). Also more complex scenario(s) follow-up video would be great.
Thanks, does this look like the kind of complex scenario you are thinking? miro.medium.com/max/4478/1*l6nKvsPHq-DnarfnBBikRg.png Also when to use it was covered in the video, but the first question is do you need a regional service, or a global one second what kind of service are you providing is it layer 4, layer 7, or just DNS, what kind of security do you need? If it is a global service that is layer 7 Front Door is your service
Hi, thanks for the reply and the scenario looks interesting. Regarding the use cases, I would like to see more real life scenarios (if you have any and it's possible to share) rather than having the definitions from docs.microsoft.com in a video. It's great content, especially for me as I'm just starting to discover Azure, but the way your videos are built seem to be for experienced azure engineers/architects. As a beginner, it's difficult to understand when I should choose one resource over the other especially since nowadays it's all about the costs. In very large environments, it might make a sense to use similar resources like Front door, CDN, Traffic Manager, but, at least I, don't have access to those. This is just a personal view. Cheers, Ciprian
Thanks for sharing Ciprian! We want to make the Azure Academy accessible to everyone. can you help me think of how we can make a video that would help you where you are as a beginner and grow into our regular content?
Hi Dean, for me, it's easier to understand how something works and fits in a design by seeing actual implementations. This is why I was asking if you could present a design or actual production implementation of the resource discussed in the video. Not sure if this applies to everyone but this is how I learn best. I work with Azure at a small scale and a lot of the topics are difficult to understand in a way of shouls i start use it or not. Also, it eould be great if you could include a minute or 2 in each video to discuss the price involved. I know about the calculator but maybe you can spare some thoughts based on your experience. Cheers, Ciprian
pricing is a tough topic to go into, specifically because each situation is different. The way you configure resources can impact cost...so I have learned that when I have covered pricing...more than the calculator that it can set wrong expectations for people...so if I mention cost now, I generally reference the Azure price calculator and leave it at that.
This is a good video . Thank you . Could you please create videos on below topics ? 1. CDN 2.Service EndPoint 3.Service Tag Also please show after creating a privateendpoint for blob storage ,how we can access the files from a Azure VM ?
Hi Dean, great videos!!! Have you considered creating a play list for Azure certifications? Or in the comments/ or opening titles, consider adding the objectives and domains the instructional videos map to for the AZ certifications like AZ-104. Thank you as always for the videos!!
That is a very good idea...however I don't have the AZ Certification tests or materials...I have a 4 certs, but I also don't see a lot of value in certifications. A Certification to me means that you knew how to pass a test. It does not mean that you know what you are doing in the real world. Several years ago the term "Paper MCSE" was popular to mean people who passed the MCSE Exam but had no idea what anything meant. One of my managers took the MCSE and passed because they knew how to memorize for a test...they weren't even an IT Person. He still didn't know how to edit the registry or configure TCP/IP. 😁 but If you have the training materials...I would be happy to check it out for creating a video series.
@@AzureAcademy Thanks for the honest and candid response.. sadly.. organizations are looking to their associates to get certified. Microsoft even rewards/recognizes their partners for the volumes of 'certified' employees. To my understanding MS is now moving towards role-based certifications and the exams leverage more business-case scenarios and questions. 'critical thinking' some might say. I currently use the Microsoft Learn modules, but one can only read so much; demos and discussions such as yours are awesome, especially if you implement use case and troubleshooting scenarios. I think this might be why mapping your videos to the exam domains would add additional value to the learning for administrators and those seeking certification... I also believe it would increase your already 'large-following' of viewers :-) And hey, who doesn't want more viewers right ?!!
Agreed. My point is I find credentialing is a terrible measure of competence. IMHO knowledge and Experience trumps certifications. If I hire you to do a job and you have a dozen certs because you know how to study and pass tests, but never touched a Computer…It isn’t going to end well. And I’ve worked with lots of those people
Thanks for Subscribing @Saif Welcome! Share The Azure Academy with others...and let me know what other videos you are interested in...and I will work on them! #HappyLearning
Great content. What are preferred WAF configurations for Odata in case of prevention? Odata is often a false positive for sequel injections any recommendations how we could handle this?
Great video! Will Front Door also work with an SQL Server in both locations with a geo-replicated database with a failover group? So if a POP fails in the primary location, will it cause the SQL server to failover and redirect traffic to the secondary site?
this is a great question...I am going to add it to our Live Q&A that you can view here...please share this with anyone you think is interested in learning more about Azure -- Join us for a LIVE Q&A on June 11th 1:00pm EST - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-cwpGiZilEnA.html
Thanks for the good explaination and a great content on front door. I was facing trouble while enabling the authentication and authorisation though azure ad to the webapps in the backend pools. The backend health is going down to zero percentage and the frontend host URL is redirecting to the backend pool webapp URL. Please help me out....
Hi Dean, thanks for the content....Just few queries as in the demo App VMs were having dedicated Public IP, so can you please help me with how the communication is going for Front Door fqdn and one more thing how does it differ from CDN. Regards
Difference between front door and a CDN is the way your Contant is presented to the Internet Front door is layer 7 http/https web traffic A CDN is to deliver files and make the files accessible from multiple endpoints around the world
@@AzureAcademy Hi Dean...thanks for the info. What i think is that if possible can you please start a series on case studies of migrating and implementing user requirements on Azure....what i mean is how to design and architect Azure infra on the basis of requirements like green field or lift n shift will be very helpfull.
There are thousands of scenarios like that…the issue in scenarios is that they are not applicable to a wide audience…so I can cover architecting solutions if that helps…which you can plug the principals into all scenarios…?
@@AzureAcademy Hi Dean,thanks for the response. What i think is that,you can showcase scenarios related to like how we have network design in on-prem with any kind of web vm's connecting to database and storage in backend over the network and then the traffic from the internet is getting load balanced in the data center or via global load balancer,implementing necessary firewall abd waf rule, few vpn connections....and taking this entire same thing over Azure cloud. What i mean is architecting and implementing this all on Azure cloud one single video or in pieces will be very helpful....Because what i had observed is that still wast majority of people has questions on how to interconnect this all over the cloud.
Front door keeps failing Our services aren't available right now. We're working to restore all services as soon as possible. Please check back soon. Please help!
very useful video as usual, just I noticed a small error when configuring the custom rule in the firewall, the rule says: if the traffic is from the 4 selected (you said European) countries then Deny it. but in the demo the traffic was from Asia and was denied , did I miss something ? :)
Good eye Rachid! Yes and no, I called the rule UK however remember I blocked several countries in that rule because I said I wasn’t exactly sure where my VPN would connect me. After I connected the VPN I saw what country I was connecting in...which happened to be in Asia and I added that to the block list. Thanks for paying such close attention!
@@AzureAcademy you are welcome, thank you for clarifying. by the way, the introduction where you gave a helicopter view about the different load balancers is amazing, keep it up !
Thanks for the insightful video. I have been trying to put AFD into our application hosted globally. Confusion that I have is, whether to route my Api calls also using AFD or use cdn dynamic acceleration to gain performance. Global Waf is not a consideration currently, it is set up seperately in each regions. Can you through some light on this?
sorry for the delay in my response...you should use AFD for routing your APIs (the same AFD resource can be used to host the whole application, including API calls). There are somethings being worked on to make this more straight forward for everyone Thanks again!
@@AzureAcademy Thanks for comments. I'm setting up AFDfor my application and using route based rules for transferring traffic. Already seeing a huge improvement in latency
Load balancer doesn't allow you to scale. It does what its' name says, it load balancers. Should one of your backend pools contain a scales set, then you can scale to meet the workloads. The scaleset allows you to scale in and out not the load balancer
True a load balancer is not a way to scale compute but it is how you scale connections to scale sets or the back end pool. But scaling is not limited to scale sets You can scale with VMs in your back end pool...but which is right depends on the app. Web sites on scale sets work well SQL on scale sets don’t
How would I ensure that traffic from a WAF enabled Frontdoor is not bypassed? Ex. a malicious actor would setup their own FD and send traffic through that, bypassing an NSG limiting inbound traffic to AzureFrontdoor.Backend service tag
A combination of ACL and a FDID header: docs.microsoft.com/en-us/azure/frontdoor/front-door-faq#how-do-i-lock-down-the-access-to-my-backend-to-only-azure-front-door
When more than 1 web app sits behind the front door however, I was seeing the page not rendering correctly, giving different versions of the page. Also when the authentication and authorisation is enabled, the frontdoor URL is exposing or redirecting to the backend pool (webapps) URL. Also when the authentication and authorisation is enabled, the frontdoor URL is exposing or redirecting to the backend pool (webapps) URL.
For the authentication, that MIGHT be the correct behavior...I believe that depends on how your app is configured. But it sounds like you expected something in front door to do Auth for you?
Great Video 😊, Question : Can we configure two different API Gateways e.g 1) Azure Api Management & 2) AWS Api Gateway as backend services behind the Azure Front Door and load balance across in Active Active scenario ?.
I have not worked with those resources specifically...but from what I can see you can add API Management and also custom ip addresses as part of the backend pool...and you have have multiple backends in the same Front Door service...so I think so...but you would have to test.
@@AzureAcademy thanks for the reply and info, Multiple backend means i can configure any platform services not limited with azure service only, i can use AWS and Azure mix up right ?
since you can use a custom IP...I would think you could use an AWS service...however I have never tested that...so I am not 100% sure. Try it and let all of us know!
Front Door is layer 7 traffic. According to the ISO model, which shows how data moves over a network, layer 7 is the Application Layer. This is the layer of http and https. If you need to provide load balancing at that layer and do so globally Front Door is your tool. Traffic Manager is a global DNS load balancer. It is used to provide a single name that can be referenced no matter where you are. Another major difference is that the Front Door also has a Web Application Firewall, Traffic Manager does not. You can use these solutions together...as well...check out this diagram. miro.medium.com/max/4478/1*l6nKvsPHq-DnarfnBBikRg.png Traffic manager is providing a single DNS name for the backend storage accounts but Front Door is providing a single FQDN for 2 application gateways and app services...which are also layer 7
@@AzureAcademy Front door also has much better routing rules than app gw can do, and also you can create a WAF policy for each frontend, whereas an app gw can only have a single WAF policy.
