You are designing a solution that will include containerized applications running in an Azure Kubernetes Service (AKS) cluster.
You need to recommend a load balancing solution for HTTPS traffic. The solution must meet the following requirements:
✑ Automatically configure load balancing rules as the applications are deployed to the cluster.
✑ Support Azure Web Application Firewall (WAF).
✑ Support cookie-based affinity.
✑ Support URL routing.
What should you include the recommendation?
B
Much like the most popular Kubernetes Ingress Controllers, the Application Gateway Ingress Controller provides several features, leveraging Azure's native
Application Gateway L7 load balancer. To name a few:
✑ URL routing
✑ Cookie-based affinity
Secure Sockets Layer (SSL) termination
✑ End-to-end SSL
✑ Support for public, private, and hybrid web sites
✑ Integrated support of Azure web application firewall
Application Gateway redirection support isn't limited to HTTP to HTTPS redirection alone. This is a generic redirection mechanism, so you can redirect from and to any port you define using rules. It also supports redirection to an external site as well.
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/features
Answer B is correct. AGIC is configured via the Kubernetes Ingress resource, along with Service and Deployments/Pods. It provides a number of features, leveraging Azure’s native Application Gateway L7 load balancer. To name a few: URL routing Cookie-based affinity TLS termination End-to-end TLS Support for public, private, and hybrid web sites Integrated web application firewall https://docs.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview
Seems to be correct
It's c
Ans: C https://docs.microsoft.com/en-us/azure/aks/http-application-routing
does not support WAF and is not recommended for production environments. Not C
Seams right: AGIC is configured via the Kubernetes Ingress resource, along with Service and Deployments/Pods. It provides a number of features, leveraging Azure’s native Application Gateway L7 load balancer. To name a few: URL routing Cookie-based affinity TLS termination End-to-end TLS Support for public, private, and hybrid web sites Integrated web application firewall REF: https://docs.microsoft.com/en-us/azure/application-gateway/ingress-controller-overview
Answer (B) is correct
https://docs.microsoft.com/en-us/azure/application-gateway/features#ingress-controller-for-aks Application Gateway Ingress Controller (AGIC) allows you to use Application Gateway as the ingress for an Azure Kubernetes Service (AKS) cluster. Answer is B
https://docs.microsoft.com/en-us/azure/application-gateway/features#ingress-controller-for-aks
B. Application Gateway Ingress Controller (AGIC)
Seems C is correct. That meet all the requirements.
C definitely not the best answer. The HTTP application routing add-on is designed to let you quickly create an ingress controller and access your applications. This add-on is not currently designed for use in a production environment and is not recommended for production use. For production-ready ingress deployments that include multiple replicas and TLS support, see Create an HTTPS ingress controller. HTTPS ingress controller, which Microsoft uses NGNIX ingress controller as example in their document. NGNIX can do URL routing, but i'm not sure about cookie-based affinity etc. So i would choose application gateway ingress controller.
Appere on exam 23-dec-2021