You have an on-premises server named Server1 that runs Windows Server. Server1 contains an app named App1 and a firewall named Firewall1.
You have an Azure subscription.
Internal users connect to App1 by using WebSockets.
You need to make App1 available to users on the internet. The solution must minimize the number of inbound ports open on Firewall1.
What should you include in the solution?
To make App1 available to users on the internet while minimizing the number of inbound ports open on Firewall1, the best solution is Azure Relay. Azure Relay enables you to securely expose services that run on your on-premises server to the public cloud without opening a port on your firewall. This fits the requirement of minimizing inbound ports on Firewall1, while also facilitating the connectivity through WebSockets.
I choose C
The Azure Relay service
The Azure Relay service enables you to securely expose services that run in your corporate network to the public cloud. You can do so without opening a port on your firewall, or making intrusive changes to your corporate network infrastructure.... https://learn.microsoft.com/en-us/azure/azure-relay/relay-what-is-it So C looks correct.
C. Azure Relay: Azure Relay facilitates securely exposing services that run in your corporate network to the public cloud without requiring you to open a firewall connection, or require intrusive changes to a corporate network infrastructure. It creates a secure communication channel to the service, minimizing the need for open inbound ports.
Azure Application Gateway requires connection to the target server. On-premises network NOT connected to Azure by VPN. To use Application Gateway we need to open ports on firewall but " The solution must minimize the number of inbound ports open on Firewall1" Azure Relay is the best option here
I interrogated chatGPT and it gave me this answer. No, Azure Relay (option C) is not the ideal choice for this scenario. Azure Relay is designed for different use cases, such as securely connecting on-premises resources to Azure services or providing hybrid connectivity. For exposing an internal application to the internet via WebSockets and minimizing the number of open ports on your on-premises firewall, Azure Application Gateway (option B) is the more appropriate choice. Azure Application Gateway is designed for load balancing and securely publishing web applications, and it can handle WebSocket traffic effectively while maintaining security and control over inbound traffic.
ChatGPT = Not reliable research.
"I interrogated chatGPT" Good one :D
According to chatgpt, dyor. You have an on-premises server named Server1 that runs Windows Server. Server1 contains an app named App1 and a firewall named Firewall1. You have an Azure subscription. Internal users connect to App1 by using WebSockets. You need to make App1 available to users on the internet. The solution must minimize the number of inbound ports open on Firewall1. What should you include in the solution? A. Microsoft Application Request Routing (ARR) Version 2 B. Azure Application Gateway C. Azure Relay D. Web Application Proxy