BAUG Meetup #1 2022: Публикация ресурсов в Интернет в Microsoft Azure. Обзор технологий.
•Download as PPTX, PDF•
0 likes•94 views
Доклад #1. Публикация ресурсов в Интернет в Microsoft Azure. Обзор технологий. Публикуя ресурсы в Интернет, зачастую, мы сталкиваемся с проблемой выбора оптимальной технологии Azure, которая обеспечит безопасность, масштабирование и сценарии отказуостойчивости инфраструктуры. Что выбрать – Azure Traffic Manager, Azure Front Door, Azure Firewall, Azure Load Balancer, Azure Applications Gateway или просто опубликовать ресурс с динамическим или статическим IP адресом? Доклад содержит обзор вышеперечисленных технологий, а так же рекомендации по выбору подхода публикации ресурсов в Интернет. Докладчик: Дмитрий Дурасов. MVP (Azure), MCTS, MCSA, MCP, MCT (Alumni). Cloud Solution Architect in Akveo, Minsk, Belarus
Recommended
More Related Content
What's hot
What's hot (20)
Similar to BAUG Meetup #1 2022: Публикация ресурсов в Интернет в Microsoft Azure. Обзор технологий.
Similar to BAUG Meetup #1 2022: Публикация ресурсов в Интернет в Microsoft Azure. Обзор технологий. (20)
More from Dzmitry Durasau
More from Dzmitry Durasau (10)
Recently uploaded
Recently uploaded (20)
BAUG Meetup #1 2022: Публикация ресурсов в Интернет в Microsoft Azure. Обзор технологий.
- 2. Hello
- 3. Agenda
- 4. 1. Intro
- 5. 2. Public IP Address
- 6. 2.1. Public IP Address https://docs.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses
- 7. 2.2. Public IP Address
- 9. 3.1. Load Balancer •Standard load balancer is built on the zero trust network security model. •Standard Load Balancer is secure by default and part of your virtual network. The virtual network is a private and isolated network. •Standard load balancers and standard public IP addresses are closed to inbound connections unless opened by Network Security Groups. NSGs are used to explicitly permit allowed traffic. •Basic load balancer is open to the internet by default. •Load balancer doesn't store customer data https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
- 10. 3.2. Load Balancer Load balancer or reverse proxy Apache NiFi cluster nodes Azure Key Vault Azure Monitor Alerts Log Analytics Metrics + Logs Azure DevOps Apache NiFi cluster nodes Apache NiFi cluster nodes Apache ZooKeeper node 1 Apache ZooKeeper node 2 Apache ZooKeeper node 3 Azure Active Directory https://docs.microsoft.com/en- us/azure/architecture/example- scenario/data/azure-nifi
- 16. 5.2. Azure Firewall https://docs.microsoft.com/en-us/azure/architecture/example-scenario/security/hardened-web-app Azure Front Door Azure Firewall Private Endpoint Web App Spoke Virtual Network Hub Virtual Network AzureFirewallSubnet subnet-webapp Private Link Subnet backend.contoso.com App Service Regional Vnet Integration, Route All enabled Route Table Private DNS Zone Private Endpoint Spoke Virtual Network subnet-privatelink Azure SQL
- 17. 5.3. Azure Firewall Azure Bastion Azure Firewall Azure Firewall Public IP Internet AKS Cluster Public Standard Load Balancer AKS Cluster Internal Standard Load Balancer Route Table Azure Container Registry Azure Key Vault Azure Storage Account Virtual Machine Private Endpoint Private Endpoint Private Endpoint Private AKS Cluster Private DNS Zone privatelink.blob.core.windows.net Private DNS Zone privatelink.vaultcore.azure.net Private DNS Zone privatelink.azurecr.io DNAT Rule DNAT Rule UDRs Private DNS Zone privatelink.region.azmk8s.io Monitoring Private Connection Virtual Network Link HTTPS traffic Azure Bastion Public IP SSH Virtual Network Peering Virtual Network Peering SSH traffic Private Endpoint Kubernetes API Server Azure Log Analytics
- 21. 7. Azure Front Door
- 22. Azure Front Door Protocols: HTTP, HTTPS, and HTTP/2 • TLS/SSL offloading and end-to-end TLS • web application firewall (WAF) • cookie-based session affinity • URL path-based routing • free certificates • multiple-domain management
- 23. 7. 1. Azure Front Door
- 24. 7.2. Azure Front Door with Azure CDN Azure CDN Azure SQL Database Azure Search Queue Redis cache Cosmos DB Web front end Function App Data storage App Service plan Web App Static content Blob Resource group Internet Azure DNS Azure Active Directory Authentication DNS lookup Azure Front Door
- 25. 7.3. Azure Front Door SKU Comparison https://docs.microsoft.com/en-us/azure/frontdoor/standard-premium/tier-comparison •Azure Front Door Standard SKU is: • Content delivery optimized • Offering both static and dynamic content acceleration • Global load balancing • SSL offload • Domain and certificate management • Enhanced traffic analytics • Basic security capabilities •Azure Front Door Premium SKU builds on capabilities of Standard SKU, and adds: • Extensive security capabilities across WAF • BOT protection • Private Link support • Integration with Microsoft Threat Intelligence and security analytics.
- 26. 7.4. Azure Front Door SKU Comparison
- 27. 8. Summary
- 29. Questions and Thank you! Dzmitry Durasau Dzmitry_Durasau@azuregeeks.com https://www.linkedin.com/in/ddurasau https://www.facebook.com/groups/AzureBelarus/ Organizing an IT Community Conference: Tips and tricks