Derek DeJonghe - Application Delivery and Load Balancing in Microsoft Azure: Practical Solutions with NGINX and Microsoft Azure

by Derek DeJonghe and Arlan Nugara

Copyright 2021 OReilly Media, Inc.. All rights reserved.

Printed in the United States of America.

Published by OReilly Media, Inc. , 1005 Gravenstein Highway North, Sebastopol, CA 95472.

OReilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (https://oreilly.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or corporate@oreilly.com .

• Acquisitions Editor: Mary Preap
• Development Editor: Gary OBrien
• Production Editor: Daniel Elfanbaum
• Copyeditor: Arthur Johnson
• Proofreader: Piper Editorial LLC
• Indexer: Judith McConville
• Interior Designer: David Futato
• Cover Designer: Karen Montgomery
• Illustrator: Kate Dullea

• December 2020: First Edition

See https://oreilly.com/catalog/errata.csp?isbn=9781098115869 for release details.

The OReilly logo is a registered trademark of OReilly Media, Inc. Application Delivery and Load Balancing in Microsoft Azure, the cover image, and related trade dress are trademarks of OReilly Media, Inc.

The views expressed in this work are those of the authors, and do not represent the publishers views. While the publisher and the authors have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the authors disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work. Use of the information and instructions contained in this work is at your own risk. If any code samples or other technology this work contains or describes is subject to open source licenses or the intellectual property rights of others, it is your responsibility to ensure that your use thereof complies with such licenses and/or rights.

This work is part of a collaboration between OReilly and NGINX. See our statement of editorial independence.

978-1-098-11596-8

[LSI]

This book is intended for cloud solution architects and software architects looking to distribute load across multiple servers, applications, or regions within Microsoft Azure. Load balancing is used to improve performance and availability; however, the layer that is used to perform the load balancing action has evolved to become much more. This layer of a web application stack is known as the data plane, and it is used to transmit requests and connections to an application. The data plane can be used to validate, route, and manipulate inbound communication from clients to an application. By building up your control of this layer, you can optimize and facilitate your exact use case.

Throughout this book you will learn how load balancing and the data plane can be integral facets of your application delivery. We will discuss load balancing and application delivery in general before moving on to inform you about the available native options within Azure and explaining the software-based data plane solution known as NGINX (pronounced engine-ex), which can be used independently of your infrastructure provider. We will then discuss integrating NGINX with Azure and how native Azure services paired with NGINX can be complementary.

Once we have an understanding of the load-balancing data plane options available to us, well detail governance and monitoring of a given solution within Azure. Regarding this topic, well introduce the NGINX platform solution for control and configuration known as NGINX Controller. Finally, well wrap up with a section about security and how we can enable our data plane to be an invaluable asset in security and threat management.

While the examples and context will be specific to Microsoft Azure, the methodologies and overarching concepts will hold true for any cloud or infrastructure provider. It is our hope that those ideas impact you the most and enable you to design and implement secure, highly scalable, and highly available solutions.