Load balancing rules in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a load balancing rule in Azure?

A load balancing rule in Azure defines how traffic is distributed from the frontend IP to backend pool instances. It specifies the protocol, port, and distribution method to balance incoming requests.

beginner

What does the 'frontend IP configuration' specify in a load balancing rule?

It specifies the public or private IP address where the load balancer listens for incoming traffic to distribute to backend resources.

beginner

Why is the 'backend pool' important in a load balancing rule?

The backend pool contains the virtual machines or instances that receive the traffic distributed by the load balancer according to the rule.

intermediate

What role does the 'probe' play in Azure load balancing rules?

A probe checks the health of backend instances. The load balancer uses probe results to send traffic only to healthy instances.

advanced

What is the difference between 'floating IP' enabled and disabled in a load balancing rule?

When floating IP is enabled, the backend instance can receive traffic directly on the frontend IP. When disabled, traffic is NATed and the backend sees the load balancer's IP as source.

What does a load balancing rule in Azure primarily control?

A The size of virtual machines in the backend pool

B How traffic is distributed from frontend IP to backend pool

C The storage account used by the load balancer

D The region where the load balancer is deployed

Load balancing rules define how incoming traffic is distributed to backend instances.

Which component does a load balancing rule use to check backend instance health?

A Probe

B Firewall

C Virtual Network

D Subnet

Probes monitor backend health to ensure traffic is sent only to healthy instances.

What happens if a backend instance fails the health probe?

A The load balancer shuts down

B It receives more traffic

C It is automatically deleted

D It stops receiving traffic from the load balancer

Unhealthy instances are excluded from receiving traffic until they pass the probe again.

What does enabling 'floating IP' in a load balancing rule allow?

A Backend instances receive traffic directly on the frontend IP

B Load balancer uses multiple frontend IPs

C Traffic is encrypted end-to-end

D Load balancer scales automatically

Floating IP allows backend VMs to see the frontend IP as the destination IP.

Which protocol can be specified in an Azure load balancing rule?

A SMTP only

B HTTP only

C TCP or UDP

D FTP only

Azure load balancer supports TCP and UDP protocols for load balancing rules.

Explain the key components of an Azure load balancing rule and their roles.

Think about where traffic comes in, where it goes, how health is checked, and special settings.

Describe how Azure load balancing rules help maintain application availability.

Consider how traffic is managed and how failures are handled.

Practice

1. What is the main purpose of a load balancing rule in Azure Load Balancer?

easy

A. To create virtual machines automatically

B. To store data securely in the cloud

C. To distribute incoming network traffic evenly across backend servers

D. To monitor user activity on a website

Solution

1. Step 1: Understand load balancing rules

   Load balancing rules define how traffic is distributed from the frontend IP to backend servers.

2. Step 2: Identify the main function

   The main function is to spread incoming traffic evenly to avoid overloading one server.

3. Final Answer:

   To distribute incoming network traffic evenly across backend servers -> Option C

4. Quick Check:

   Load balancing rules = distribute traffic evenly [OK]

Hint: Load balancing rules spread traffic evenly to backend servers [OK]

Common Mistakes:

• Confusing load balancing with VM creation
• Thinking it stores data
• Assuming it tracks user activity

2. Which of the following is the correct way to specify a load balancing rule's frontend port in Azure CLI?

easy

A. --frontend-port 80

B. --frontendPort 80

C. --front-port 80

D. --port-frontend 80

Solution

1. Step 1: Review Azure CLI syntax for load balancing rules

   The correct parameter for frontend port is '--frontend-port' with a hyphen.

2. Step 2: Compare options

   Only --frontend-port 80 uses the exact correct syntax '--frontend-port 80'. Others have incorrect parameter names.

3. Final Answer:

   --frontend-port 80 -> Option A

4. Quick Check:

   Azure CLI frontend port = --frontend-port [OK]

Hint: Azure CLI uses hyphenated parameters like --frontend-port [OK]

Common Mistakes:

• Using camelCase instead of hyphens
• Mixing words order in parameter
• Using incorrect parameter names

3. Given this Azure Load Balancer rule configuration snippet:

"frontendPort": 443,
"backendPort": 8443,
"protocol": "Tcp"

What happens when a user sends a TCP request to port 443 on the frontend IP?

medium

A. The request is forwarded to backend servers on port 8443

B. The request is blocked because ports do not match

C. The request is forwarded to backend servers on port 443

D. The request is forwarded using UDP protocol

Solution

1. Step 1: Understand frontend and backend ports in load balancing

   The frontend port is where the client connects; the backend port is where the traffic is sent on backend servers.

2. Step 2: Match the ports and protocol

   Client connects to port 443 (frontend), traffic is forwarded to backend servers on port 8443 using TCP.

3. Final Answer:

   The request is forwarded to backend servers on port 8443 -> Option A

4. Quick Check:

   Frontend port 443 forwards to backend port 8443 [OK]

Hint: Frontend port ≠ backend port; traffic forwards to backend port [OK]

Common Mistakes:

• Assuming frontend and backend ports must be the same
• Confusing TCP with UDP protocol
• Thinking request is blocked due to port difference

4. You created a load balancing rule but traffic is not reaching backend servers. Which of these is a likely misconfiguration?

medium

A. Load balancing rule uses correct protocol and ports

B. Frontend IP address is set correctly

C. Backend pool contains healthy servers

D. Health probe is missing or misconfigured

Solution

1. Step 1: Check role of health probes

   Health probes monitor backend server health; without them, load balancer may not send traffic.

2. Step 2: Identify misconfiguration

   If health probe is missing or wrong, backend servers appear unhealthy, so traffic is blocked.

3. Final Answer:

   Health probe is missing or misconfigured -> Option D

4. Quick Check:

   Missing health probe blocks traffic [OK]

Hint: Always configure health probes to allow traffic flow [OK]

Common Mistakes:

• Ignoring health probe setup
• Assuming backend servers are always healthy
• Overlooking frontend IP correctness

5. You want to create a load balancing rule that forwards HTTPS traffic from port 443 on the frontend IP to port 8443 on backend VMs, but only if the backend VMs pass a TCP health probe on port 8443. Which configuration is correct?

hard

A. Load balancing rule with frontendPort=8443, backendPort=443, protocol=Tcp; health probe on port 443 using Http

B. Load balancing rule with frontendPort=443, backendPort=8443, protocol=Tcp; health probe on port 8443 using Tcp

C. Load balancing rule with frontendPort=443, backendPort=443, protocol=Udp; health probe on port 8443 using Tcp

D. Load balancing rule with frontendPort=443, backendPort=8443, protocol=Tcp; no health probe configured

Solution

1. Step 1: Match frontend and backend ports with protocol

   Frontend port 443 (HTTPS) forwards to backend port 8443 using TCP protocol, matching the requirement.

2. Step 2: Configure health probe correctly

   Health probe must check TCP on port 8443 to verify backend VM health before forwarding traffic.

3. Step 3: Verify other options

   Load balancing rule with frontendPort=8443, backendPort=443, protocol=Tcp; health probe on port 443 using Http swaps ports and uses HTTP probe incorrectly; Load balancing rule with frontendPort=443, backendPort=443, protocol=Udp; health probe on port 8443 using Tcp uses UDP protocol wrongly; Load balancing rule with frontendPort=443, backendPort=8443, protocol=Tcp; no health probe configured lacks health probe, risking traffic to unhealthy VMs.

4. Final Answer:

   Load balancing rule with frontendPort=443, backendPort=8443, protocol=Tcp; health probe on port 8443 using Tcp -> Option B

5. Quick Check:

   Correct ports, protocol, and health probe = Load balancing rule with frontendPort=443, backendPort=8443, protocol=Tcp; health probe on port 8443 using Tcp [OK]

Hint: Match frontend/backend ports and use health probe on backend port [OK]

Common Mistakes:

• Swapping frontend and backend ports
• Using wrong protocol (UDP instead of TCP)
• Skipping health probe configuration