question

nikhiljain-3003 avatar image
0 Votes"
nikhiljain-3003 asked ryanchill commented

Is it mandatory to create an App Service Environment for Creating Web apps?

Hi Azure Gurus,

Plz, help me in better understanding of ASE and Web Apps:

1) The document says an ASE gets created automatically once a App service is created within an App service plan. But it didn't create for me as I was able to build, deploy and test a simple internet-enabled Web application without it as well.

2) Does the costing incur for both ASE and App Service Plan? If that's so, then a standalone VM would be cheaper, i guess for comparable SKU?

3) Can I create an internal Web app (Not exposed to Internet) without an ASE? if yes, how?

Kindly advise on above Queries.

Regards,
Nikhil

azure-webapps-content-deploymentazure-webapps-migration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ryanchill avatar image
0 Votes"
ryanchill answered

Hi @nikhiljain-3003,

1) The document says an ASE gets created automatically once a App service is created within an App service plan. But it didn't create for me as I was able to build, deploy and test a simple internet-enabled Web application without it as well.

Correct. [Creating][1] an ASE does not create an app service. But it will create the app service plan that you can later assign to an app service.

2) Does the costing incur for both ASE and App Service Plan? If that's so, then a standalone VM would be cheaper, i guess for comparable SKU?

ASE costs derives from the app service plan, the isolated plan SKUs us on this [page][2]. The two aren't separate

3) Can I create an internal Web app (Not exposed to Internet) without an ASE? if yes, how?

You can add [IP access restrictions][3] to your app service. The *. azurewebsites.net will still be accessible but IPs not allowed will receive a 50x when navigated. If you can go one step further and [integrate a VNet][4] and have your app service accessible only from Azure Service Endpoints


[1]: http://portal.azure.com/#create/Microsoft.AppServiceEnvironmentCreate
[2]: https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
[3]: https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions
[4]: https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

nikhiljain-3003 avatar image
0 Votes"
nikhiljain-3003 answered ryanchill commented

Hi @ryanchill ,

Thanks for the direction.

I read more on ASE and it says: "Apps deployed in an App Service Environment operate in Isolated pricing plans and have higher scale options". With my above use case with just 2 Linux Web apps (External-Facing) and 1 WIN Web app (internal-facing), I can safely run my Production load using Standard (S1/S2 tier).

Using ASE will expedite the provisioning process of App. Gtwy directed to Linux Apps and ASE ILB for WIN App. Can setup ip-based restrictions with WIN App to make it internal and then enable VNET integration for both app plans (1 each for Linux & WIN separate). Can configure custom-domains/SSL as well in S1 tier. The DB tier integration is with Oracle DB (Can setup using Pvt. Endpoint).

Both apps are calling each other at times on different ports so that can be achieved using Private DNS.

Using ASE makes provisioning quicker, reliable & methodical. Is my overall understanding correct?

Regards,
Nikhil

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@nikhiljain-3003 an ASE will make provisioning quicker if you want things like Private DNS, an ILB, and App Gateway. You can add these services and connect them to your app service without provisioning an ASE but an ASE gains you a truly isolated environment that isn't exposed to the outside world.

I would suggest starting out, comparing the pricing of the services you intend to use (e.g. S1/S2 app service plan and scaling, App Gateway, any load balancers) and see how they measure up to an isolated SKU. Furthermore, you can always start at an S1 tier, add services as needed.

0 Votes 0 ·