Best option to achieve failover for Internal Applications (not exposed to Internet)

Mathew James 336 Reputation points
2022-06-21T04:28:36.963+00:00

Here is our situation -

  1. We have two Internal applications (not exposed to Internet) in two different Regions. One will be Primary and Active. Other (Secondary passive) will be used only if Primary is not up & running.
  2. We need a solution so that If one region fails, it should automatically switch to other. And when primary is back, it should point to Primary again.
  3. We have our SPA in Azure APP services.
  4. Wanted to know which service can be used like (Traffic manager or Front Door with Premium or App gateway or any other option), since this is totally internal facing application of a big enterprise.

Appreciate your help and response.

Thanks in Advance!!
-Mathew James

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
596 questions
Azure Traffic Manager
Azure Traffic Manager
An Azure service that is used to route incoming network traffic for high performance and availability.
111 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
973 questions
Azure Load Balancer
Azure Load Balancer
An Azure service that delivers high availability and network performance to applications.
411 questions
0 comments No comments
{count} votes

Accepted answer
  1. GitaraniSharma-MSFT 48,016 Reputation points Microsoft Employee
    2022-06-22T14:22:22.687+00:00

    Hello @Mathew James ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you would like to achieve automatic failover for Internal applications (not exposed to Internet) in two different Regions and would like to know which service can serve the purpose.

    You can use Azure Front Door Premium in your case as it supports private link and traffic routing methods to origin which fits your scenario.

    Azure Front Door Premium can connect to your origin using Private Link. Your origin can be hosted in a virtual network or hosted as a PaaS service such as Azure App Service or Azure Storage.
    Refer : https://learn.microsoft.com/en-us/azure/frontdoor/private-link
    https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-enable-private-link-web-app

    Azure Front Door supports four different traffic routing methods to determine how your HTTP/HTTPS traffic is distributed between different origins. Using priority routing, Front Door automatically fails over if the primary region becomes unavailable.
    Refer : https://learn.microsoft.com/en-us/azure/frontdoor/routing-methods

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


1 additional answer

Sort by: Most helpful
  1. Lynn Niu 236 Reputation points
    2022-06-21T09:27:37.393+00:00

    Traffic Manager can work. Please see this: https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-configure-priority-routing-method .

    All requests will be routed to the first endpoint and if Traffic Manager detects it be unhealthy, the traffic automatically fails over to the next endpoint.