Azure Cloud - Ingress High Availability

Overview

The network load balancer that can be deployed in the Azure Cloud fits the architecture and features we are looking for as described in this article Ingress High Availability in Public Clouds . More details in Microsoft Documentation can be found at this link for those interested https://docs.microsoft.com/en-us/azure/load-balancer/components#frontend-ip-configurations.

Automated deployment into your Resource Group using Arm Template is described in 
this Github repo
NLB Azure README.

Important Notes: 

Add the following rule to the edge routers' ufw to allow in healthcheck probes, because the source IP is 168.63.129.16 and not the LB Frontend IP.

sudo ufw allow in to any port {#} proto {type} from 168.63.129.16

If you need public IPs to be assigned to your backend ERs, then you need the standard SKU type for the Public IP resources. Otherwise, you will need to remove them and use NAT Instance to reach internet.

FQDN Based Service

Please see the  DNS Resolution Section in the Ingress Cloud HA Article for more details

Configuration Steps:

  1. Log into the Azure Cloud Console https://portal.azure.com/

  2. Navigate to home page and enter Load Balancer in the search area at the top of the screen

    b4132430-0460-4627-8586-4e8f0cb40f39.png
  3. Click on “Create Load Balancer” (Microsoft Load Balancer)

  4. Fill in the options as indicated, i.e. standard, internal, regional.

    lb_basic.png
  5. Navigate to Frontend IP Configuration and fill in the details

    lb_fe.png
  6. Navigate to Load Balancing Configuration and fill in the details

    1. Select HA ports required

    2. Session persistence - None to use 5 Tuple hash

    3. Floating IP and TCP Reset unchecked

      lb_balancingRule.png

       

  7. Navigate to the health probe menu, which is part of the load balancing option. Fill in the details

    lb_hc.png
  8. Add BE Routerslb_be.png
  9. Update the routing table to point to the LB Front End Private IP for routes to be sent over NetFoundry Network.lb_route.png
  10. Repeat this step for  every route you want to point to the load balancer.
Was this article helpful?
3 out of 3 found this helpful