Azure Load Balancer Deep Dive

Whiteboard and demo deep dive into the Azure Load Balancer! Hope you find it useful and have a drink handy :-D
Whiteboard - github.com/johnthebrit/Random...
Few links used:
- SKUs - docs.microsoft.com/en-us/azur...
- Limits - Aka.ms/lblimits
- SNAT Ports - docs.microsoft.com/en-us/azur...

[@RashmiDuneja]

That Pamela reference really cracked me up 😂

[@chrise202]

Fantastic effort John. You're a great teacher! Looking forward to a Deep Dive on Application Gateway and Traffic Manager!

[@robertgoodall9015]

Brilliant videos making complex subjects seem much more manageable and understanding what's actually going is is very interesting, Thanks!

[@50CenT123smoke]

Thanks man. I keep coming back to your vidoes - because the others just simply don't explain it like you do. Your reiterations I don't skip because you are drilling the info into my head repeatedly. Keep up the good work and I really appreciate all the hard work you've been putting into this.

[@NTFAQGuy]

That is very kind, thank you!

[@devlinthornicroft9975]

Probably the best Azure content on KZbin right now. Thank you for the time and effort you put into creating these.

[@NTFAQGuy]

Very kind, thanks!

[@NickolasLacey]

John has the best Azure content on KZbin. Watching this to train for AZ-700 right now

[@andr5683]

I’m preparing myself for the AZ-104 certification and this video has been very helpful to me, actually I’m gonna watch it again when I get a chance. Great content please keep sharing!

[@NTFAQGuy]

Thanks, good luck!

[@MrChrisCJ]

Just passed my AZ-104 exam and this is all thanks to your videos, I am starting my DevOps journey and looking forward to your videos once more

[@NTFAQGuy]

Fantastic!

[@wbplomp]

John, again an excellent deep drive! Although most topics were familiar to me, I have again learned a lot. Thanks!

[@NTFAQGuy]

Thanks

[@lightyagami0ben]

Recently discovered your channel ....it's a gold mine of information..thanks !

[@NTFAQGuy]

Happy to hear that! Thanks!

[@ColdSplash]

Thank you! This is the only material i found so far that helped me to understand how exactly Floating IP works.

[@NTFAQGuy]

You are welcome!

[@renatobertolaccini3242]

Best content I saw about Load Balancer. Thank you, man.

[@NTFAQGuy]

I appreciate that!

[@laxminarayanarora4670]

Respected Sir ! I have watched almost all videos on internet on Load Balancer but I have not found this UNIQUE information. I have also gone thru Documentation too, but found it very complicated. After watching your video, It has instilled a clear understanding of this in my mind , even in sleep, I can now explain to others as well. Thank you very Much Sir. Really appreciated sir.

[@NTFAQGuy]

That is very kind and appreciated, thank you! Please share !

[@richardgmale2913]

Thanks John - great video explained in a simple way

[@rajkrishnamurthy8474]

Best video; hands down. John: Thank you very much

[@vickykaradsheh6388]

Awesome illustration, thanks a lot John :)

[@Tech-ub8dd]

thank you john, love all your videos!

[@chandrashekhar2461]

best explanation, stuff is best for interview discussions Thanks, John

[@celinexiang9266]

this video is phenomenal, it's so useful for a newly onboard member of microsoft like me!!!! so useful and indepth explanation of SLB logic!!!

[@NTFAQGuy]

Glad it’s useful! Best of luck 🤙

[@codezamacodinglabs]

Bravo....Very beautifully explained. A big thank you

[@engrkn]

@John Savill, you really know this topic. Very well presented and explained. thanks!

[@NTFAQGuy]

I appreciate that! Thank you!

[@MajerSY]

Awesome video, thank you very much. I'm waiting for video about app gateway and front door now :) It's good to know how those services work behind the scenes, very useful knowledge.

[@NTFAQGuy]

Thanks!

[@saumyasuman7313]

I agree with Devlin. Best Azure content. Good Job and many thanks to you for educating us.

[@NTFAQGuy]

Thank you

[@deepakkatote1855]

My head is in the cloud after this session 🔥

[@rickiedeb]

brill John. only the best explanation amongst several i have seen: think you could wrap up a final 2 minutes with the creation of the load balancer in azure at the end of the video/start

[@NTFAQGuy]

As the video discussed there are many capabilities and I don’t see what walking through creating one in 2 minutes would really add. There are lots of documents that walk through creation, my goal was to explain capabilities that would help you decide if it’s a fit and what configuration. If you want to see a demo I create and show config in the aks network deep dive.

[@yulaw3289]

watch this awesome video today, really enjoy its usefulness! Thank you.

[@sasaperkovic8058]

Great content as always!

[@NTFAQGuy]

Glad you enjoyed it

[@jatinnandwani6678]

Thanks so much John

[@omegabk]

Hey John! First of all, thank you! keep up this great work, your content is one of the best one! do you also plan to make a deep dive on application gateway?

[@NTFAQGuy]

Thanks and maybe :)

[@AquibQureshi]

with great clarity and awesome content, @John request you to prioritize AppGW in-depth video :) thank you so much for sharing

[@l4liberty]

John - I discovered your channel recently and I love the way you explain concepts in simple and effective way. Do you have a blog where people can post questions?

[@NTFAQGuy]

No, I keep an eye on comments related to the video topic and if have time will help there. I don’t really have enough spare time to do a lot of q&a though with job, family and creating content :)

[@eduardomdossantos139]

One more great video, John! If you don't mind, I'd like to ask you for a video about monitoring azure (all aspects of monitoring, best practices...) if you are not already making this video for your MasterClass playlist. Thanks!!

[@NTFAQGuy]

it will be part of the master class ;-)

[@77mrharidas]

you gave a very good explanation. thanks for such video, please bring more on Az -104......

[@NTFAQGuy]

About to release azure masterclass here which will help with the admin. Thanks

[@77mrharidas]

@@NTFAQGuy is app service having zone redundant feature inside region?

[@ajithkumar02]

Just found and following ur channel, always trying to start from the beginning. It's worth to see the big video. Please Do Not Throw Sausage Pizza Away 😋

[@NTFAQGuy]

lol

[@zhiliaev]

Very usefully video! Thank you!

[@NTFAQGuy]

Glad it was helpful!

[@sama5854]

Thank You!

[@z0nerider]

the way you explain how it works behind the scene is just phenomenal !!! Please do more in depth vid for network products such as setting up NVA (hub spoke) or in vWAN, etc

[@NTFAQGuy]

There is already a video on NVA. Please check out the channel.

[@z0nerider]

@@NTFAQGuy Yup found it! I see you did ATM 7yrs ago, can you do more of Azure traffic manager (ATM), CDN and AFD? I always find layer 7 products bit confusing with their HTTP headers and re-writes etc.!!!

[@mohamedich102]

thank you for everything

[@NTFAQGuy]

Very welcome

[@shubhamdwivedi3302]

A friend referred me your channel. Lucky me❤️

[@NTFAQGuy]

Welcome!!

[@saideepkaranam8783]

This is gold!

[@NTFAQGuy]

Thanks!

[@waheeb_m]

Lmao my buddy has his book, I thought he looked familiar. Never thought he was this jacked irl tho 😳. Great content in both book/video.

[@NTFAQGuy]

haha, thanks. camera adds 10 lbs

[@patrickboucher892]

merci John. Feel smarter after that ;-)

[@pavanmadduri7605]

Thanks for the information it was really helpful. I have a question, what was the use of creating service object in case of using App gateway ingress controller. As it directly interacts with pod. And again as pods may goaway how app gateway is going to track them.

[@NTFAQGuy]

I talk aks specifics in my aks networking deep dive.

[@samlaw4018]

Very good video...do we need to choose session persistence option when handling network symmetry for NVA behind a Azure Load balancer or would the HA port feature suffice? Also, you did mention Azure LB supports "stickiness" in what scenario would one then chose a Session Persistence option. Thanks

[@NTFAQGuy]

for NVAs and symmetry that is the HA port option. separate the 5,3,2 tuples controls how sticky it will be and you pick based on the need to go to same backend based on variations in port/protocol.

[@balasubramanianwv3877]

@@NTFAQGuy good video. can we place NVA (Firewall) in Sandwidch model. External LB-> FW-> Internal LB, Is this work or any conflict with health probe we need to check ? . Outbound traffic will exit directly via Firewall, Inbound traffic hit the External LB and FW do SNAT and DNAT.

[@NTFAQGuy]

@@balasubramanianwv3877 you can have external point to NVA (which is normal) and then have NVA point to something via a load balancer yes.

[@balasubramanianwv3877]

John Savill let me check traffic flow

[@yahorsinkevich4451]

Another thing that is confusing is when you create internal LB there is a setting that determines IP address assignment and by default it is dynamic. It is not clear what's that IP is used for.

[@Ntwobike]

Great one! Im curious what is the Pamelas version in OSI model?

[@NTFAQGuy]

lol, if you search for OSI and pamela anderson I'm sure it will be found :-)

[@Ntwobike]

Found it 🤣

[@infosec4cloud]

Thank you for share

[@NTFAQGuy]

My pleasure

[@bennywise21]

Awesome Shirt!!!

[@NTFAQGuy]

Thanks :)

[@chengwang5820]

Hey John, if the traffic comes in from the load balancer (configured with outbound rules), and there is also a NAT gateway attached to the subnet, how would be reply traffic behave? Would it be using the LB outbound rule or NAT gateway? Thanks!

[@NTFAQGuy]

I have video on NAT gateway where cover this. Outbound reply will use same path as its inbound.

[@chengwang5820]

@@NTFAQGuy awesome, thanks John, will get to the NAT video soon :)

[@kamatapa]

Hi John. Good content. Are you familiar with Google's Maglev load balancer architecture? The description of Azure's Load Balancer that you present in this video looks surprisingly similar to Maglev's. Any comment on that?

[@NTFAQGuy]

I am not aware, sorry.

[@sid0000009]

Hi John, As I read we have provision of having a load balancer integration option with App Service. In a normal case when we have a Azure Web app we would have a single end point , so am i correct to conclude it will not add a value in such cases. Also could not think over when we would have a use case where we have multiple end points and LB is useful with App Service. Usually such balacing acts is done within a given app and not across app? Sorry if i sound foolish but love to get ur feedback !

[@NTFAQGuy]

Generally load balancer is useful for balancing between multiple instances but even if single provides an abstraction so flexibility for future growth and some additional control.

[@sid0000009]

@@NTFAQGuy thanks that was quick reply. For abstraction may be azure application gateway would be a better option? So we dont expose the web app to the internet directly.. Thanks

[@NTFAQGuy]

@@sid0000009 yes if it’s http traffic then can also get waf for added protection

[@RakeshSharma-jg5nf]

If my outbound traffic from my load balancer trying to access azure managed database..and I have service connecting to internet as well. How I can configure my load balancer for such scenario. Best practices and guidelines ?

[@NTFAQGuy]

Unless you use private link or service end points the traffic will follow the regular NAT pattern (with a couple of service exceptions). So regular rules for,outbound apply.

[@racingweirdo]

Is this also working with autoscale?? Lets say you have two webservers in the normal situation and you set autoscale to another two. Are these two new one automatically picked up by the loadbalancer??

[@NTFAQGuy]

When you autoscale that component would add the new instances (or remove) from the backend set such as vmss, aks workers, app service plans etc.

[@sidzhang]

Hey John, Correct me if I am wrong, Azure Load Balancer/Front Door/Application Gateway are all Reverse Proxy solutions, right? They are proxies for servers. Do Azure have any Forward Proxy solutions? I get these kind of questions from my customers.

[@NTFAQGuy]

You mean like azure firewall?

[@sidzhang]

@@NTFAQGuy Yeah, Azure Firewall can do that... I don't recall that, thanks bro.

[@tablavadanbyamit4812]

Hello John, the LB SKU page is changed. The differences mentioned in this video considering different SKU's is still applicable.. right?

[@NTFAQGuy]

Yes

[@mmiltenburg]

😁 I was taught the Pamela A too. We're getting old 😁

[@NTFAQGuy]

Lol

[@yahorsinkevich4451]

Is it possible to use internal LB with outbound IP rules? E.g. if we want to 'hide' VM IP's for our internal servers IP's and show only LB outbound IP (IP's)?

[@NTFAQGuy]

outbound to the internet is always NAT through an external IP if thats what you mean. the VM IP would never be seen.

[@yahorsinkevich4451]

@@NTFAQGuy For the external LB it is simple, but could we have similar functionality for internal LB, need to make it look like requests are coming from the single IP for the services hosted withing vnet

[@NTFAQGuy]

@@yahorsinkevich4451 not for non response traffic. Use a virtual appliance or fix why it has to come from one ip :)

[@MuhammadWaqas-gr4gg]

There is option for Floating IP (Enabled/Disabled)....Can you please explain whats the use of Floating IP enabled or disabled?????

[@NTFAQGuy]

I do cover it in the video.

[@gurupa686]

Hi John, did you miss one important point with standard load balancer that, it'll only support standard Sku IP address. If you try to add standard IP address in basic sky, it'll not work. It's a major problem.

[@NTFAQGuy]

Thought I said that. You have to use same skus. It’s called out in all the docs as well.

[@notoriousft]

Thanks for the video. Is the whiteboard file for this video available?

[@NTFAQGuy]

Added to description

[@notoriousft]

@@NTFAQGuy Thank you so much for this. I really appreciate it.

[@naveenjkumar9684]

What will source ip when direct server path taken ,will it be source as loadbalancer ip or vm ip . Clarify kindly :)

[@NTFAQGuy]

assuming you mean floating IP. if you turn on floating IP then the VM on backend sees the FE IP and port as the destination not its own. Traffic comes back from FE IP

[@naveenjkumar9684]

@@NTFAQGuy thanks for.reply john, sorry my question is if iam accessing from internet to the vm which is behind loadbalancer forward traffic will go as u mentioned, from what source ip I will be seeing return traffic at internet machine level will it be loadbalancer public ip or vm ip or fabric ip

[@euno73]

If DSR the transmission is a-semetrical?

[@NTFAQGuy]

Well it does not go back via the mux but that’s an internal detail facilitated by sdn. Does not impact anything .

[@mahadsaid7786]

John where could I get that shirt man!? Heads in the cloud.

[@NTFAQGuy]

honestly don't remember where I got it. i bet if you search the internet you'll find a match.

[@abrahamsteinberg8374]

This guy reminds me the Brotherzzz actor...

[@NTFAQGuy]

I have no idea what that is :-)

[@maping930883]

What is the scenario for foating-IP？

[@NTFAQGuy]

Multi instance nvas typically.

[@ryanmalone2681]

No no, please do tell about the Pamela Anderson thing. ;-)

[@NTFAQGuy]

lol

[@totopouco255]

I am still trying to figure out how Pamela Anderson fits into this ...

[@NTFAQGuy]

Lol

[@samhouston2000]

Do you mean "People Desperately Need to See Pamela Anderson"?

[@NTFAQGuy]

Sure :)

[@samhouston2000]

@@NTFAQGuy 😂😂Got it Boss.

[@user-tg9xv7pr9z]

God, LB is so complex ..

[@NTFAQGuy]

This is a deep dive so I go into how it works but the reality is to use it you don’t need to know all of this detail. Good luck