You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/frontdoor/best-practices.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ ms.service: frontdoor
8
8
ms.topic: article
9
9
ms.tgt_pltfrm: na
10
10
ms.workload: infrastructure-services
11
-
ms.date: 10/25/2022
11
+
ms.date: 12/05/2022
12
12
ms.author: jodowns
13
13
---
14
14
@@ -20,14 +20,12 @@ This article summarizes best practices for using Azure Front Door.
20
20
21
21
### Avoid combining Traffic Manager and Front Door
22
22
23
-
For most solutions, you should use *either* Front Door *or*[Azure Traffic Manager](../traffic-manager/traffic-manager-overview.md).
24
-
25
-
Traffic Manager is a DNS-based load balancer. It sends traffic directly to your origin's endpoints. In contrast, Front Door terminates connections at points of presence (PoPs) near to the client and establishes separate long-lived connections to the origins. The products work differently and are intended for different use cases.
26
-
27
-
If you combine both Front Door and Traffic Manager together, it's unlikely that you'll increase the resiliency or performance of your solution. Also, if you have health probes configured on both services, you might accidentally overload your servers with the volume of health probe traffic.
23
+
For most solutions, you should use *either* Front Door *or*[Azure Traffic Manager](../traffic-manager/traffic-manager-overview.md), but not both. Traffic Manager is a DNS-based load balancer. It sends traffic directly to your origin's endpoints. In contrast, Front Door terminates connections at points of presence (PoPs) near to the client and establishes separate long-lived connections to the origins. The products work differently and are intended for different use cases.
28
24
29
25
If you need content caching and delivery (CDN), TLS termination, advanced routing capabilities, or a web application firewall (WAF), consider using Front Door. For simple global load balancing with direct connections from your client to your endpoints, consider using Traffic Manager. For more information about selecting a load balancing option, see [Load-balancing options](/azure/architecture/guide/technology-choices/load-balancing-overview).
30
26
27
+
However, as part of a complex architecture, you might choose to use Traffic Manager in front of Front Door. In the unlikely event that Front Door is unavailable, Traffic Manager can route traffic to an alternative destination, such as Azure Application Gateway or a partner content delivery network (CDN). These architectures are difficult to implement and most customers don't need them.
28
+
31
29
### Restrict traffic to your origins
32
30
33
31
Front Door's features work best when traffic only flows through Front Door. You should configure your origin to block traffic that hasn't been sent through Front Door. For more information, see [Secure traffic to Azure Front Door origins](origin-security.md).
@@ -108,4 +106,4 @@ For more information, see [Supported HTTP methods for health probes](health-prob
108
106
109
107
## Next steps
110
108
111
-
Learn how to [create an Front Door profile](create-front-door-portal.md).
109
+
Learn how to [create an Front Door profile](create-front-door-portal.md).
0 commit comments