You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/environment/overview.md
+23-19Lines changed: 23 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,15 +13,15 @@ ms.custom:
13
13
14
14
# App Service Environment overview
15
15
16
-
An App Service Environment is an Azure App Service feature that provides a fully isolated and dedicated environment to run App Service apps securely at high scale. Unlike the App Service public multitenant offering that shares supporting infrastructure, an App Service Environment provides dedicated compute for a single customer. For more information, see [App Service Environment v3 and App Service public multitenant comparison](ase-multi-tenant-comparison.md).
16
+
App Service Environment is an Azure App Service feature that provides a fully isolated and dedicated environment to run App Service apps securely at high scale. Unlike the App Service public multitenant offering that shares supporting infrastructure, an App Service Environment provides dedicated compute for a single customer. For more information, see [App Service Environment v3 and App Service public multitenant comparison](ase-multi-tenant-comparison.md).
17
17
18
18
An App Service Environment provides hosting capabilities for various workloads:
19
19
20
20
- Windows web apps
21
21
- Linux web apps
22
-
-Docker containers (Windows and Linux)
22
+
- Windows and Linux Docker containers
23
23
- Functions
24
-
-Logic apps (standard) in [supported regions](https://azure.microsoft.com/explore/global-infrastructure/products-by-region/?products=logic-apps®ions=all)
24
+
-Standard logic apps in [supported regions](https://azure.microsoft.com/explore/global-infrastructure/products-by-region/?products=logic-apps®ions=all)
25
25
26
26
App Service Environments are designed to support application workloads that require specific performance and security features:
27
27
@@ -39,22 +39,18 @@ An App Service Environment hosts applications for a single customer on one of th
39
39
App Service Environments have many use cases:
40
40
41
41
- Internal line-of-business applications
42
-
43
42
- Applications that need more than 30 App Service plan instances
44
-
45
43
- Single-tenant systems to satisfy internal compliance or security requirements
46
-
47
44
- Network-isolated application hosting
48
-
49
45
- Multiple-tier applications
50
46
51
-
Multitenant App Service apps can use several networking features to reach network-isolated resources or become network-isolated themselves. These features are enabled at the application level. With an App Service Environment, apps don't require extra configuration to join a virtual network. The apps are deployed into a network-isolated environment that already resides in a virtual network. If you need complete isolation, deploy your App Service Environment on dedicated hardware.
47
+
Multitenant App Service apps can use several networking features to reach network-isolated resources or become network-isolated themselves. These features are enabled at the application level. For an App Service Environment, apps don't require extra configuration to join a virtual network. You deploy the apps into a network-isolated environment that already resides in a virtual network. If you need complete isolation, deploy your App Service Environment on dedicated hardware.
52
48
53
49
## Dedicated environment
54
50
55
51
An App Service Environment is a single-tenant deployment of App Service that runs on your virtual network.
56
52
57
-
Applications are hosted in App Service plans, which you create in an App Service Environment. An App Service plan serves as a provisioning profile for an application host. As you scale out your App Service plan, you add more application hosts, and all apps in that plan run on each host. A single App Service Environment v3 supports up to 200 total instances across all App Service plans. A single App Service Isolated v2 (Iv2) plan supports up to 100 instances.
53
+
Applications are hosted in App Service plans, which you create in an App Service Environment. An App Service plan serves as a provisioning profile for an application host. As you scale out your App Service plan, you add more application hosts. All apps in that plan run on each host. A single App Service Environment v3 supports up to 200 total instances across all App Service plans. A single App Service Isolated v2 (Iv2) plan supports up to 100 instances.
58
54
59
55
If you require physical isolation down to the hardware level, you can deploy your App Service Environment v3 on dedicated hosts.
60
56
@@ -74,29 +70,38 @@ Most customers don't require isolation down to the hardware level, so consider t
74
70
75
71
An App Service Environment is a deployment of App Service that runs in a single subnet within a virtual network. When you deploy an app into an App Service Environment, it uses the inbound address assigned to the environment. If your App Service Environment is deployed with an internal virtual IP (VIP) address, the inbound address for all apps is an address within the App Service Environment subnet. If your App Service Environment is deployed with an external VIP address, the inbound address is a public-facing address, and your apps are listed in a public Domain Name System (DNS).
76
72
77
-
An App Service Environment v3 in its subnet uses a variable number of addresses, depending on the number of instances and the amount of traffic. Some infrastructure roles scale automatically, depending on the number of App Service plans and the load. Use a `/24` Classless Inter-Domain Routing (CIDR) block that has 256 addresses for your App Service Environment v3 subnet. That size can host an App Service Environment v3 at full scale-out capacity.
73
+
An App Service Environment v3 in its subnet uses a variable number of addresses, depending on the number of instances and the amount of traffic. Some infrastructure roles scale automatically, depending on the number of App Service plans and the load. Use a `/24` Classless Inter-Domain Routing (CIDR) block that has 256 addresses for your App Service Environment v3 subnet. This size can host an App Service Environment v3 at full scale-out capacity.
78
74
79
75
The apps in an App Service Environment can access resources on the same virtual network as App Service Environment without extra configuration. If the App Service Environment virtual network connects to another network, the apps in the App Service Environment can access resources in those extended networks. But user configuration on the network can block traffic.
80
76
81
-
The multitenant version of Azure App Service includes numerous features that let your apps connect to various networks. These networking features enable your apps to function as if they're deployed on a virtual network. Apps in an App Service Environment v3 don't require added configuration to run on the virtual network.
77
+
The multitenant version of App Service includes numerous features that let your apps connect to various networks. These networking features enable your apps to function as if they're deployed on a virtual network. Apps in an App Service Environment v3 don't require added configuration to run on the virtual network.
82
78
83
-
A key benefit of using an App Service Environment instead of a multitenant service is that network access controls for the App Service Environment-hosted apps exist outside the application configuration. In a multitenant service, you must enable the features on each app individually and use role-based access control or a policy to prevent configuration changes.
79
+
A key benefit of using an App Service Environment instead of a multitenant service is that network access controls for the hosted apps exist outside the application configuration. In a multitenant service, you must enable the features on each app individually and use role-based access control (RBAC) or a policy to prevent configuration changes.
84
80
85
81
## Feature differences
86
82
87
83
App Service Environment v3 differs from earlier versions in the following ways:
88
84
89
85
- It has no networking dependencies on the customer's virtual network. You can secure all inbound and outbound traffic and route outbound traffic as needed.
90
86
91
-
- You can deploy an App Service Environment v3 with zone redundancy enabled. You set zone redundancy only in regions where all App Service Environment v3 dependencies support zone redundancy. You can enable zone redundancy at creation or anytime after deployment. With a zone-redundant App Service Environment, each App Service plan must have at least two instances to distribute them across zones. Each App Service plan's zone redundancy status is independent, so you can use a mix of zone-redundant and non-zone-redundant plans. To make plans zone redundant, the App Service Environment must have zone redundancy enabled. You can scale non-zone-redundant plans down to a single instance. For more information, see [Reliability in Azure App Service](../../reliability/reliability-app-service.md?pivots=isolated).
87
+
- You can deploy an App Service Environment v3 with zone redundancy enabled. This option is available only in regions where all dependencies support zone redundancy. You can enable zone redundancy at creation or anytime after deployment.
88
+
89
+
Consider the following factors for an environment with zone redundancy:
90
+
91
+
- Each App Service plan must have at least two instances to distribute them across zones.
92
+
- Each App Service plan's zone redundancy status is independent, so you can use a mix of zone-redundant and non-zone-redundant plans.
93
+
- To make plans zone redundant, the App Service Environment must have zone redundancy enabled.
94
+
- You can scale non-zone-redundant plans down to a single instance.
95
+
96
+
For more information, see [Reliability in App Service](../../reliability/reliability-app-service.md?pivots=isolated).
92
97
93
98
- You can deploy an App Service Environment v3 on a dedicated host group. Host group deployments aren't zone redundant.
94
99
95
100
- It scales faster than an App Service Environment v2. Scaling is much faster than in the multitenant service, but it isn't immediate.
96
101
97
102
- It no longer requires front-end scaling adjustments. App Service Environment v3 front ends automatically scale to meet your needs and are deployed on improved hosts.
98
103
99
-
- It allows other scale operations to proceed while an operation is in progress, as long as they involve different OS and size combinations. For example, while your Windows small App Service plan scales, you can start a scale operation for a Windows medium plan or any other plan except Windows small.
104
+
- It allows scale operations to proceed while another operation is in progress, as long as they involve different OS and size combinations. For example, while your Windows small App Service plan scales, you can start a scale operation for a Windows medium plan or any other plan except Windows small.
100
105
101
106
- It supports access to apps in an internal-VIP App Service Environment v3 across global peering. Earlier versions don't support this access.
102
107
@@ -112,11 +117,11 @@ The App Service Environment v3 pricing model varies depending on the deployment
112
117
113
118
-**App Service Environment v3:** If the environment is empty, you're charged as if you have one instance of Windows I1v2. This charge applies only when no instances are deployed.
114
119
115
-
-**Zone redundant App Service Environment v3:** There's no added charge for availability zone support. The pricing model is the same as an App Service Environment that isn't zone redundant.
120
+
-**Zone redundant App Service Environment v3:** There's no added charge for availability zone support. The pricing model is the same as an environment that isn't zone redundant.
116
121
117
-
-**Dedicated host App Service Environment v3:** You pay for two dedicated hosts at the time of App Service Environment v3 creation, based on current pricing. As you scale, you're charged a specialized Isolated v2 rate for each vCore. For each instance, I1v2 uses two vCores, I2v2 uses four vCores, and I3v2 uses eight vCores.
122
+
-**Dedicated host App Service Environment v3:** You pay for two dedicated hosts at the time of environment creation, based on current pricing. As you scale, you're charged a specialized Iv2 rate for each vCore. For each instance, I1v2 uses two vCores, I2v2 uses four vCores, and I3v2 uses eight vCores.
118
123
119
-
You can also use [reserved instance pricing for Isolated v2](../../cost-management-billing/reservations/reservation-discount-app-service.md). For more information, see [App Service pricing](https://azure.microsoft.com/pricing/details/app-service/windows/).
124
+
You can also use [reserved instance pricing for Iv2](../../cost-management-billing/reservations/reservation-discount-app-service.md). For more information, see [App Service pricing](https://azure.microsoft.com/pricing/details/app-service/windows/).
120
125
121
126
## Regions
122
127
@@ -180,7 +185,7 @@ App Service Environment v3 is available in the following regions.
180
185
| West US 2 | ✅ | ✅ |
181
186
| West US 3 | ✅ | ✅ |
182
187
183
-
\*Limited availability and no support for dedicated host deployments.
188
+
\*App Service Environment v3 has limited availability and no support for dedicated host deployments.
184
189
\** To learn more about availability zones and available services support in these regions, contact your Microsoft sales or customer representative.
185
190
186
191
### Azure Government regions
@@ -197,7 +202,6 @@ App Service Environment v3 is available in the following regions.
197
202
198
203
| Region | Regional deployment support | Availability zone support |
0 commit comments