Skip to content

Commit e4e1359

Browse files
authored
Merge pull request #7863 from MikeBazMSFT/patch-18
Correct health probe to match best practices
2 parents 171bc30 + 613f944 commit e4e1359

File tree

1 file changed

+8
-5
lines changed

1 file changed

+8
-5
lines changed

articles/active-directory/connect/active-directory-aadconnect-azure-adfs.md

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -182,18 +182,21 @@ Select the newly created ILB in the Load Balancers panel. It will open the setti
182182

183183
**6.3. Configuring probe**
184184

185-
In the ILB settings panel, select Probes.
185+
In the ILB settings panel, select Health probes.
186186

187187
1. Click on add
188188
2. Provide details for probe
189189
a. **Name**: Probe name
190-
b. **Protocol**: TCP
191-
c. **Port**: 443 (HTTPS)
192-
d. **Interval**: 5 (default value) – this is the interval at which ILB will probe the machines in the backend pool
193-
e. **Unhealthy threshold limit**: 2 (default value) – this is the threshold of consecutive probe failures after which ILB will declare a machine in the backend pool non-responsive and stop sending traffic to it.
190+
b. **Protocol**: HTTP
191+
c. **Port**: 80 (HTTP)
192+
d. **Path**: /adfs/probe
193+
e. **Interval**: 5 (default value) – this is the interval at which ILB will probe the machines in the backend pool
194+
f. **Unhealthy threshold limit**: 2 (default value) – this is the threshold of consecutive probe failures after which ILB will declare a machine in the backend pool non-responsive and stop sending traffic to it.
194195

195196
![Configure ILB probe](./media/active-directory-aadconnect-azure-adfs/ilbdeployment4.png)
196197

198+
We are using the /adfs/probe endpoint that was created explictly for health checks in an AD FS environment where a full HTTPS path check cannot happen. This is substantially better than a basic port 443 check, which does not accurately reflect the status of a modern AD FS deployment. More information on this can be found at https://blogs.technet.microsoft.com/applicationproxyblog/2014/10/17/hardware-load-balancer-health-checks-and-web-application-proxy-ad-fs-2012-r2/.
199+
197200
**6.4. Create load balancing rules**
198201

199202
In order to effectively balance the traffic, the ILB should be configured with load balancing rules. In order to create a load balancing rule,

0 commit comments

Comments
 (0)