Explore Azure App Service Flashcards

1
Q

What is Azure App Service (AAS)

A

Used for hosting web apps or mobile backends

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does AAS contain support for?

A
  • auto scaling with vertical and horizontal scalinh
  • CI with devops, github and bitbucket
  • deployment slots
  • Linux (with some limitations)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an app service plan (asp)

A
  • Defines a set of compute resources for a web app to run
  • 1 or more apps can be configured to run on the same plan
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does an app service plan define?

A

OS
Region
Number of VMs
Size of VMs
Pricing tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Describe the Shared compute pricing tiers

A
  • Free and Standard Tiers
  • Run on an app on the same VM as other AAS apps, including apps of other customers
  • Cant scale out
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe the dedicated compute pricing tiers

A
  • Basic. standard, premium, premium V2, premium V3
  • Run on dedicated Azure VMs
  • Only apps in the same service plan share the same resources
  • higher tiers have more VM instances available to you for scale out
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Descirbe the isolated compute pricing tier

A
  • Isolated and isolatedV2
  • Provides max scale out capabilities
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can I improve app performance with app service plans?

A

Isolate the compute resource by moving the app into a separate app service plan so it isn’t sharing resources with other apps in the original plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the two methods of deploying app services?

A
  • Automated Deployment; CI is a repetitive process to push out new features and bug fixes in a fast and repetitive pattern with minimal effect on end users. Can use DevOps, GitHub and bitbucket
  • Manual Deployment; can use Git, CLI, Zip Deploy or FTP/s
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are deployment slots (briefly in relation to App Service Plan)

A
  • Recomended way to deploy app services
  • apps are deployed to a slot and can then be swapped over
  • the swap operation warms up the necessary worker instances to match production scale, eliminating downtime
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Briefly describe app Services built in auth

A
  • Allows you to integrate various auth capabilities into your web app or API without implementing them yourself
  • Built directly into the platform
  • Can integrate with multiple login providers (Microsoft Entra ID, Facebook, Google Twitter)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the authentication and authorisation module?

A
  • Runs in same sandbox as your app code
  • when its enabled every incoming HTTP request passes through it before being handled by app code
  • runs separately from the app code and can be configured with ARM or config file, no SDK or programming changes to app code are required
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does the authentication and authorisation module do?

A
  • Authenticates users and client with the specified Identity providers (facebook, google, twitter etc)
  • validates, stores and refreshes Oauth tokens issued by the configured identity providers
  • manages authenticated session
  • injects ID information into HTTP request headers
  • signs user in -> post authentication -> establish authenticated session -> serve authenticated code
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How does authentication flow work with the providers SDK

A
  • app delegates sign-in to app service
  • typically used in browser apps which can present the providers login page to the user
  • server code manages the sign-in process
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

how does authentication flow work without the providers SDK

A
  • app signs users in to the provider manually and then submits the auth token to app service for validation
  • browserless apps use this as they cant present providers sign-in page to the user
  • app code manages the sign-in process
  • Applies to REST APIs, Azure functions and native mobile apps
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How can I configure app service to behave when an incoming request isn’t authenticated?

A
  • allow unauthenticated requests; defers authorisation of traffic to your app code
  • require authentication; rejects all traffic. Could be a redirect to one of the identity providers
17
Q

What is the token store?

A
  • built in token store which is a repo of tokens associated with the users of your web apps, APIs or mobile apps
18
Q

What is the default app hosting behaviour?

A

apps hosted in app service are accessible through internet and can reach only internet hosted endpoints

19
Q

What are the two main deployment types for azure app service?

A
  • Multi-tennant app service networking; hosts app plans in all tiers bar the isolated ones
  • Single-tennant App Service Environment (ASE) hosts app service plans directly in your virtual network
20
Q

Describe multi-tenant app service networking

A
  • Due to many customers in same app service scale unit you cant connect app service network directly to your network
  • Instead of connecting the networks you need features to handle the various aspects of application communication
  • These features vary between calls from and to the app
21
Q

What are front-ends and workers?

A
  • Used in multi-tenant app service networking
  • roles that handle incoming HTTP/S requests are called front-ends
  • roles that host the customer workload are called workers
22
Q

What are inbound features?

A
  • One of the two mult-tenant app service networking solutions
  • app assigned addresses, access restrictions, service endpoints, private endpoints
23
Q

What are outbound features?

A
  • One of the two mult-tenant app service networking solutions
  • hybrid connection, getaway related vnet integration, vnet integration
24
Q

How do app service scaler units support multiple customers?

A
  • Free and shared plans host customer workloads on multi-tenant workers
  • basic and higher plans host customer workloads that are dedicated to only one app service plan
  • in standard all apps in that plan run on the same worker, if you scale out the worker all apps in that plan are replcated on a new worker for each instance in your plan
25
Q

How are worker VMs broken down by plans?

A
  • premium v2 and V3 use separate VMs to the other tiers
  • when you change the VM family you get a different set of outbound addresses
  • there are many addresses that are used for outbound calls
  • these addresses are shared by app apps running on the same worker VM family in the AAS deployment