Azure Firewall with Internal Load balancer and Web Server in HA

Question

Hello Team,

I am planning to deploy azure Firewall Std/Premium with internal Load Balancer and 2 Web Server in avail zone in the backend.

I want to make sure all the traffic to the web servers pass through the azure firewall and is inspected. Will I have to use Public IP of firewall to access webservers in the Backend?

How internal Load Balancer will come into play?

If anyone has any input or step by step guide for setup will be appreciated.

thanks

Answer 1

@Manuji

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I take it that your requirement is to deploy azure Firewall with Internal Load Balancer and two Web Servers in the backend.

I see He, Colin has provided an document on how to do this.

Integrate Azure Firewall with Azure Standard Load Balancer

Now, you would like to know how to configure your DNS domain.

• Please note that Web traffic will only hit Public IP Addresses
• They cannot hit/reach a Private IP Address.
• We know that Internal Load Balancer is not exposed to the Internet and only the Firewall is.

This means, your domain name should resolve to the Public IP of the Azure Firewall for you to access the web servers.

If you have any further query do let us know.

Cheers,

Kapil