Failover for API Management internal network in multiple locations

PrasannaRamkumar-7877 0 Reputation points
2023-12-31T18:11:28.7633333+00:00

If APIM is set up in internal mode and tied to a VNET, will it automatically failover to the second location when the primary goes down?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,447 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Pinaki Ghatak 5,600 Reputation points Microsoft Employee Volunteer Moderator
    2023-12-31T21:55:49.1033333+00:00

    Hello @PrasannaRamkumar

    If you have set up Azure API Management (APIM) in internal mode and tied it to a virtual network (VNET), it will not automatically failover to the second location when the primary goes down. However, you can configure APIM to use a secondary region for disaster recovery purposes You can also use Azure Traffic Manager to route traffic to the secondary region in case of a failover . Also note that the configuration of APIM in internal mode is different from that of external mode.

    In internal mode, you can only access the following APIM endpoints within a VNET whose access you control: the API gateway, the developer portal, direct management, and Git. None of the APIM endpoints are registered on the public DNS, and they remain inaccessible until you configure DNS for the VNET.

    For more information on how to set up VNET connectivity for your APIM instance in internal mode, please refer to the official Microsoft documentation here.


  2. JananiRamesh-MSFT 29,261 Reputation points
    2024-01-04T15:32:43.1333333+00:00

    @PrasannaRamkumar-7877 Thanks for reaching out. As Pinaki mentioned If APIM is set up in internal mode it will not automatically failover to the second location when the primary goes down.

    please refer: https://learn.microsoft.com/en-us/azure/api-management/api-management-using-with-internal-vnet?tabs=stv2

    https://learn.microsoft.com/en-us/azure/api-management/high-availability#multi-region-deployment

    https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-deploy-multi-region

    For the endpoints the DNS is configured so that it can be accessible internal and external with custom certificate.

    No, Endpoints will not be accessible externally. By default, internal vnet service does not provide public access. However, you can expose the endpoints through an Azure Application Gateway to provide external access to the endpoints.

    please refer: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-integrate-internal-vnet-appgateway

    let me know incase of further questions, I would be happy to assist you.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.