Hello Team, I followed the Microsoft Document https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-integrate-internal-vnet-appgateway#scenario and I have implemented same architecture. I have internal customers and External customers, so it is 100% suitable for my requirement. But at the same time I am planning to setup DR (Active-Active) for the same Architecture which is shown in diagram from doc. Kindly help me with this. Thanks in advance! I look forward hearing from you! Regards, KiranKumar Guntreddi.

@Guntreddi KiranKumar Thanks for reaching out. Setting up a DR (Active-Active) involves various steps as below Deploy your APIM instance with APP gateway in the primary region as per your current setup. Deploy another APIM instance with App gateway in a secondary region. Ensure it mirrors the configuration of the primary instance. Configure Traffic Manager to route traffic to the primary or secondary API Management instance based on the health of the instances. Configure DNS to point to the Traffic Manager endpoint. Flow would be Users -> Traffic manager -> app gateway -> APIM. Please note that this is a high-level overview and there may be additional steps required depending on your specific requirements. It is recommended to seek assistance from Azure support if needed.

How can we setup DR(Active-Active) for Azure APIM for the below requirement

Accepted answer

JananiRamesh-MSFT 27,181 Reputation points

2024-09-19T03:58:58.0866667+00:00

@Guntreddi KiranKumar Thanks for reaching out. Setting up a DR (Active-Active) involves various steps as below

Deploy your APIM instance with APP gateway in the primary region as per your current setup.

Deploy another APIM instance with App gateway in a secondary region. Ensure it mirrors the configuration of the primary instance.

Configure Traffic Manager to route traffic to the primary or secondary API Management instance based on the health of the instances.

Configure DNS to point to the Traffic Manager endpoint.

Flow would be Users -> Traffic manager -> app gateway -> APIM.

Please note that this is a high-level overview and there may be additional steps required depending on your specific requirements. It is recommended to seek assistance from Azure support if needed.
Please sign in to rate this answer.
Guntreddi KiranKumar 21 Reputation points

2024-09-19T07:36:37.6733333+00:00

@JananiRamesh-MSFT Thank you for your valuable information.

Guntreddi KiranKumar 21 Reputation points

2024-09-19T07:49:08.8633333+00:00

@JananiRamesh-MSFT Can you please clarify me, if I am going with Azure Traffic Manager is it suitable to handle the External and Internal Users through Application Gateway, because Traffic Manager is a global a service. I am little bit worrying about this. Kindly help me on this

As per the Microsoft document https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-integrate-internal-vnet-appgateway we have an option to integrate with internal vnet in APIM by using Application Gateway.

For below architecture to setup the DR(Active-Active) - I can build the mirror infra secondary region - If I go with Azure Traffic Manager, Can we achieve to handle the external users and internal users if a region failover is happened.

JananiRamesh-MSFT 27,181 Reputation points

2024-09-25T12:26:35.0333333+00:00

@Guntreddi KiranKumar Apologies for the delay in response. Using Azure Traffic Manager in conjunction with Azure Application Gateway can indeed handle both external and internal users effectively.

Ben Gimblett 4,530 Reputation points Microsoft Employee

2024-09-25T12:41:22.6433333+00:00

The answer and comments are correct but just to add a little more detail:

Traffic manager is simply a DNS service it's not a proxy; For external users its relatively simple by pointing the pubic DNS at the traffic manager profile means your external users can be controlled via the traffic manager settings

(Noting - Az front door or some other edge reverse proxy service would also work and might also fit your requirements.)

If you send your internal users down the same path - that is to say an internal user or application connects via the public DNS (which goes to traffic manager for resolution, which returns either the primary or secondary app gateway public IP) then also no problem

IF on the other hand your internal users either go direct to APIM (which would be vnet attach and serving on an internal load balancer/IP) via internal DNS or else they go via the App GW internal interface , you can now port share on App gw, then it will not work

it wont work because TM would not be in the resolution path REF https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs#what-types-of-traffic-can-be-routed-using-traffic-manager

In this case you'd be responsible for failing over your internal traffic via your network / WAN

Guntreddi KiranKumar 21 Reputation points

2024-09-25T13:03:10.1766667+00:00

Thank you @JananiRamesh-MSFT and @Ben Gimblett

JananiRamesh-MSFT 27,181 Reputation points

2024-09-26T04:07:01.16+00:00

Guntreddi KiranKumar Please Accept the answer if the information helped you. Accepting answers will help increase the visibility of this question and the solution for anyone else who may run into the same issue. Thank you for helping to improve Microsoft Q&A!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How can we setup DR(Active-Active) for Azure APIM for the below requirement

0 additional answers

Your answer