How does Load Balancer redirect request flow to HTTPS service

Question

We have HTTPS services and want to deploy a Load Balancer to redirect HTTPS flow. Can we just install a SSL certificate on Load Balancer and add our HTTPS services into health probe?

Answer 1

Hi @博文 李 ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are trying to SSL offload in Azure Load Balancer.

Please note that Azure LB is a Layer 4 offering.
This means, LB does not have the concept of TLS Handshake, and hence, adding a certificate to Azure LB will not make any sense.

This does not mean LB cannot handle HTTP/HTTPS Traffic. It can very well handle the traffic, but the SSL handshake must be carried out by the backend Pool member

For HTTP/HTTPS traffic, as in your case, you should consider going with App Gateway or Azure Front Door.
Load Balancing Options in Azure: https://learn.microsoft.com/en-us/azure/architecture/guide/technology-choices/load-balancing-overview

App Gateway:

• https://learn.microsoft.com/en-us/azure/application-gateway/ssl-overview
• https://learn.microsoft.com/en-us/azure/application-gateway/overview
• https://learn.microsoft.com/en-us/azure/application-gateway/features

AFD:

• https://learn.microsoft.com/en-us/azure/frontdoor/end-to-end-tls
• https://learn.microsoft.com/en-us/azure/frontdoor/front-door-overview

Please do let us know if you require further details on the above.

Cheers,
Kapil.