Skip to Content

AZ-500: How Does Azure Front Door Route to Different Backend Pools Using URL Paths?

Can a Single Azure Front Door Instance Use Path-Based Routing to Multiple Backends?

Learn how a single Azure Front Door instance uses path-based routing rules to direct traffic to different backend pools based on the URL path. Understand routing rule configuration for your AZ-500 exam without needing multiple Front Door instances.

Question

You will configure a separate Front Door instance to route requests by URL path to different backend pools.

A. FALSE
B. TRUE

Answer

A. FALSE

Explanation

The correct answer is A. FALSE. A single Azure Front Door instance is specifically designed to handle URL path-based routing to different backend pools through the use of a single routing rule.

VMs on subnets within the same VNET have connectivity. Communication across VNETs requires VNET peering or VPN connectivity.

Azure Front Door Routing Architecture

Azure Front Door is a global load balancing service that directs client requests to the most appropriate backend. Its routing logic is managed within a single Front Door profile and is composed of three main components:

  • Frontend hosts: The public-facing domains or IP addresses that receive incoming traffic.
  • Backend pools: Groups of application backends (such as web apps, VMs, or storage) that can serve the same type of content.
  • Routing rules: The logic that connects a frontend host to one or more backend pools based on specific criteria.

Path-Based Routing within a Single Routing Rule

Path-based routing is a core feature of Azure Front Door that allows you to direct traffic to different backend pools based on the URL path of the incoming request. This is configured within a single routing rule, not by creating separate Front Door instances.

An administrator can configure a routing rule with multiple path patterns, each associated with a different backend pool. For example, within one routing rule for the host www.contoso.com, you could configure the following:

  • Path: /images/* -> Backend Pool: Image-Servers
  • Path: /videos/* -> Backend Pool: Video-Streaming-Servers
  • Path: /* (default) -> Backend Pool: Main-WebApp

In this scenario, a request to www.contoso.com/images/logo.png would be sent to the Image-Servers pool, while a request to www.contoso.com/api/users would match the default path and be sent to the Main-WebApp pool.

Why Multiple Instances Are Incorrect

Creating a separate Front Door instance for each URL path would be highly inefficient, complex to manage, and unnecessarily costly. The service is purpose-built to consolidate complex routing logic for a single domain into one profile. The ability to use path-based routing within a single instance is a fundamental design feature that simplifies global traffic management.

Microsoft Certified Azure Security Engineer Associate AZ-500 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Certified Azure Security Engineer Associate AZ-500 exam and earn Microsoft Certified Azure Security Engineer Associate AZ-500 certification.