A company is deploying a new web application to Azure. The application will be hosted on Azure App Service. The company requires that all outbound traffic from the App Service Plan is routed through a specific virtual network (VNet) to access on-premises resources and apply network security group rules. Which App Service VNet integration type should be used?
- AGateway VNet Integration
- BRegional VNet Integration
- CService Endpoint Integration
- DBasic VNet Integration
Show answer & explanationAnswer & explanation
Correct answer: B. Regional VNet Integration
Regional VNet Integration allows the App Service plan to access resources in a VNet and route all outbound traffic through the VNet, enabling features like NSG rules and user-defined routes. Basic VNet integration is deprecated for new deployments and only routes specific traffic. Gateway VNet Integration is for connecting to a VNet with a VPN Gateway. Service Endpoints are for securing access to Azure services, not routing all outbound traffic.
Why the other options are wrong
- A. Gateway VNet Integration is used for connecting to a VNet that has an Azure VPN Gateway, and does not inherently route all outbound traffic.
- C. Service Endpoint Integration secures access to Azure services like Storage or SQL Database, not for routing all outbound traffic from an App Service plan.
- D. Basic VNet Integration is a legacy feature and does not route all outbound traffic through the VNet.
App Service Regional VNet Integration
A feature that allows an Azure App Service app to connect to resources in an Azure Virtual Network (VNet) and route all outbound traffic from the App Service Plan through the VNet.
- Routes all outbound traffic from the App Service Plan through the integrated VNet.
- Enables features like Network Security Groups (NSGs) and User-Defined Routes (UDRs) on outbound traffic.
- Requires the App Service plan to be in a PremiumV2, PremiumV3, Isolated, or Elastic Premium pricing tier.
- Does not require a gateway in the VNet.
Memory trick: Regionally integrated apps route ALL traffic, securing their outbound journey.