The goal of the design, which focuses on establishing high availability through zonal redundancy, is to keep the application from going down if all data centers in a zone experience outages. This reference architecture specifies a method for executing Java Spring Boot workloads on Azure Spring Apps.
The sample Java Spring Boot application is hosted by Azure Spring Apps Standard and is composed of microservices.
The load balancer, Azure Application Gateway Standard_v2, controls traffic to the applications. In the area where your application is running, it functions as a local reverse proxy.
This SKU includes an integrated version of Azure Web Application Firewall, which offers centralized defense against common vulnerabilities and attacks for your web applications. Open Web Application Security Project (OWASP) attacks are monitored by the Web Application Firewall on the Application Gateway.
Requests for the application's hostname are resolved by Azure DNS to the Application Gateway's public endpoint. Requests to the private endpoints used to access the designated Azure Private Link resources are resolved by Azure Private DNS zones.
A back-end relational database houses state in Azure Database for MySQL.
The certificates and application secrets are kept in Azure Key Vault. The application secrets are used by the microservices that are a part of Azure Spring Apps. The certificates are used for host name preservation by Application Gateway and Azure Spring Apps.
