Group 11: Networking & Delivery

Connectivity, routing, secure exposure, global performance, and private service access. Core building blocks: virtual networks (east-west), load distribution (L4 vs L7), global anycast acceleration, DNS-based steering, perimeter security, and hybrid connectivity.

Layering Principle: Pick minimum viable primitives: (1) Private network segmentation, (2) Inbound edge (Front Door / App Gateway / LB), (3) Security (Firewall / WAF / DDoS), (4) Private access (Private Link) as needed.

Key Differences

L4 Throughput Low Latency Simplicity WAF Need Global Reach L7 Routing Session Affinity TLS Mgmt Zero Trust Edge Accel Caching Failover Geo Steer Multi-Cloud Weight Dist Private Access Data Exfil Perimeter Outbound Ctrl Segmentation

Score_L4LB   = 0.28*C_l4Throughput + 0.22*C_lowLatency + 0.18*C_simplicity + 0.14*(10 - C_wafNeed) + 0.10*(10 - C_global) + 0.08*(10 - C_l7Routing)
Score_AppGW  = 0.26*C_l7Routing + 0.22*C_wafNeed + 0.18*C_session + 0.14*C_tlsMgmt + 0.12*C_zeroTrust + 0.08*(10 - C_global)
Score_FrontDoor= 0.28*C_global + 0.22*C_edgeAccel + 0.18*C_tlsMgmt + 0.14*C_caching + 0.10*C_wafNeed + 0.08*C_failover
Score_TrafficM = 0.30*C_geoSteer + 0.22*C_failover + 0.16*C_multiCloud + 0.14*C_weightDist + 0.10*(10 - C_wafNeed) + 0.08*(10 - C_l7Routing)
Score_PrivateL = 0.34*C_privateAccess + 0.22*C_dataExfil + 0.16*C_zeroTrust + 0.12*C_compliance + 0.10*(10 - C_global) + 0.06*(10 - C_edgeAccel)
Score_Firewall = 0.30*C_perimeter + 0.22*C_outboundCtrl + 0.16*C_zeroTrust + 0.14*C_threatIntel + 0.10*C_segmentation + 0.08*C_compliance

{{s.name}}: {{s.val | number:2}}

Interpretation

L4 LB for basic distribution, App Gateway for L7 + WAF, Front Door for global edge, Traffic Manager for DNS steering, Private Link for private PaaS access, Firewall for perimeter & outbound governance.