Skip Ribbon Commands
Skip to main content

Load Balancing SharePoint on Azure Virtual Machines

Make your patching process easier too

Andrew Walman

07/08/2013

Azure's default load balancing mechanism presents challenges for virtual machines running SharePoint. When load balancing is set up for the first time, it is using a simple TCP check on port 80 to see if the virtual machine responds on that port – if it fails to respond to two successive checks (which happen every 15 seconds) that machine is removed from the load balancer.

The problem with this configuration is that port 80 will respond pretty much all the time – even if your application pool is stopped, and users are receiving a “503 – Service Unavailable” error. So the Azure platform includes the ability to add http level load balancing probes, to check for a 200 response instead. This ensures the web server is actually responding with content, and you can even direct it at a particular page – e.g. health.aspx.

This is fine for virtual machines that run web services under the default web site, with a port 80 binding. However, SharePoint typically has a number of applications under IIS, all with different bindings – and SharePoint uses host headers to distinguish one from another. These map back to alternate access mappings, so when a request is received through an IIS application, SharePoint then responds with the correct content, served in the context of a particular security zone. Each SharePoint application will also have its own application pool, generally running as a distinct user account. The upshot is, even the http load balancing probe won’t know if a SharePoint application is having issues.

There is a way to bring all this together though. By changing the default web site to run in the same application pool as the SharePoint site(s) you wish to load balance, you can have the load balancer respond to issues with that application pool instead. The limitation is, you can only monitor one application pool, not a problem if all your SharePoint sites run in the same pool, but this won’t necessarily be the case. I suppose you could add further “dummy” load balanced ports/probes, with a corresponding non-SharePoint IIS application that responds on that port to get around this.

A useful side effect of this is that stopping the default web site on a server removes that server from the load balancing – useful when you need to perform maintenance for example. One thing to look out for – ensure your SharePoint application pool identity has access to the default web site’s content directory, and as always an IISReset seems to sort everything out when switching app pools on an active server.

The end result is that if/when SharePoint the application pool suffers an outage, or is recycling, the load balancing probe will pick this up and stop sending requests to that server. As soon as the application pool has recovered, the next load balancing check will add the server back. This includes the daily application pool recycles early in the morning – so it should be possible to achieve genuine 100% uptime using this solution.


 About us

Fuse Collaboration Services is a Cloud Solution Provider and Microsoft Gold Partner specialising in delivering SharePoint, Skype for Business, and Azure cloud-based solutions. Based in Northampton, UK.

Microsoft Gold Partner Logo showing 5 competencies

Read more

 Latest Tweets

 Latest Blog

 

 

‘We’d love you to stick around’. But stick around where?3728<p class="lead">Here at Fuse Collaboration Services both our personal and professional email inboxes are receiving a steady flow of emails from companies asking us to stay on their mailing lists. This is the most obvious and public aspect of the new GDPR that is currently being implemented.</p><p>There are a couple of positive side-effects from these new regulations, not least that by forcing you to opt in to mailing lists to make sure you are only receiving what you want to receive a company will really know how engaged you are, making your email address all the more valuable when it comes to marketing.</p><p>Companies have been responding to the GDPR changes by re-working their data management policies, but how much time is being put into how these policies can be enacted day-to-day, especially away from the aforementioned marketing email lists?</p><p>For example, if you have written a policy that says that emails are going to be stored for one year before deletion, how are you going to store them away from an active email server (thereby reducing the burden on a day-to-day server), or keep hold of them once a member of staff leaves? Or what happens if data is accidentally deleted by a member of staff?</p><p>Furthermore, data security is made all the more important as more and more companies opt for a flexible working approach where their staff can work from remote locations, such as home or (dare we say it) a high street coffee chain with its free Wi-Fi access.</p><p>Domestic or public internet access networks are unlikely to have the same levels of security as a company's, which makes it all the more important that any data transfer between a central hub and remote laptop is encrypted and has the latest security.</p><p>Chris Evans of Computer Weekly has highlighted <a href="https&#58;//www.computerweekly.com/feature/GDPR-brings-serious-implications-for-data-storage" target="_blank"> <span style="text-decoration&#58;underline;">five areas</span></a>&#160;which will impact the day-to-day work of the data storage manager under GDPR, including&#58;</p><ul><li>encryption; </li><li>detailed application-to-storage mapping;</li><li>security and audit; </li><li>validation of test and development requirements;</li><li>and collaborating closely with colleagues.</li></ul><p>Ultimately, you need to be able to give all your customers, clients, stakeholders and staff the confidence that their data and documents are stored securely, but also in a way that allows you to respond to data requests quickly and efficiently without having to wade through a mound of irrelevant information.</p><p>You also need to have the peace of mind that any deleted information can be recovered within your policy timetables, whether they be one year, five years, or longer than that.</p><p>There is also a danger that you could be sucked into a one-size-fits-all approach using policy and storage templates that have been designed for organisations that are in a different sector or are of a vastly different size to your own.</p><p>Fuse's data back-up and storage solutions tick all of the boxes you need to have that peace of mind to concentrate on your main business, namely growing as a company, while also being tailored to your specific needs.</p><p>Fuse uses a mixture of cloud-based packages to meet your requirements and allow your staff to access their relevant information <em>securely </em>regardless of where they are working. Our solutions are also easy to monitor by your in-house IT team, so that in the unlikely event of a data breach it can be identified, resolved and reported quickly.</p><div class="well well-lg"><p class="lead">Give us a call on 01604 797979 and we can have a chat about how you can make sure your data policy matches your day-to-day operations and requirements.</p></div> | Chris Wearmouth | 693A30232E777C6675736563735C632E776561726D6F757468 i:0#.w|fusecs\c.wearmouth16/05/2018 23:00:002018-05-16T23:00:00ZData security and rentention in a cloud based infrastructureData security in a cloud based infrastructure14/06/2018 09:56:102278htmlFalseaspx

 Contact us

Our address
12 Brookfield, Duncan Close
Moulton Park, Northampton
NN3 6WL
P: +44(0)1604 797979
Contact Us