Load Balancer / Application Gateway / Front Door
Load Balancer and Application Gateway are regional services — zone resiliency only. Azure Front Door is the actual cross-region failover mechanism for HTTP(S) traffic, via automated health-probe-based routing.
Basic Load Balancer (retired) / non-zonal frontend
Basic Load Balancer was retired on 30 September 2025 — existing deployments keep running but are unsupported and carry no SLA. A non-zonal Standard LB or Application Gateway frontend is still pinned to one datacenter.
- Replication
- None
- RPO
- N/A — routing layer, not a data store
- RTO
- N/A if the datacenter fails — no zone protection
- Failover trigger
- N/A
If you find a Basic SKU Load Balancer in production today, it is past end-of-support and should be migrated to Standard as a priority finding.
Standard Load Balancer / Application Gateway v2 (zone redundant)
Zone-redundant frontend IP configuration spreads the service across zones within the region.
- Replication
- None
- RPO
- N/A — routing layer
- RTO
- Seconds — automatic
- Failover trigger
- Automatic
Both are single-region resources — neither has a native concept of failing over to another region.
Azure Front Door (priority/latency routing + health probes)
Global anycast service. All Front Door configurations include automated backend health monitoring and global failover — set backend priority and Front Door reroutes traffic away from an unhealthy region automatically based on health probe results.
- Replication
- N/A
- RPO
- N/A — routing layer only; the RPO for your application still depends entirely on the data tier behind each backend
- RTO
- Probe-interval driven — typically well under a minute once a backend is marked unhealthy
- Failover trigger
- Automatic
Front Door solves the traffic-steering half of regional DR. It does nothing for data consistency between regions — that's still on the services behind it.
Gotchas
Basic Load Balancer is already retired
Retired 30 September 2025. It still technically runs if you have one, but it is unsupported and explicitly outside any SLA — anyone relying on its uptime commitment as part of a Tier assessment has no commitment to point to.
Load Balancer and Application Gateway are regional, full stop
Neither has any concept of a secondary region. True multi-region HTTP(S) resilience requires Front Door (or Traffic Manager for non-HTTP/lower-layer scenarios) in front of independent regional deployments.
Front Door failover is routing only, not a data guarantee
An automatic, fast Front Door failover to a healthy region can still serve stale or inconsistent data if the backend's own data replication hasn't caught up — routing speed and data RPO are two separate problems that get conflated in architecture reviews.