The OSI application layer. A Tier-1 gateway on a Small NSX Edge cannot realise NSX services that work here, such as TLS inspection, URL filtering and L7 load balancing; they need a Large edge, or Extra Large for more throughput.
Also called Layer 7.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains L7 in context, with comparison tables and the common traps.
Terms in this definition
- Tier-1 gateway
In NSX, a gateway that sits between segments (downlinks) and a Tier-0 (uplink). Choosing an Edge cluster for it is what causes a service router to be created on Edge nodes.
- NSX Edge
Appliance that gives NSX external routing and hosts centralised services; it is deployed as a VM on ESX or on physical hardware. Tier-0 gateways need it, as do Tier-1 gateways running stateful services like NAT.
- NSX
Software that handles networking and security across VCF, covering firewalling, load balancing, NAT, VPCs, overlay segments and Tier-0/1 gateways.
- TLS inspection
With an intermediate CA certificate held in Key Vault, Azure Firewall Premium can decrypt outbound and east-west TLS traffic, inspect it and encrypt it again.
- URL filtering
With Azure Firewall Premium, application rules can filter on the complete URL path rather than just the FQDN as in Standard. Network rules don't offer it.
- ELT
Extract, load, transform: raw data lands in the target system first and is transformed there. See ETL for the opposite order.
Related terms
- Azure Application Gateway
A load balancer for web traffic that works at layer 7, sending HTTP and HTTPS requests to back ends based on host name or URL path. It can also handle TLS termination and run a web application firewall, which Azure Load Balancer cannot since it doesn't read web requests.
- Web Application Firewall
Protection at layer 7 from OWASP Top 10 threats like XSS and SQL injection, available on Application Gateway or Front Door.