HTTPS/SSL certificate in Azure VM endpoints

Question

I am new in Windows Azure, previously I have used Amazon Web Services.

In AWS you can set a SSL certificate for a Load Balancer and use it in listeners, so you don't need to worry about that in the web server.

Is it possible to set a SSL certificate for an Azure VM endpoint?

Answer 1

Loadbalancer comparation

AWS

Application Load Balancer - Layer 7 - HTTP, HTTPS
Network Load Balancer - layer 4 - TCP, UDP, TLS 
Classic - Layer 4/7 - HTTP/HTTPS(layer 7), TCP, SSL/TLS(layer 4)

Azure

Load Balancer - Layer 4 - TCP and UDP
Application Gateway - Layer 7 - HTTP, HTTPS(support SSL)

Answer 2

Azure Load Balancer is a layer 4 device, so it can't do SSL termination.
You can use Azure Application Gateway which is a Layer 7 Load Balancer, and it can do SSL termination. see here: https://learn.microsoft.com/en-us/azure/application-gateway/application-gateway-ssl-portal

EDIT: I am trying to understand if you are in "classic" VMs or not. Reading your the comments to your question, you ask if Azure VMs are in "Cloud Services" which implies you are in "classic", but it is unclear if you ask this because you have read the wrong doc, or this is the implementation you have. Anyway is it very recommended you get off "classic" and work with modern VMs. Especially for new deployments.

Answer 3

The Azure terminology is a little different from that of AWS. You can use the Azure Traffic Manager to offload TLS/SSL:

http://www.hanselman.com/blog/CloudPowerHowToScaleAzureWebsitesGloballyWithTrafficManager.aspx

(The Azure Load-Balanced Sets use round-robin DNS balancing, with VMs directly visible, whereas the Traffic Manager hides VMs behind the VIP)

Answer 4

Yes you can

Please check the documentation here:

http://azure.microsoft.com/en-us/documentation/articles/cloud-services-configure-ssl-certificate/