Back to Details

azure-app-service

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure App Service

Azure App Service

Overview

概述

Azure App Service provides a fully managed platform for building and hosting web applications, REST APIs, and mobile backends. Support multiple programming languages with integrated DevOps, security, and high availability.
Azure App Service提供一个完全托管的平台，用于构建和托管Web应用程序、REST API和移动后端。支持多种编程语言，并集成了DevOps、安全和高可用性功能。

When to Use

适用场景

  • Web applications (ASP.NET, Node.js, Python, Java)
  • REST APIs and microservices
  • Mobile app backends
  • Static website hosting
  • Production applications requiring scale
  • Applications needing auto-scaling
  • Multi-region deployments
  • Containerized applications
  • Web应用程序（ASP.NET、Node.js、Python、Java）
  • REST API和微服务
  • 移动应用后端
  • 静态网站托管
  • 需要扩展能力的生产级应用
  • 需要自动缩放的应用
  • 多区域部署
  • 容器化应用

Implementation Examples

实现示例

1. App Service Creation with Azure CLI

1. 使用Azure CLI创建App Service

bash
undefined
bash
undefined

Login to Azure

Login to Azure

az login
az login

Create resource group

Create resource group

az group create --name myapp-rg --location eastus
az group create --name myapp-rg --location eastus

Create App Service Plan

Create App Service Plan

az appservice plan create
--name myapp-plan
--resource-group myapp-rg
--sku P1V2
--is-linux
az appservice plan create
--name myapp-plan
--resource-group myapp-rg
--sku P1V2
--is-linux

Create web app

Create web app

az webapp create
--resource-group myapp-rg
--plan myapp-plan
--name myapp-web
--deployment-container-image-name nodejs:18
az webapp create
--resource-group myapp-rg
--plan myapp-plan
--name myapp-web
--deployment-container-image-name nodejs:18

Configure app settings

Configure app settings

az webapp config appsettings set
--resource-group myapp-rg
--name myapp-web
--settings
NODE_ENV=production
PORT=8080
DATABASE_URL=postgresql://...
REDIS_URL=redis://...
az webapp config appsettings set
--resource-group myapp-rg
--name myapp-web
--settings
NODE_ENV=production
PORT=8080
DATABASE_URL=postgresql://...
REDIS_URL=redis://...

Enable HTTPS only

Enable HTTPS only

az webapp update
--resource-group myapp-rg
--name myapp-web
--https-only true
az webapp update
--resource-group myapp-rg
--name myapp-web
--https-only true

Configure custom domain

Configure custom domain

az webapp config hostname add
--resource-group myapp-rg
--webapp-name myapp-web
--hostname www.example.com
az webapp config hostname add
--resource-group myapp-rg
--webapp-name myapp-web
--hostname www.example.com

Create deployment slot

Create deployment slot

az webapp deployment slot create
--resource-group myapp-rg
--name myapp-web
--slot staging
az webapp deployment slot create
--resource-group myapp-rg
--name myapp-web
--slot staging

Swap slots

Swap slots

az webapp deployment slot swap
--resource-group myapp-rg
--name myapp-web
--slot staging
az webapp deployment slot swap
--resource-group myapp-rg
--name myapp-web
--slot staging

Get publish profile for deployment

Get publish profile for deployment

az webapp deployment list-publish-profiles
--resource-group myapp-rg
--name myapp-web
--query "[0].publishUrl"
undefined
az webapp deployment list-publish-profiles
--resource-group myapp-rg
--name myapp-web
--query "[0].publishUrl"
undefined

2. Terraform App Service Configuration

2. Terraform配置App Service

hcl
undefined
hcl
undefined

app-service.tf

app-service.tf

terraform { required_providers { azurerm = { source = "hashicorp/azurerm" version = "~> 3.0" } } }
provider "azurerm" { features {} }
variable "environment" { default = "prod" }
variable "location" { default = "eastus" }
terraform { required_providers { azurerm = { source = "hashicorp/azurerm" version = "~> 3.0" } } }
provider "azurerm" { features {} }
variable "environment" { default = "prod" }
variable "location" { default = "eastus" }

Resource group

Resource group

resource "azurerm_resource_group" "main" { name = "myapp-rg-${var.environment}" location = var.location }
resource "azurerm_resource_group" "main" { name = "myapp-rg-${var.environment}" location = var.location }

App Service Plan

App Service Plan

resource "azurerm_service_plan" "main" { name = "myapp-plan-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name os_type = "Linux" sku_name = "P1V2"
tags = { environment = var.environment } }
resource "azurerm_service_plan" "main" { name = "myapp-plan-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name os_type = "Linux" sku_name = "P1V2"
tags = { environment = var.environment } }

Log Analytics Workspace

Log Analytics Workspace

resource "azurerm_log_analytics_workspace" "main" { name = "myapp-logs-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name sku = "PerGB2018"
retention_in_days = 30 }
resource "azurerm_log_analytics_workspace" "main" { name = "myapp-logs-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name sku = "PerGB2018"
retention_in_days = 30 }

Application Insights

Application Insights

resource "azurerm_application_insights" "main" { name = "myapp-insights-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name application_type = "web"
retention_in_days = 30 workspace_id = azurerm_log_analytics_workspace.main.id }
resource "azurerm_application_insights" "main" { name = "myapp-insights-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name application_type = "web"
retention_in_days = 30 workspace_id = azurerm_log_analytics_workspace.main.id }

Web App

Web App

resource "azurerm_linux_web_app" "main" { name = "myapp-web-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name service_plan_id = azurerm_service_plan.main.id
https_only = true
app_settings = { WEBSITES_ENABLE_APP_SERVICE_STORAGE = false DOCKER_ENABLE_CI = true APPINSIGHTS_INSTRUMENTATIONKEY = azurerm_application_insights.main.instrumentation_key APPLICATIONINSIGHTS_CONNECTION_STRING = azurerm_application_insights.main.connection_string NODE_ENV = "production" PORT = "8080" }
site_config { always_on = true http2_enabled = true minimum_tls_version = "1.2" websockets_enabled = false application_stack { node_version = "18-lts" }
cors {
  allowed_origins = ["https://example.com"]
}
}
identity { type = "SystemAssigned" }
tags = { environment = var.environment } }
resource "azurerm_linux_web_app" "main" { name = "myapp-web-${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name service_plan_id = azurerm_service_plan.main.id
https_only = true
app_settings = { WEBSITES_ENABLE_APP_SERVICE_STORAGE = false DOCKER_ENABLE_CI = true APPINSIGHTS_INSTRUMENTATIONKEY = azurerm_application_insights.main.instrumentation_key APPLICATIONINSIGHTS_CONNECTION_STRING = azurerm_application_insights.main.connection_string NODE_ENV = "production" PORT = "8080" }
site_config { always_on = true http2_enabled = true minimum_tls_version = "1.2" websockets_enabled = false application_stack { node_version = "18-lts" }
cors {
  allowed_origins = ["https://example.com"]
}
}
identity { type = "SystemAssigned" }
tags = { environment = var.environment } }

Deployment slot (staging)

Deployment slot (staging)

resource "azurerm_linux_web_app_slot" "staging" { name = "staging" app_service_id = azurerm_linux_web_app.main.id service_plan_id = azurerm_service_plan.main.id
https_only = true
app_settings = { WEBSITES_ENABLE_APP_SERVICE_STORAGE = false NODE_ENV = "staging" PORT = "8080" }
site_config { always_on = true http2_enabled = true minimum_tls_version = "1.2"
application_stack {
  node_version = "18-lts"
}
}
identity { type = "SystemAssigned" } }
resource "azurerm_linux_web_app_slot" "staging" { name = "staging" app_service_id = azurerm_linux_web_app.main.id service_plan_id = azurerm_service_plan.main.id
https_only = true
app_settings = { WEBSITES_ENABLE_APP_SERVICE_STORAGE = false NODE_ENV = "staging" PORT = "8080" }
site_config { always_on = true http2_enabled = true minimum_tls_version = "1.2"
application_stack {
  node_version = "18-lts"
}
}
identity { type = "SystemAssigned" } }

Autoscale settings

Autoscale settings

resource "azurerm_monitor_autoscale_setting" "app_service" { name = "app-service-autoscale" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name target_resource_id = azurerm_service_plan.main.id
profile { name = "default"
capacity {
  default = 2
  minimum = 1
  maximum = 5
}

rule {
  metric_trigger {
    metric_name        = "CpuPercentage"
    metric_resource_id = azurerm_service_plan.main.id
    time_grain         = "PT1M"
    statistic          = "Average"
    time_window        = "PT5M"
    operator           = "GreaterThan"
    threshold          = 75
  }

  scale_action {
    direction = "Increase"
    type      = "ChangeCount"
    value     = 1
    cooldown  = "PT5M"
  }
}

rule {
  metric_trigger {
    metric_name        = "CpuPercentage"
    metric_resource_id = azurerm_service_plan.main.id
    time_grain         = "PT1M"
    statistic          = "Average"
    time_window        = "PT5M"
    operator           = "LessThan"
    threshold          = 25
  }

  scale_action {
    direction = "Decrease"
    type      = "ChangeCount"
    value     = 1
    cooldown  = "PT5M"
  }
}
} }
resource "azurerm_monitor_autoscale_setting" "app_service" { name = "app-service-autoscale" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name target_resource_id = azurerm_service_plan.main.id
profile { name = "default"
capacity {
  default = 2
  minimum = 1
  maximum = 5
}

rule {
  metric_trigger {
    metric_name        = "CpuPercentage"
    metric_resource_id = azurerm_service_plan.main.id
    time_grain         = "PT1M"
    statistic          = "Average"
    time_window        = "PT5M"
    operator           = "GreaterThan"
    threshold          = 75
  }

  scale_action {
    direction = "Increase"
    type      = "ChangeCount"
    value     = 1
    cooldown  = "PT5M"
  }
}

rule {
  metric_trigger {
    metric_name        = "CpuPercentage"
    metric_resource_id = azurerm_service_plan.main.id
    time_grain         = "PT1M"
    statistic          = "Average"
    time_window        = "PT5M"
    operator           = "LessThan"
    threshold          = 25
  }

  scale_action {
    direction = "Decrease"
    type      = "ChangeCount"
    value     = 1
    cooldown  = "PT5M"
  }
}
} }

Diagnostic settings

Diagnostic settings

resource "azurerm_monitor_diagnostic_setting" "app_service" { name = "app-service-logs" target_resource_id = azurerm_linux_web_app.main.id log_analytics_workspace_id = azurerm_log_analytics_workspace.main.id
enabled_log { category = "AppServiceHTTPLogs" }
enabled_log { category = "AppServiceAntivirusScanAuditLogs" }
metric { category = "AllMetrics" } }
resource "azurerm_monitor_diagnostic_setting" "app_service" { name = "app-service-logs" target_resource_id = azurerm_linux_web_app.main.id log_analytics_workspace_id = azurerm_log_analytics_workspace.main.id
enabled_log { category = "AppServiceHTTPLogs" }
enabled_log { category = "AppServiceAntivirusScanAuditLogs" }
metric { category = "AllMetrics" } }

Key Vault for secrets

Key Vault for secrets

resource "azurerm_key_vault" "main" { name = "myappkv${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name tenant_id = data.azurerm_client_config.current.tenant_id sku_name = "standard"
access_policy { tenant_id = data.azurerm_client_config.current.tenant_id object_id = azurerm_linux_web_app.main.identity[0].principal_id
secret_permissions = [
  "Get",
  "List"
]
}
tags = { environment = var.environment } }
resource "azurerm_key_vault" "main" { name = "myappkv${var.environment}" location = azurerm_resource_group.main.location resource_group_name = azurerm_resource_group.main.name tenant_id = data.azurerm_client_config.current.tenant_id sku_name = "standard"
access_policy { tenant_id = data.azurerm_client_config.current.tenant_id object_id = azurerm_linux_web_app.main.identity[0].principal_id
secret_permissions = [
  "Get",
  "List"
]
}
tags = { environment = var.environment } }

Key Vault secrets

Key Vault secrets

resource "azurerm_key_vault_secret" "database_url" { name = "database-url" value = "postgresql://user:pass@host/db" key_vault_id = azurerm_key_vault.main.id }
resource "azurerm_key_vault_secret" "api_key" { name = "api-key" value = "your-api-key-here" key_vault_id = azurerm_key_vault.main.id }
data "azurerm_client_config" "current" {}
output "app_url" { value = "https://${azurerm_linux_web_app.main.default_hostname}" }
output "app_insights_key" { value = azurerm_application_insights.main.instrumentation_key sensitive = true }
undefined
resource "azurerm_key_vault_secret" "database_url" { name = "database-url" value = "postgresql://user:pass@host/db" key_vault_id = azurerm_key_vault.main.id }
resource "azurerm_key_vault_secret" "api_key" { name = "api-key" value = "your-api-key-here" key_vault_id = azurerm_key_vault.main.id }
data "azurerm_client_config" "current" {}
output "app_url" { value = "https://${azurerm_linux_web_app.main.default_hostname}" }
output "app_insights_key" { value = azurerm_application_insights.main.instrumentation_key sensitive = true }
undefined

3. Deployment Configuration

3. 部署配置

yaml
undefined
yaml
undefined

.github/workflows/deploy.yml

.github/workflows/deploy.yml

name: Deploy to App Service
on: push: branches: [main]
jobs: deploy: runs-on: ubuntu-latest
steps:
  - uses: actions/checkout@v3

  - name: Set up Node.js
    uses: actions/setup-node@v3
    with:
      node-version: '18'

  - name: Install dependencies
    run: npm install

  - name: Run tests
    run: npm test

  - name: Build
    run: npm run build

  - name: Deploy to Azure
    uses: azure/webapps-deploy@v2
    with:
      app-name: myapp-web-prod
      publish-profile: ${{ secrets.AZURE_PUBLISH_PROFILE }}
      package: .

  - name: Swap slots
    uses: azure/CLI@v1
    with:
      azcliversion: 2.0.76
      inlineScript: |
        az webapp deployment slot swap \
          --resource-group myapp-rg-prod \
          --name myapp-web-prod \
          --slot staging
undefined
name: Deploy to App Service
on: push: branches: [main]
jobs: deploy: runs-on: ubuntu-latest
steps:
  - uses: actions/checkout@v3

  - name: Set up Node.js
    uses: actions/setup-node@v3
    with:
      node-version: '18'

  - name: Install dependencies
    run: npm install

  - name: Run tests
    run: npm test

  - name: Build
    run: npm run build

  - name: Deploy to Azure
    uses: azure/webapps-deploy@v2
    with:
      app-name: myapp-web-prod
      publish-profile: ${{ secrets.AZURE_PUBLISH_PROFILE }}
      package: .

  - name: Swap slots
    uses: azure/CLI@v1
    with:
      azcliversion: 2.0.76
      inlineScript: |
        az webapp deployment slot swap \
          --resource-group myapp-rg-prod \
          --name myapp-web-prod \
          --slot staging
undefined

4. Health Check Configuration

4. 健康检查配置

bash
undefined
bash
undefined

Enable health check

Enable health check

az webapp config set
--resource-group myapp-rg
--name myapp-web
--generic-configurations HEALTHCHECK_PATH=/health
az webapp config set
--resource-group myapp-rg
--name myapp-web
--generic-configurations HEALTHCHECK_PATH=/health

Monitor health

Monitor health

az monitor metrics list-definitions
--resource /subscriptions/{subscription}/resourceGroups/myapp-rg/providers/Microsoft.Web/sites/myapp-web
undefined
az monitor metrics list-definitions
--resource /subscriptions/{subscription}/resourceGroups/myapp-rg/providers/Microsoft.Web/sites/myapp-web
undefined

Best Practices

最佳实践

✅ DO

✅ 推荐做法

  • Use deployment slots for zero-downtime deployments
  • Enable Application Insights
  • Configure autoscaling based on metrics
  • Use managed identity for Azure services
  • Enable HTTPS only
  • Store secrets in Key Vault
  • Monitor performance metrics
  • Implement health checks
  • 使用部署槽实现零停机部署
  • 启用Application Insights
  • 基于指标配置自动缩放
  • 为Azure服务使用托管标识
  • 仅启用HTTPS
  • 在Key Vault中存储密钥
  • 监控性能指标
  • 实现健康检查

❌ DON'T

❌ 不推荐做法

  • Store secrets in configuration
  • Disable HTTPS
  • Ignore Application Insights
  • Use single instance for production
  • Deploy directly to production
  • Ignore autoscaling configuration
  • 在配置中存储密钥
  • 禁用HTTPS
  • 忽略Application Insights
  • 生产环境使用单实例
  • 直接部署到生产环境
  • 忽略自动缩放配置

Monitoring

监控

  • Application Insights for application metrics
  • Azure Monitor for resource health
  • Log Analytics for log analysis
  • Custom metrics and events
  • Performance counters and diagnostics
  • 使用Application Insights监控应用指标
  • 使用Azure Monitor监控资源健康状态
  • 使用Log Analytics进行日志分析
  • 自定义指标和事件
  • 性能计数器和诊断

Resources

相关资源