-
Cloud Load Balancing
- Is a fully distributed, software-defined, managed service. Distributes load-balanced compute resources in single or multiple regions to meet HA requirements, to put resources behind a single anycast IP address, and to scale resources up or down with intelligent autoscaling
-
Global
- Leverages the Google frontends, which are software-defined, distributed systems that sit in Google's PoPs.
-
Types
- External HTTP(S)
- External SSL proxy
- External TCP proxy
-
When to use
- Users and instances are globally distributed
- Users need access to the same applications and content
- Provide access using a single anycast IP address
-
Regional
-
Types
-
External
- HTTP(S)
- TCP Proxy
- TCP/UDP Network
-
Internal
- HTTP(S)
- TCP Proxy
- TCP/UDP
-
When to use
- Distribute traffic to instances that are in a single Google Cloud region (Internal and Network Load Balancers)
-
Managed Instance Group
- Is a collection of identical VM instances that you control as a single entity, using an instance template
-
Dynamically add/remove instances
- Increases in load
- Decreses in load
-
Autoscaling policy
- CPU utilization
- Load balancing capacity
- Monitoring metrics
- Queue-based workload
-
Key features
- Instance group can be resized
- Manager ensures all instances are RUNNING
- Typically used with autoscaler
- Can be single zone or regional
-
HTTP(S) Load Balancing
-
Key features
- Global or Regional load balancing
- Anycast IP address
- HTTP on port 80 or 8080
- HTTPs on port 443
- IPv4 or IPv6
- Autoscaling
- URL maps
-
Cloud CDN
- Uses Google's globally distributed edge PoPs to cache HTTP(S) load-balanced content close to your users
-
Cache modes
-
USE_ORIGIN_HEADERS
- Requires origin responses to set valid cache directives and valid caching headers
-
CACHE_ALL_STATIC
- Automatically caches static content that doesn't have the no-store, private, or no-cache directive
-
FORCE_CACHE_ALL
- Unconditionally caches responses, overriding any cache directives set by the origin
-
SSL Proxy
- Is a global load balancing service for encrypted non-HTTP traffic
- Terminates user SSL session at the load balancing layer, then balances the connections across your instances using the SSL or TCP protocols
- Supports IPv4 and IPv6 clients
-
Benefits
- Intelligent routing
- Certificate management
- Security patching
- SSL policies
-
TCP Proxy
- Is a global load balancing service for unencrypted, non-HTTP traffic
- Terminates TCP sessions at load balancing layer
- IPv4 or IPv6 clients
-
Benefits
- Intelligent routing
- Security patching
-
Network Load Balancing
- Is a regional, non-proxied load balancing service
- Traffic can only be balanced between VM instances that are in the same region
- Uses forwarding rules to balance the load of your systems based on incoming IP protocol data (port and protocol type)
-
Traffic
- UDP
- TCP/SSL ports
-
Architecture
- Backend service-based
- Target pool-based
-
Internal Load Balancing
- Is a regional private load balancing service for TCP and UDP-based traffic
- It's only accessible through internal IP addresses or virtual machine instances in the same region