Question

Difficulty: EasyPlanning Network Load Balancing, Cloud DNS, and Cloud CDN

A system administrator needs to configure internal load balancing for backend virtual machine instances communicating over raw TCP within the same Google Cloud VPC network and region. The solution must preserve the client source IP addresses and avoid SSL offloading overhead. Which Google Cloud load balancer service should be planned for this architecture?

  1. Internal Passthrough Network Load BalancerAnswer
  2. B
    Global External Application Load Balancer
  3. C
    Cloud CDN integrated with a Storage Bucket
  4. D
    External Passthrough Network Load Balancer

Answer

Internal Passthrough Network Load Balancer is the correct load balancer choice for internal Layer 4 TCP traffic requiring client source IP preservation within a VPC region.
The Internal Passthrough Network Load Balancer is a regional Layer 4 load balancer that distributes internal TCP/UDP traffic among Compute Engine instances. Because it is a passthrough load balancer, it routes traffic directly to backends without terminating connections, preserving the client source IP address.

Step-by-Step Solution

1
Analyze traffic scope and direction requirements.
Traffic is internal within the same VPC network and region.
Internal traffic requires an internal load balancing solution rather than an external public-facing endpoint.
2
Identify the protocol and OSI layer required by the workload.
Workload uses raw TCP (Layer 4) and requires client source IP preservation.
Layer 4 passthrough network load balancers do not terminate TCP connections or act as Layer 7 proxies, allowing client source IP preservation.
3
Select the matching Google Cloud Load Balancer product.
Internal Passthrough Network Load Balancer fulfills all internal regional Layer 4 requirements.
It is built on Andromeda network virtualization and efficiently routes internal TCP traffic directly to backend Compute Engine VMs.

Key Concept

Selecting GCP Load Balancers based on traffic scope (internal vs external) and protocol layer (L4 passthrough vs L7 proxy).
Rate this question