Examkin

Question

Difficulty: MediumPlanning Network Load Balancing, Cloud DNS, and Cloud CDN

A cloud architecture team is designing an internal microservices layer deployed across Compute Engine instances inside a Google Cloud VPC. The microservices communicate using gRPC over HTTP/2 and require URL path-based routing to direct traffic to appropriate backend service groups. All traffic must remain strictly private within the internal VPC without exposure to the public internet. Which Google Cloud load balancer should be planned to satisfy these requirements?

  1. Internal Regional Application Load BalancerAnswer
  2. B
    Internal Passthrough Network Load Balancer
  3. C
    Global External Application Load Balancer
  4. D
    External Passthrough Network Load Balancer

Answer

Internal Regional Application Load Balancer
The Internal Regional Application Load Balancer is a proxy-based Layer 7 load balancer that enables internal VPC traffic distribution for HTTP, HTTPS, and gRPC workloads. It supports advanced content-based routing policies, such as URL path matching, while using internal IP addresses within the VPC network.

Step-by-Step Solution

1
Analyze network traffic scope requirement
Traffic must be restricted to internal VPC networks without public internet exposure, ruling out external load balancers.
Security constraints dictate that services must not be reachable via public IP addresses.
2
Analyze application protocol and routing requirement
The workload uses gRPC over HTTP/2 and requires URL path-based routing, which requires Layer 7 (Application) capabilities.
Layer 4 passthrough load balancers cannot inspect HTTP/2 headers or perform path-based content routing.
3
Select the appropriate Google Cloud load balancer
The Internal Regional Application Load Balancer provides Layer 7 features (gRPC support, path matching) internally within the VPC.
It matches both the internal private scope requirement and the Layer 7 protocol/routing requirement.

Key Concept

Selecting GCP Load Balancers based on Traffic Scope (Internal vs. External) and OSI Layer Requirements (Layer 4 Passthrough vs. Layer 7 Proxy)
Estimated Time:1m 30s
Rate this question

Topics

Planning Network Load Balancing, Cloud DNS, and Cloud CDN

More questions from this topic