Examkin

Question

Difficulty: HardDeploying Cloud Load Balancers and Configuring Cloud DNS

An enterprise application receives raw encrypted TCP traffic on port 8443 from global clients. The infrastructure team needs to terminate SSL/TLS at the load balancer level and forward unencrypted TCP traffic to a backend Compute Engine Managed Instance Group. The application does not use HTTP or HTTPS protocols. Which Google Cloud load balancing architecture should be deployed to fulfill these requirements?

  1. Deploy a Global External Proxy Network Load Balancer with a target SSL proxy and an SSL certificate configured on the target proxy.Answer
  2. B
    Deploy a Global External Application Load Balancer with an HTTPS target proxy and a URL map configured for port 8443.
  3. C
    Deploy a Regional External Passthrough Network Load Balancer with an SSL certificate attached directly to the target pool.
  4. D
    Enable the Cloud DNS API in the target project and configure round-robin A records pointing directly to individual Compute Engine VM external IP addresses.

Answer

Deploy a Global External Proxy Network Load Balancer with a target SSL proxy and an SSL certificate configured on the target proxy.
The Global External Proxy Network Load Balancer using an SSL Proxy is specifically designed to handle global, non-HTTP raw TCP traffic while terminating SSL/TLS connections at the load balancer level before routing cleartext traffic to backend instances.

Step-by-Step Solution

1
Analyze the incoming traffic protocol and global scope
Traffic is raw TCP (non-HTTP/HTTPS) coming from global clients on port 8443.
Layer 7 HTTP(S) Load Balancers require valid HTTP semantics, ruling out Application Load Balancers for custom/raw TCP protocols.
2
Determine the SSL/TLS offloading capability requirement
SSL/TLS offloading is required at the load balancer before sending traffic to backends.
Passthrough Network Load Balancers do not terminate TLS; only Proxy or Application Load Balancers offload TLS.
3
Select the appropriate GCP load balancer archetype
Global External Proxy Network Load Balancer (SSL Proxy).
SSL Proxy handles non-HTTP TCP traffic globally while terminating TLS at the Google edge.

Key Concept

Selecting GCP Load Balancers Based on Protocol, SSL Offloading, and Scope
Estimated Time:2m 0s
Rate this question

Topics

Deploying Cloud Load Balancers and Configuring Cloud DNS

More questions from this topic