Examkin

Soru

Zorluk: OrtaDeploying Cloud Load Balancers and Configuring Cloud DNS

Your organization operates a proprietary non-HTTP software service listening on custom TCP port 8443 across Compute Engine virtual machines deployed in multiple Google Cloud regions. You must expose this service to external Internet clients while terminating SSL/TLS encryption at the Google Cloud network edge prior to passing unencrypted TCP traffic to your backend instances. Which Google Cloud load balancer configuration should you deploy?

  1. Deploy a Global External Proxy Network Load Balancer (TCP Proxy) with SSL offloading configured on the target proxy.Cevap
  2. B
    Deploy an External Passthrough Network Load Balancer with target pools handling port 8443 traffic.
  3. C
    Deploy a Global External Application Load Balancer with an HTTPS target proxy and host routing rules.
  4. D
    Deploy an Internal Application Load Balancer with cross-region global backend service routing.

Cevap

Deploy a Global External Proxy Network Load Balancer (TCP Proxy) configured for SSL offloading at the edge target proxy.
The Global External Proxy Network Load Balancer (SSL Proxy / TCP Proxy) is specifically designed to route external non-HTTP TCP traffic across global regions while terminating SSL/TLS sessions at the Google Cloud infrastructure edge before delivering unencrypted TCP packets to backend virtual machine instances.

Adım Adım Çözüm

1
Analyze client traffic requirements and protocol scope
Identified that client traffic is incoming from external Internet connections using custom non-HTTP TCP protocol on port 8443.
Traffic source (external) and layer requirement (Layer 4 non-HTTP TCP) dictate selecting an external Layer 4 proxy or passthrough balancer.
2
Evaluate SSL/TLS offloading requirement
TLS must be terminated at the Google Cloud network edge rather than on backend Compute Engine instances.
Passthrough network load balancers cannot terminate SSL/TLS at the edge, whereas Proxy Network Load Balancers (TCP/SSL Proxy) terminate TLS at the edge and proxy the underlying connection.
3
Select the matching Google Cloud load balancing product
Choose Global External Proxy Network Load Balancer (TCP Proxy / SSL Proxy).
It fulfills all criteria: external global reach, non-HTTP TCP traffic support, multi-region backend distribution, and SSL termination at the edge proxy.

Anahtar Kavram

Selecting GCP Load Balancer Types based on Protocol Layer and TLS Offloading
Bu soruyu puanla

Konular

Deploying Cloud Load Balancers and Configuring Cloud DNS

Bu konudan daha fazla soru