Examkin

Soru

Zorluk: Çok zorPlanning Network Load Balancing, Cloud DNS, and Cloud CDN

An organization is deploying a global gaming application on Google Cloud that uses a custom binary non-HTTP protocol over TCP. Clients worldwide must connect to the service with encrypted TLS sessions. To minimize latency, the solution must terminate TLS at Google's global edge network using Google-managed SSL certificates and distribute the decrypted raw TCP traffic to backend Compute Engine instance groups located in multiple regions. Which load balancing architecture should you recommend to meet these requirements?

  1. Configure a Global External Proxy Network Load Balancer with an SSL proxy target proxy and backend services in each region.Cevap
  2. B
    Configure a Global External Application Load Balancer with an HTTPS target proxy and instance group backends.
  3. C
    Configure an External Passthrough Network Load Balancer with target pools configured in each destination region.
  4. D
    Configure an Internal Passthrough Network Load Balancer integrated with Cloud DNS geolocation routing policies.

Cevap

Configure a Global External Proxy Network Load Balancer with an SSL proxy target proxy and backend services in each region.
The Global External Proxy Network Load Balancer configured with an SSL proxy target proxy is specifically designed for non-HTTP raw TCP traffic requiring global TLS termination at Google's edge network and routing across multiple backend regions.

Adım Adım Çözüm

1
Analyze protocol requirements
The application uses a custom non-HTTP binary protocol over raw TCP with TLS encryption.
Layer 7 HTTP(S) Application Load Balancers cannot handle arbitrary raw TCP protocols.
2
Analyze network topology and TLS termination requirements
Traffic originates globally and requires TLS termination at Google's edge network prior to forwarding to multi-region backends.
Regional passthrough load balancers cannot terminate TLS at the edge or distribute traffic globally from a single Anycast IP.
3
Select the appropriate GCP load balancer family
Choose Global External Proxy Network Load Balancers using SSL proxy mode.
SSL Proxy terminates TLS at Google edge network for raw TCP traffic and routes to multi-region backend instance groups.

Anahtar Kavram

Selecting GCP Load Balancers based on Traffic Scope (Global vs Regional), Protocol (HTTP vs Raw TCP), and TLS Offloading Needs
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Planning Network Load Balancing, Cloud DNS, and Cloud CDN

Bu konudan daha fazla soru