Examkin

Soru

Zorluk: ZorDeploying Cloud Load Balancers and Configuring Cloud DNS

An enterprise application receives raw encrypted TCP traffic on port 8443 from global clients. The infrastructure team needs to terminate SSL/TLS at the load balancer level and forward unencrypted TCP traffic to a backend Compute Engine Managed Instance Group. The application does not use HTTP or HTTPS protocols. Which Google Cloud load balancing architecture should be deployed to fulfill these requirements?

  1. Deploy a Global External Proxy Network Load Balancer with a target SSL proxy and an SSL certificate configured on the target proxy.Cevap
  2. B
    Deploy a Global External Application Load Balancer with an HTTPS target proxy and a URL map configured for port 8443.
  3. C
    Deploy a Regional External Passthrough Network Load Balancer with an SSL certificate attached directly to the target pool.
  4. D
    Enable the Cloud DNS API in the target project and configure round-robin A records pointing directly to individual Compute Engine VM external IP addresses.

Cevap

Deploy a Global External Proxy Network Load Balancer with a target SSL proxy and an SSL certificate configured on the target proxy.
The Global External Proxy Network Load Balancer using an SSL Proxy is specifically designed to handle global, non-HTTP raw TCP traffic while terminating SSL/TLS connections at the load balancer level before routing cleartext traffic to backend instances.

Adım Adım Çözüm

1
Analyze the incoming traffic protocol and global scope
Traffic is raw TCP (non-HTTP/HTTPS) coming from global clients on port 8443.
Layer 7 HTTP(S) Load Balancers require valid HTTP semantics, ruling out Application Load Balancers for custom/raw TCP protocols.
2
Determine the SSL/TLS offloading capability requirement
SSL/TLS offloading is required at the load balancer before sending traffic to backends.
Passthrough Network Load Balancers do not terminate TLS; only Proxy or Application Load Balancers offload TLS.
3
Select the appropriate GCP load balancer archetype
Global External Proxy Network Load Balancer (SSL Proxy).
SSL Proxy handles non-HTTP TCP traffic globally while terminating TLS at the Google edge.

Anahtar Kavram

Selecting GCP Load Balancers Based on Protocol, SSL Offloading, and Scope
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Deploying Cloud Load Balancers and Configuring Cloud DNS

Bu konudan daha fazla soru