Internal Load Balancing in 5 mins Deliver scalable and resilient internal-only services on GCP

Google Cloud Load Balancing Global

Regional

HTTP(S) Load Balancing

SSL proxy

Internal TCP/UDP Load Balancing

Network TCP/UDP Load Balancing

Request Routing

Hash-based LB algorithm

Capacity-based LB algorithm

Global Load Balancing

Health Checks

Connection Draining

Autoscaling

Cross-region failover

Affinity

Logging

Monitoring

Cloud CDN

Internal Load Balancing

LB IP: 10.10.10.1

Internal (RFC 1918) Load Balancing

Src IP: 10.10.10.1 Dst IP: 10.10.10.200

Src IP: 10.10.10.1 Dst IP: 10.10.10.200

Client IP preserved

REST API

Client A

X Health checks (TCP, HTTP, HTTPS)

gcloud CLI

Autoscaling (no prewarming)

Console

Backend B

Session Affinity

Internal Load Balancing Example

Subnet 1

Client instances

Subnet 2

Subnet 3

Internal LB IP 10.240.0.200

10.240.0.1

192.168.1.5

10.240.0.2

Zone: us-central1-b

192.168.1.1

Zone: us-central1-a 172.16.1.1

10.240.0.3 Zone: us-central1-c

Network: shopnet Google Cloud Platform US Central region

Logical representation of the ILB, there is no LB instance between client and backend instances

Backends running shopping cart application

Internal Load Balancing is delivered using Andromeda, GCP’s software-defined network virtualization stack

Under the hood: Software-defined load balancing Andromeda

Load Balancers can become choke points

Client instance

......

IP1

There is no load balancer in the path between your client and backend instances

Client instance IP2

Client instance

......

Client instance

IP1

IP2

Virtual Network

VIP

Load Balancer instance(s)

IP3

IP4

Backend

Backend

Internal LB

IP5

......

Backend

Typical Instance-based Internal Load Balancing

VIP

VIP

Backend instance

Backend instance

IP3

IP4

VIP

......

Backend instance IP5

Software-defined Internal Load Balancing on GCP

Configuring Internal Load Balancing (console)

Infrastructure & Operations

6

Internal Load Balancing Configuration Client Instance

Internal LB IP, port configuration

Forwarding Rule

Regional Backend Service

Backend 1

Backend 2

Backend 3

Instance 2

Instance 3

Instance 4

Instance Group 3

Instance 1

Instance Group 2

Instance Group 1

Backend Configuration

Instance 5

Instance 6

Subnet B

Subnet A Region X

1. Click “create load balancer” to get started Click Create

2. Select the type of Internal Load Balancer- either TCP or UDP

Click here for TCP ILB

3. Specify you want to load balance traffic between your instances (internal)

Specify you want internal load balancing

4. Configure backends in your region of choice

Configure backends

Remember to open up firewall for ILB health checks

5. Configure your RFC 1918 Internal LB IP (specify or let ILB auto-allocate)

Configure Internal Load Balancing IP and port (or list of ports)

6. Click “create” and your ILB is ready to distribute traffic!

Click Create. Done!

Internal Load Balancing Use Cases

Infrastructure & Operations

14

ILB Use Case 1: Scaling and HA for internal (micro)services Load balance across multiple instances of your internal service Internal Load Balancer

Internal Load Balancer

Internal Load Balancer

RECOMMEND

SHOPPPING CART

SHOPPPING CART

RECOMMEND

SHOPPING CART

CATALOG

CATALOG

Google Cloud Platform Application composed of ILB-scaled services

ILB Use Case 2: Multi-tier apps

Web Tier

User in San Francisco

External Load Balancing Global: HTTP(S) LB, SSL Proxy Regional: Network TCP/UDP LB

Internal Load Balancing

Web Tier with external load balancing

IP: 10.10.10.10, Port: 80

Internal Load Balancing

Web Tier

Database Tier Internal Tier

Internal Tier

User in Singapore

Internal Tier with Internal Load Balancing

Database Tier

us-central-1b

100.1.1.1, Port: 80

Web Tier

IP: 10.20.1.1, Port: 80 Internal Load Balancing

User in Iowa

us-central-1a

Database Tier Internal Tier asia-east-1a

ILB Use Case 3: Scale-out and HA for virtual appliances

Internal Load Balancer

10.0.0.2

Virtual Appliance Instance 1

10.0.0.3

10.0.0.4

Virtual Appliance Instance 2

Virtual Appliance Instance 3

Google Cloud Platform

Learn more

https://cloud.google.com/compute/docs/load-balancing/internal/

‹#›

Internal Load Balancingin 5 mins Cloud Platform

Deliver scalable and resilient internal-only services on GCP ... Network TCP/UDP ... Subnet 1. Subnet 2. 192.168.1.5. Zone: us-central1-c. Zone: us-central1-b.

3MB Sizes 36 Downloads 196 Views

Recommend Documents

Configuring Internal Load Balancing (console) Cloud Platform
... “create” and your ILB is ready to distribute traffic! Click Create. Done! Page 9. ‹#› https://cloud.google.com/compute/docs/load-balancing/internal/. Learn more.

WebFilings Cloud Platform
The mission is to help companies find new ways to reduce the time, risk, and ... Solution. As the development team worked to create the software they envisioned, ... WebFilings customers say they have filed their quarterly 10-Qs a week earlier.

Certificate Cloud Platform
Apr 15, 2016 - Sites API. • Sheets API. • Apps Activity API. Google Apps Admin SDK APIs: • Admin Settings API. • Domain Shared Contacts API. • Directory API.

Gigya Cloud Platform
Gigya enables its customers to integrate social media into their website applications through ... One of Gigya's most popular apps lets customers enhance live.

Untitled Cloud Platform
Page 1. Updated document version now lives in https://developers.google.com/appengine/pdf/HowtofileaGESCsupportcase.pdf.

Certificate Cloud Platform
Apr 15, 2016 - the Information Security Management System as defined and implemented by located in Mountain View, California, United States of America,.

kahuna Cloud Platform
Google App Engine, a Google Cloud Platform service, provided the scalability they needed. A platform to handle size. Kahuna's customer engagement engine ...

Google Cloud Storage Cloud Platform
Store application data Google Cloud Storage provides fast access to application data, such as images for a photo editing app. • Share data with colleagues and ...

G Suite Cloud Platform
Barrow Street. Dublin 4. 30 December 2016. Re: Application for a common opinion regarding Google Apps (now G-Suite utilisation of model contract clauses.

D3.2 Cloud Platform v2 - NUBOMEDIA
Jan 27, 2015 - NUBOMEDIA: an elastic Platform as a Service (PaaS) cloud ..... 4.1.1 Network Service Record (NSR) deployment sequence diagram . ...... 3 https://www.openstack.org/assets/pdf-downloads/Containers-and-OpenStack.pdf ...

Interactions Marketing Cloud Platform
solutions, the company focused on Google BigQuery. With previous ... Interactions worked closely with Google and software company Tableau while conducting ...

News Limited Cloud Platform
customers in just 3 weeks. • Published five ... testing within two to three months ... A mix of either field sales teams, call centre agents, or basic online tools. Ads .... solution. “We've fundamentally changed the way consumers engage with.

MAG Interactive Cloud Platform
Build Ruzzle for both Android and iOS ... Sell premium Android version through .... Ruzzle saw rapid growth at launch, and is currently handling over 10M.

Pocket Gems Cloud Platform
“We're really excited about the Android platform,” Crystal says. “I'm hopeful that the Tap series will become one of the most popular Android apps, too.

Google Cloud Platform Services
Dec 21, 2017 - Because the circumstances and types of deployments in GCP can range so ... with the ability to manage the Cloud Platform and other Google ... network services and security features—such as routing, firewalling, ... storage system, Da

D3.3 Cloud Platform v3 - NUBOMEDIA
Apr 5, 2017 - NUBOMEDIA: an elastic PaaS cloud for interactive social multimedia. 2 ..... while the Media Service components are deployed on the IaaS using the NFV layers. ...... defined as Network Service (refer to section 2.3.3 for more details), t

SOC 3 Cloud Platform
Jul 29, 2016 - Confidentiality. For the Period 1 May 2015 to 30 April 2016 ... Google Cloud Platform, and Other Google Services System ..... virtual machines on-demand, manage network connectivity using a simple but flexible networking.

Google Cloud Platform Services
Dec 21, 2017 - Platform, nor have we considered the impact of any security concerns on a specific workflow or piece of software. The assessment ... similar to a traditional file system, including fine-grained access control lists for each object. ...

Google Cloud and Australian Privacy Principles Cloud Platform
Principles (APP), regulates the way organisations and government agencies handle the personal ... Direct marketing. 8. Cross-border disclosure of personal information. 9. Adoption, use or disclosure of government related identifiers. 10. Quality of p

Google Cloud VPN Interop Guide Cloud Platform
Google Cloud VPN service​. This information is ... authentication. Finally, enter the IP range of the Cisco ASA ​inside network​under ​Remote network IP ranges​: .... crypto map gcp-vpn-map 1 set ikev2 ipsec-proposal gcp crypto map ...

Google Cloud VPN Interop Guide Cloud Platform
the ​Google Cloud VPN service​. .... Create two firewall policies, one for Google Cloud Platform network ingress to the 300C local subnets, and one for 300C ...

Encryption in Transit in Google Cloud Cloud Platform
4.1 On-premises data center to Google Cloud. 4.1.1 TLS using GCLB external load balancers. 4.1.2 IPsec tunnel using Google Cloud VPN. 4.2 User to Google Front End. 4.2.1 Managed SSL certificates: Free and automated certificates. 4.2.2 Require TLS in

Google Cloud VPN Interop Guide Cloud Platform
Using Cloud VPN With Amazon Web Services​TM​ Virtual Private Gateway ... 1. A site-to-site policy based IPsec VPN tunnel configuration using static routing. 2. ... Virtual Private Cloud ​– customer defined private network space in AWS.

Google Cloud VPN Interop Guide Cloud Platform
Phase 1. Encryption aes256. Integrity sha256 prf sha196. DiffieHellman (DH) ... Virtual Networks​ – these are private networks defined in the cloud service.