Create and manage Network Proxy Load Balancer
    • PDF

    Create and manage Network Proxy Load Balancer

    • PDF

    Article summary

    The latest service changes have not yet been reflected in this content. We will update the content as soon as possible. Please refer to the Korean version for information on the latest updates.

    Available in VPC

    Network Proxy Load Balancer is a Load Balancer using a similar method to the Load Balancer provided in the Classic environment. With the Proxy method of communication, it offers the same load balancing algorithm as Application Load Balancers.

    Create Network Proxy Load Balancer

    To create a Network Proxy Load Balancer, follow these steps:

    1. Access the NAVER Cloud Platform console.
    2. Click Services > Networking > Load Balancer in order.
    3. Click the Load Balancer menu.
    4. Click [Create Load Balancer] > [Create Network Proxy Load Balancer] in order.
    5. When the Load Balancer creation screen appears, proceed with the following steps in order:
    Note

    The 3. Set certificate step appears only when a listener is added with the TLS protocol in the 2. Create Load Balancer (set listener) step.
    If you added listeners only with TCP protocol, the 3. Set certificate step does not appear. Skip the step and proceed in order.

    1. Create Load Balancer

    Enter the information for the Network Proxy Load Balancer you wish to create and click the [Next] button.

    • Network: select the network type for Load Balancer.

      • Private IP: it processes the load balancing from the internal server using a Private IP within VPC. It cannot be accessed from outside VPC.
      • Public IP: the Public IP is set to allow calling from outside VPC or the Internet. It processes the load balancing. You can utilize it by connecting with the domains or CDN services of customers using the random domain provided with the Public IP.
    • Load processing capacity: select the size of Load Balancer depending on the load control capacity.

      • You can select a Small, Medium, Large, or Extra-large option based on the load processing capacity.
      • Each size can handle at least 30,000/60,000/90,000/120,000 loads, respectively, based on connections per second (CPS).
      • Due to SSL offloading, TLS is expected to have roughly 1/10th of the capacity compared to TCP, although this can vary based on the authentication key method and size.
    • Target VPC: select the VPC to create a Load Balancer in.

    • Select subnet: select the Zone and Subnet to use to create Load Balancer.

      Caution
      • The selected Zone and Subnet cannot be changed after the Load Balancer creation is completed.
      • Create and select a dedicated Subnet. If Load Balancer is located in the same Subnet as the server, it does not process the load balancing to the server.
      • You can only select the Subnet included in the VPC you chose in Target VPC.
        • If you chose Private IP, you can only select the Subnet created with a Private IP Load Balancer Subnet.
        • If you chose Public IP, you can only select the Subnet created with Public IP Load Balancer Subnet.
        • For more information on how to create Subnets, see Create Subnet.
      • You do not need to create separate Subnets for each Load Balancer, however, we recommend a Subnet in the C Class (255.255.255.0) scale.
    • Public IP: select a Public IP that you possess or subscribe to a new Public IP.

    2. Create Load Balancer (set listener)

    1. Select the protocol (TCP/TLS) that the basic listener of Load Balancer will operate with.
    2. Set up the port to which the basic listener of Load Balancer will bind.
    3. Click the [Add] button.
      • A listener is added.
      • Repeat steps 1 to 3 to add multiple listeners.
      • To delete an added listener, click the [Delete] button.
    4. Click the [Next] button.

    3. Set certificate

    Note

    Set certificate appears only when a listener is added with the TLS protocol in 2. Create Load Balancer (set listener).

    1. Select the appropriate certificate for the service from those registered in Certificate Manager.
    Note

    Only RSA-2048 or higher, or ECDSA P256 public key algorithm certificates are supported.

    1. Select the TLS protocol version at the TLS minimum support version.
      • You can select from TLSv1.0, TLSv1.1, and TLSv1.2.
    2. Select the Cipher Suite that the TLS listeners will support in Set Cipher Suite.
      • You can select the encryption function for the Load Balancer to provide at the encryption negotiation with the client.
      • You can select Select All to select all Cipher Suites available.

    4. Select target group

    Select the target group to apply load balancing and click the [Next] button.

    • To do this, the target group must be created in advance. If there is no created target group, click the [Create target group] button to create a target group (see Create target group).
    • Among target groups created, only target groups that can be connected are displayed.
      • You can only select a Target Group created with PROXY_TCP protocols for Network Proxy Load Balancers.
    Caution

    The range of Load Balancer Subnet must be added to ACG of the bound server and NACL as an access source and allowed port.

    5. View setting information

    View the setting information for Load Balancer and click the [Create Load Balancer] button.

    Manage Network Proxy Load Balancer

    You can change the Load Balancer, Subnet, and listener setting for the created Network Proxy Load Balancer and check the monitoring information as a graph.

    Note

    You can change the server applied to Load Balancer in the Target Group menu. For more information, see Target setting.

    Load Balancer Settings

    To view the setting information and change the setting for Load Balancer, follow these steps:

    1. From the NAVER Cloud Platform console, click Services > Networking > Load Balancer in order.

    2. Click the Load Balancer menu.

    3. Select the Load Balancer to view or change the setting information and click the [Change Load Balancer settings] button.

      • The change Load Balancer settings popup window appears and you can view the setting information of the Load Balancer.
    4. After applying changes, click the [OK] button.

      • You can change load processing capacity.
        • You can select a Small, Medium, Large, or Extra-large option based on the load processing capacity.
        • Each size can handle at least 30,000/60,000/90,000/120,000 loads, respectively, based on connections per second (CPS).
      • Due to SSL offloading, TLS is expected to have roughly 1/10th of the capacity compared to TCP, although this can vary based on the authentication key method and size.
      • You can change the Idle Timeout.

    Change Subnet

    Note
    • When you create the Load Balancer, you can add a subnet only when you select 1 Zone and 1 Subnet.
    • Once you add a Subnet, it cannot be changed.

    To add Zones and Subnets where Network Proxy Load Balancer will be placed, follow these steps:

    1. From the NAVER Cloud Platform console, click Services > Networking > Load Balancer in order.
    2. Click the Load Balancer menu.
    3. Select the Load Balancer you want to add a subnet to and click the [Change subnet] button.
      • The change Load Balancer subnet popup window appears, and you can view the setting information of the Load Balancer Subnet.
    4. Add Zones and Subnets and click the [OK] button.

    Set listener

    You can check the registered listeners on the change listener settings screen and add/change/delete them. You can view and change the rules.

    Note

    You cannot add or delete a rule in Network Proxy Load Balancer.

    To move listeners to the change settings page, follow these steps:

    1. From the NAVER Cloud Platform console, click Services > Networking > Load Balancer in order.
    2. Click the Load Balancer menu.
    3. Select the Load Balancer to change the listener setting and click the [Change listener settings] button.
      • When you move to the change listener settings screen, you can view the listeners you set upon creating the Load Balancer as a Default.

    Add listener

    To add listeners, follow these steps:

    1. Click the [Add listener] button on the change listener settings screen.
    2. Select a protocol (TCP/TLS) for the listener you wish to add.
    3. Enter the port number that the listener will bind to.
    4. If you selected TLS, select the following items.
      • Select the appropriate certificate for the service from those registered in Certificate Manager.
      • Select the TLS protocol version.
        • You can select from TLSv1.0, TLSv1.1, and TLSv1.2.
      • Select the Cipher Suite that the TLS listener will support.
        • You can select the encryption function for the Load Balancer to provide at the encryption negotiation with the client.
    5. Select the target group the listener's traffic will be forwarded to.
    6. Click [OK].

    Change listener

    To change listeners, follow these steps:

    1. Click the [Change listener] button on the change listener settings screen.
    2. See add listener to apply the changes.
    3. Click [OK].

    Delete listener

    Note
    • At least 1 listener must remain, so if 1 listener is added, that listener cannot be deleted. If you want to delete the 1 remaining listener, add listeners before deleting it.
    • Only if the Load Balancer is in the Operating status, you can delete a listener.

    To delete a listener, follow these steps:

    1. Select the listener you want to delete on the change listener settings screen.
    2. Click the [Delete listener] button.
    3. Check the content on the delete listener popup window and click the [Delete] button.
      • The selected listener is deleted.

    View rules

    You can view the registered rules on the view/change rules screen.

    Rules have the following characteristics:

    • Each rule consists of actions (Network Proxy Load Balancers do not take conditions.)
    • You cannot delete the Default rules
    • The rules are applied in priority order, and unapplied traffic operates following the Default rules

    To view registered rules, follow these steps:

    1. Select the listener you want to view on the change listener settings screen.
    2. Click the [View/Change rules] button.
      • Move to the View/Change rules screen.

    Change rules

    To change rules, follow these steps:

    1. Select the listener you wish to change a rule for on the change listener settings screen and click the [View/Change rules] button.
    2. Select the rule to change on the view/change rules screen and click the [Change rules] button.
    3. Apply the changes.
      • Change the Target Group at Action and click the [Add] button.
        • Weightings cannot be changed.
      • Click the [X] button to delete the added target group.
    4. Click [OK].

    Monitoring Network Proxy Load Balancer

    You can check the regularly collected information for Concurrent connection, Connection per Second, Traffic In and Traffic Out for the selected period each as a graph.

    Note

    The collection cycle varies depending on the selected period. Monitoring information collected by handling load balancing can be set up and viewed for durations ranging from at least 1 minute to a year.

    Aggregation cycle (Interval)View period
    1-minute cycleUp to 6 hours
    5-minute cycleUp to 1 day
    30-minute cycleUp to 1 week
    2-hour cycleUp to 1 month
    1-day cycle1 month exceeded

    To check the monitoring information of the Network Proxy Load Balancer, follow these steps:

    1. From the NAVER Cloud Platform console, click Services > Networking > Load Balancer in order.
    2. Click the Load Balancer menu.
    3. Select a Load Balancer to monitor and click the [Monitoring] button.
      • The basic monitoring popup window for the Load Balancer pops up and shows the monitoring information as graphs.
      • Select the period to view the monitoring information collected for the selected period.
      • Click the [Refresh] button to update the viewed graphs.
      • Click i_loadbalancer_enlargement to view an extended graph and click the [x] button to download the collected monitoring information as an Excel file.

    Delete Network Proxy Load Balancer

    Caution

    If you delete a Load Balancer, rules set to the Route Table are also deleted. If you are using the Route Table rules in another service, they may not function normally after deleting a Load Balancer.

    To delete a Network Proxy Load Balancer, follow these steps:

    1. From the NAVER Cloud Platform console, click Services > Networking > Load Balancer in order.
    2. Click the Load Balancer menu.
    3. Select a Load Balancer to delete and click the [Delete Load Balancer] button.
    4. Check the content in the delete Load Balancer popup window and click the [Delete] button.
      • The selected Load Balancer is deleted.
      • The public IP in use can be returned together. The unreturned IPs can be reassigned.

    Was this article helpful?

    Changing your password will log you out immediately. Use the new password to log back in.
    First name must have atleast 2 characters. Numbers and special characters are not allowed.
    Last name must have atleast 1 characters. Numbers and special characters are not allowed.
    Enter a valid email
    Enter a valid password
    Your profile has been successfully updated.