How-to guides
You can create a Load Balancer service by entering essential information and selecting detailed options through the Samsung Cloud Platform Console.
Creating a Load Balancer
You can create and use a Load Balancer service through the Samsung Cloud Platform Console.
Follow these steps to create a Load Balancer:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Create Load Balancer button. You will be navigated to the Create Load Balancer page.
- On the Create Load Balancer page, enter the information required for service creation and select detailed options.
- In the Service Information area, enter or select the required information.
| Item | Required | Detailed Description |
|---|---|---|
| Load Balancer Name | Required | Load Balancer resource name
|
| Service Type | Required | Load Balancer service type
|
| VPC Name | Required | VPC where the Load Balancer will be created
|
| Service Subnet Name | Required | VPC Subnet where the Load Balancer will be created
|
| Service IP | Optional | Service IP of the Load Balancer
|
| Public NAT IP | Optional | Public NAT IP to use in the Load Balancer when allowing service access from external (internet)
|
| Source NAT IP | Optional | IP to use for member communication in the Load Balancer
|
| Health Check IP | Optional | IP to use for health check in the Load Balancer
|
| Use Firewall | Optional | Set whether to use Firewall
|
| Save Firewall Log | Optional | Select whether to save Firewall log
|
| Item | Required | Detailed Description |
|---|---|---|
| Description | Optional | Enter resource description |
| Tag | Optional | Add tag
|
- Review the created service information and estimated charges, then click the Create button.
- When creation is complete, verify the created resource on the Load Balancer List page.Notice
- The Load Balancer service does not provide access control functionality for Service IP and service ports.
- When creating a Load Balancer, we recommend selecting Use Firewall to manage communication between client and Load Balancer, and between Load Balancer and members using Firewall rules, and using Save Firewall Log to store access logs.
- If you set the Firewall log storage feature when creating a service, you must set up the log storage first. If the log storage setup is not complete, you cannot create the Load Balancer service.
CautionIf using Firewall, you must add rules required for Load Balancer communication. Pay attention to the direction for each purpose when registering rules.
- If you do not add rules, the Load Balancer service will not function properly.
Purpose Source IP Destination IP Protocol Destination Port/Type Direction Client → LB Connection Client IP LB Service IP Listener Protocol Listener Service Port Outbound LB → Member Connection LB Source NAT IP LB Server Group Member IP LB Server Group Protocol Member Port Inbound LB → Member Health Check LB Health Check IP LB Server Group Member IP Health Check Protocol Health Check Port - If health check port and member port are different, register member port
Inbound Figure and Table. Adding Load Balancer Firewall Rules - The Load Balancer service does not provide access control functionality for Service IP and service ports.
- When creation is complete, verify the created resource on the Load Balancer List page.
Viewing Load Balancer Detailed Information
For Load Balancer services, you can view and modify resource lists and detailed information from the Load Balancer menu. The Load Balancer Detail page consists of Detailed Information, Connected Resources, Tags, and Task History tabs.
Follow these steps to view detailed information about the Load Balancer service:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the resource for which you want to view detailed information. You will be navigated to the Load Balancer Detail page.
- The Load Balancer Detail page displays status information and additional feature information, and consists of Detailed Information, Connected Resources, Tags, Task History tabs.
Item Detailed Description Status Load Balancer resource status - Active: Service is normally activated
- Deleting: Processing service termination request
- Creating: Processing service creation request
- Error: Cannot check current status due to internal error
- Editing: Processing service modification request
Service Termination Delete Load Balancer resource Table. Load Balancer status information and additional feature items
- The Load Balancer Detail page displays status information and additional feature information, and consists of Detailed Information, Connected Resources, Tags, Task History tabs.
Detailed Information
On the Detailed Information tab, you can view and modify the detailed information of the resource selected from the Load Balancer List, and modify necessary information.
| Item | Detailed Description |
|---|---|
| Service | Service name |
| Resource Type | Resource type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource name |
| Resource ID | Unique resource ID in the service |
| Creation Date | Service creation date |
| Modification Date | Service modification date |
| Creator | User who requested service creation |
| Modifier | User who requested service modification |
| Load Balancer Name | Load Balancer name |
| Service IP | Load Balancer’s Service IP (used during communication between client and Load Balancer)
|
| Service Type | Load Balancer service type |
| Source NAT IP | Load Balancer’s Source NAT IP (used during communication between Load Balancer and server)
|
| VPC Name | VPC resource name where the Load Balancer is created
|
| Service Subnet Name | Subnet resource name where the Load Balancer is created
|
| Public NAT IP | Load Balancer’s Public NAT IP (used when configuring internet service)
|
| Private NAT IP | Load Balancer’s Private NAT IP
|
| Health Check IP | Load Balancer Health Check IP (used when checking health of LB server group members)
|
| Description | Additional information or description about the Load Balancer
|
| Firewall Name | Firewall resource name connected to the Load Balancer
|
Connected Resources
On the Connected Resources tab, you can view the list of Listeners connected to the Load Balancer, and create or terminate Listeners.
- By selecting a Listener item on the Connected Resources tab, you can navigate to the Listener Detail page to view detailed information and modify or delete it.
- By clicking the Edit icon on the Listener Detail page items, you can modify the information.
| Item | Detailed Description | |
|---|---|---|
| Create Listener | Create Listener button | |
| Listener Name | Listener resource name | |
| Routing Rules | Routing rules connected to the Listener
| |
| Protocol | Protocol to which the Listener will listen | |
| Port | Port to which the Listener will listen | |
| Creation Date | Listener creation date | |
| Delete | Delete Listener button |
Tags
You can view, add, modify, or delete tag information for the resource selected from the Load Balancer List page.
| Item | Detailed Description |
|---|---|
| Tag List | Tag list
|
Task History
On the Task History tab, you can view the task history of the selected resource.
| Item | Detailed Description |
|---|---|
| Task Details | Task execution content |
| Task Date | Task execution date |
| Resource Type | Resource type |
| Resource Name | Load Balancer name |
| Task Result | Task execution result (Success/Failure) |
| Task User Information | User information who performed the task |
Managing Load Balancer Resources
You can manage Load Balancer resources such as creating and deleting Listeners.
Creating a Listener
Create a Listener on the Load Balancer to receive client requests and process traffic according to Listener settings.
The protocol for receiving client requests varies depending on the Load Balancer service type.
- For L4 Load Balancer: TLS, TCP, UDP protocols
- For L7 Load Balancer: HTTP, HTTPS protocols
Creating a Listener in L4 Load Balancer
Follow these steps to create a Listener in an L4 Load Balancer:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the Load Balancer resource where you want to create a Listener. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Connected Resources tab. You will be navigated to the Connected Resources tab page.
- On the Connected Resources tab page, click the Create Listener button in the upper right corner.
- In the Service Information area, enter or select the required information.
- The information you can enter varies depending on the Protocol.
| Item | Required | Detailed Description |
|---|---|---|
| Load Balancer | Required | Load Balancer resource name where the Listener will be created |
| Listener Name | Required | Listener resource name |
| Protocol | Required | Select Listener listening protocol
|
| Service Port | Required | Enter Listener listening port
|
| Routing Rules | Required | Set routing rules
|
| Session Persistence Time | Required | Set client session persistence time
|
| Proxy Protocol | Optional | Set whether to add client IP information to proxy protocol header (when using TCP protocol)
|
| Persistence | Required | Select session persistence (Sticky Session) method (when using TCP, TLS protocol)
|
| SSL Certificate | Optional | Select default encryption certificate and security level (when using TLS protocol)
|
| Server SSL Security Level | Required | Select security level when configuring End-to-End SSL (when using TLS protocol)
|
- In the Additional Information area, enter or select the required information.
| Item | Required | Detailed Description |
|---|---|---|
| Description | Optional | Enter resource description |
| Tag | Optional | Add tag
|
- Review the created service information and click the Create button.
- When creation is complete, verify the created resource on the Connected Resources tab of the Load Balancer Detail page.
Creating a Listener in L7 Load Balancer
Follow these steps to create a Listener in an L7 Load Balancer:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the Load Balancer resource where you want to create a Listener. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Connected Resources tab. You will be navigated to the Connected Resources tab page.
- On the Connected Resources tab page, click the Create Listener button in the upper right corner.
- In the Service Information area, enter or select the required information.
- The information you can enter varies depending on the Protocol.
| Item | Required | Detailed Description |
|---|---|---|
| Load Balancer | Required | Load Balancer resource name where the Listener is created |
| Listener Name | Required | Listener resource name |
| Protocol | Required | Select Listener listening protocol
|
| Service Port | Required | Enter Listener listening port
|
| Routing Rules > Routing Action | Required | Select routing processing method
|
| Routing Rules > Routing Condition | Required | When routing action is LB Server Group Forward, set LB Server Group by routing condition
|
| Persistence | Optional | Select session persistence (Sticky Session) method (when routing action is LB Server Group Forward)
|
| Listener timeout settings > Session Persistence Time | Optional | Set HTTP connection persistence time
|
| Listener timeout settings > HTTP Connection Timeout | Optional | Set HTTP response timeout time
|
| X-Forwarded-For | Optional | Set whether to insert client IP information
|
| X-Forwarded-Proto | Optional | Set whether to insert client request protocol information
|
| X-Forwarded-Port | Optional | Set whether to insert client request port information
|
| HTTP 2.0 | Optional | Set whether to use HTTP/2 when connecting client and server |
| SSL Certificate | Optional | Select encryption certificate and security level (when using HTTPS protocol)
|
| Server SSL Security Level | Required | Select security level when configuring End-to-End SSL (when using HTTPS protocol)
|
The URL path matching method for routing rules is Starts with (prefix match).
- Checks whether the entered URL path starts with a specific string, and if the beginning matches, the routing rule is applied.
- Example: If the entered URL is
/api/- Matching URLs:
/api/users, /api/v1/login, /api/images/logo.png - Non-matching URLs:
/auth/api/, /API/users
- Matching URLs:
- In the Additional Information area, enter or select the required information.
| Item | Required | Detailed Description |
|---|---|---|
| Description | Optional | Enter resource description |
| Tag | Optional | Add tag
|
- Review the created service information and click the Create button.
- When creation is complete, verify the created resource on the Connected Resources tab of the Load Balancer Detail page.
Supported Items by SSL Security Level
The list of TLS versions and Cipher Suites supported by SSL security level in the Listener is as follows.
| Security Level | TLS Version | Cipher Suite (Encryption Algorithm) |
|---|---|---|
| High | TLS 1.3 | TLS13_AES_128_GCM_SHA256 TLS13_AES_256_GCM_SHA384 TLS13_CHACHA20_POLY1305_SHA256 |
| Normal/Low | Normal: TLS 1.3, 1.2 Low: TLS 1.3, 1.2, 1.1 | TLS13_AES_128_GCM_SHA256 TLS13_AES_256_GCM_SHA384 TLS13_CHACHA20_POLY1305_SHA256 RC4-MD5 RC4-SHA DES-CBC3-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-CHACHA20-PLY1305 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-CHACHA20-POLY135 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305 |
Viewing Listener Detailed Information
You can view and modify detailed information of a Listener by selecting it from the Connected Resources tab on the Load Balancer Detail page.
Follow these steps to view detailed information of the Listener:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the resource for which you want to view detailed information. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Connected Resources tab.
- From the connected resources list, click the Listener for which you want to view detailed information. You will be navigated to the Listener Detail page.
- The Listener Detail page displays status information and additional feature information, and consists of Detailed Information, Tags, Task History tabs.
| Item | Detailed Description |
|---|---|
| Status | Listener status
|
| Delete Listener | Delete Listener |
Detailed Information
On the Detailed Information tab, you can view the detailed information of the Listener and modify necessary information. The detailed information varies depending on the Load Balancer in use.
L4 Load Balancer Detailed Information
| Item | Detailed Description |
|---|---|
| Service | Service name |
| Resource Type | Resource type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource name |
| Resource ID | Unique resource ID in the service |
| Creator | User who requested Listener creation |
| Creation Date | Listener creation date |
| Modifier | User who requested Listener modification |
| Modification Date | Listener modification date |
| Listener Name | Listener name |
| Protocol | Protocol used by Listener |
| Port | Port used by Listener |
| Session Persistence Time | Client session persistence time
|
| Proxy Protocol | Whether to insert client IP information
|
| Persistence | Whether to use session persistence (Sticky Session)
|
| Routing Rules | Routing action and LB Server Group information
|
| SSL Certificate | Default certificate, SSL security level, and expiration date information
|
| SNI Certificate | SNI certificate detailed information
|
| Server SSL Security Level | Whether to encrypt server connection
|
| Description | Additional information about the Listener
|
L7 Load Balancer Detailed Information
| Item | Detailed Description |
|---|---|
| Service | Service name |
| Resource Type | Resource type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource name |
| Resource ID | Unique resource ID in the service |
| Creator | User who requested Listener creation |
| Creation Date | Listener creation date |
| Modifier | User who requested Listener modification |
| Modification Date | Listener modification date |
| Listener Name | Listener name |
| Protocol | Protocol used by Listener |
| Port | Port used by Listener |
| Session Persistence Time | HTTP connection persistence time
|
| Client Connection Persistence Time | HTTP client connection persistence timeout
|
| Server Response Wait Time | HTTP server response wait timeout
|
| X-Forwarded-For | Whether to insert client IP information
|
| X-Forwarded-Proto | Whether to insert client request protocol information
|
| X-Forwarded-Port | Whether to insert client request port information
|
| Persistence | Whether to use session persistence (Sticky Session)
|
| HTTP 2.0 | Whether to use HTTP/2 when connecting client and server
|
| Routing Rules | Routing action and routing condition/redirection target information
|
| SSL Certificate | Default certificate, SSL security level, and expiration date information
|
| SNI Certificate | SNI certificate detailed information
|
| Server SSL Security Level | Whether to encrypt server connection
|
| Description | Additional information about the Listener
|
Tags
You can view, add, modify, or delete tag information for the Listener.
| Item | Detailed Description |
|---|---|
| Tag List | Tag list
|
Task History
You can view the task history of the Listener.
| Item | Detailed Description |
|---|---|
| Task Details | Task execution content |
| Task Date | Task execution date |
| Resource Type | Resource type |
| Resource Name | Listener name |
| Task Result | Task execution result (Success/Failure) |
| Task User Information | User information who performed the task |
Modifying Routing Rules
You can modify routing rules of a Listener from the Connected Resources tab on the Load Balancer Detail page.
Follow these steps to modify routing rules of the Listener:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the resource for which you want to view detailed information. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Connected Resources tab.
- From the connected resources list, click the Listener for which you want to add routing conditions. You will be navigated to the Listener Detail page.
- On the Listener Detail page, click the Edit icon on the Routing Rules item. The Modify Routing Rules popup window will open.
- Modify routing rules according to the routing action, then click the OK button.
Item RequiredDetailed Description Routing Action - Currently set routing method (cannot modify) Routing Condition Required Can modify routing conditions when routing action is LB Server Group Forward - URL Path: Modify request URL path and LB Server Group (can add up to 20)
- Host Header: Modify request host and LB Server Group (can add up to 20)
Redirection Target Required Can modify redirection target when routing action is URL Redirection - Path: Can modify change URL path
- Host: Can modify change host
- Protocol/Port: Cannot modify (only HTTP → HTTPS redirection possible)
Table. Listener routing rule modification items
Deleting a Listener
Follow these steps to delete a Listener that is not in use:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the Load Balancer resource from which you want to delete a Listener. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Connected Resources tab. You will be navigated to the Connected Resources tab page.
- On the Connected Resources tab page, click the Listener you want to delete. You will be navigated to the Listener Detail page.
- On the Listener Detail page, click the Delete Listener button.
Terminating Load Balancer
You can terminate a Load Balancer that is not in use to reduce costs. However, since it may affect application services, request termination after sufficient prior review.
You cannot terminate a Load Balancer in the following cases:
- If there are Listeners connected to the Load Balancer: Delete the connected Listeners on the Connected Resources tab of the Load Balancer Detail page.
- If using Public NAT IP on the Load Balancer: Release the Public NAT IP in use on the Detailed Information tab of the Load Balancer Detail page.
- If using Private NAT IP on the Load Balancer: Release the Private NAT IP in use on the Detailed Information tab of the Load Balancer Detail page.
- If there are rules registered in the Firewall: Delete the rules of the Firewall in use on the Detailed Information tab of the Load Balancer Detail page.
- If connected to PrivateLink Service: Check the connected Load Balancer on the PrivateLink Service Detail page.
Follow these steps to terminate a Load Balancer:
- Click the All Services > Networking > Load Balancer menu. You will be navigated to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be navigated to the Load Balancer List page.
- On the Load Balancer List page, click the resource you want to terminate. You will be navigated to the Load Balancer Detail page.
- On the Load Balancer Detail page, click the Terminate Service button.
- When termination is complete, verify resource termination on the Load Balancer List.