How-to guides
Users can create a service by entering the required Load Balancer information and selecting detailed options through the Samsung Cloud Platform Console.
Create Load Balancer
You can create and use a Load Balancer service from the Samsung Cloud Platform Console.
To create a Load Balancer, follow these steps.
- Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
- On the Service Home page, click the Create Load Balancer button. You will be taken to the Create Load Balancer page.
- On the Load Balancer Creation page, enter the information required to create the service and select detailed options.
- In the Service Information Input area, enter or select the required information.
| Category | Required status | Detailed description |
|---|---|---|
| Load Balancer name | Required | Load Balancer resource name
|
| Service Category | Required | Load Balancer service type
|
| VPC name | Required | VPC where the Load Balancer will be created
|
| Service Subnet name | Required | VPC Subnet where the Load Balancer will be created
|
| Service IP | Select | Load Balancer’s service IP
|
| Public NAT IP | Select | Select the Public NAT IP to use in the Load Balancer when allowing service access from external (Internet) sources
|
| Source NAT IP | Selection | IP used for member communication in the Load Balancer
|
| Health check IP | Selection | IP to be used for health checks in the Load Balancer
|
| Use firewall | Select | Set whether to use the firewall
|
| Firewall log storage | Select | Select whether to store Firewall logs
|
- In the Additional Information Input area, enter or select the required information.
Category Required statusDetailed description description Select Enter resource description tag Select Add tags - Up to 50 tags can be added per resource
Table. Load Balancer additional information input fields
- Check the created service information and the estimated billing amount, then click the Create button.
- After creation is complete, check the created resources on the Load Balancer List page.guide
- Load Balancer service does not provide access control for Service IP and service ports.
- When creating a Load Balancer, select Use Firewall to manage communication between the client and the Load Balancer, and between the Load Balancer and members with Firewall rules, and we recommend using Save Firewall Logs to store access logs.
- When creating a service and enabling the Firewall log storage feature, you must configure the log storage first. If the log storage is not configured, you cannot create a Load Balancer service.
CautionWhen using a firewall, you must add rules required for Load Balancer communication. Register the rules, paying attention to the direction for each purpose.
- If you do not add a rule, the Load Balancer service will not operate correctly.
Purpose Source IP Destination IP Protocol Destination Port/Type direction Client → LB connection Client IP LB Service IP Listener protocol Listener service port Outbound LB → Member connection LB Source NAT IP LB server group member IP LB server group protocol Member port Inbound LB → Member health check LB health check IP LB server group member IP Health check protocol Health check port - When the health check port and member port differ, register the member port
Inbound Figures and tables. Add Load Balancer firewall rule - Load Balancer service does not provide access control for Service IP and service ports.
- After creation is complete, check the created resources on the Load Balancer List page.
Check Load Balancer detailed information
The Load Balancer service can be viewed and edited for the resource list and detailed information in the Load Balancer menu. The Load Balancer Details page consists of Details, Connected Resources, Tags, Activity Log tabs.
Follow these steps to view detailed information about the Load Balancer service.
- Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
- From the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
- Load Balancer List page, click the resource to view its details. You will be taken to the Load Balancer Details page.
- Load Balancer Details page displays status information and additional feature information, and consists of Details, Connected Resources, Tags, Activity History tabs.
Category Detailed description status Load Balancer resource status - Active: Service is operating normally
- Deleting: Service termination request is being processed
- Creating: Service creation request is being processed
- Error: Unable to determine current status due to internal error
- Editing: Service modification request is being processed
Service termination Delete Load Balancer resource Table. Load Balancer status information and additional feature items
- Load Balancer Details page displays status information and additional feature information, and consists of Details, Connected Resources, Tags, Activity History tabs.
Detailed Information
In the Detailed Information tab, you can view the detailed information of the resource selected from the Load Balancer list and edit the necessary information.
| Category | Detailed description |
|---|---|
| Service | service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource Name |
| Resource ID | Unique resource ID in the service |
| Creation date | Service creation date and time |
| Modification date and time | Service modification date and time |
| constructor | Service creation request user |
| Editor | User requesting service modification |
| Load Balancer name | Load Balancer name |
| Service IP | Load Balancer’s Service IP (used for communication between client and Load Balancer)
|
| Service Category | Load Balancer service type |
| Source NAT IP | Load Balancer’s Source NAT IP (used for communication between Load Balancer and servers)
|
| VPC name | VPC resource name where the Load Balancer is created
|
| Service Subnet name | Subnet resource name where the Load Balancer was created
|
| Public NAT IP | Load Balancer’s Public NAT IP (used when configuring internet service)
|
| Private NAT IP | Load Balancer’s Private NAT IP
|
| Health check IP | Load Balancer Health Check IP (used when performing health checks on LB server group members)
|
| Explanation | Additional information or description about Load Balancer
|
| Firewall name | Firewall resource name connected to Load Balancer
|
Connected resources
Connected Resources tab lets you view the list of Listeners attached to the Load Balancer, and you can create or delete Listeners.
- In the Connected Resources tab, selecting the Listener item takes you to the Listener Details page where you can view, edit, and delete the detailed information.
- On the Listener Details page, clicking the Edit icon lets you modify the information.
| Category | Detailed description | |
|---|---|---|
| Create Listener | Create Listener button | |
| Listener name | Listener resource name | |
| Routing rules | Routing rules attached to the Listener
| |
| Protocol | Protocol that the Listener receives | |
| Port | Port that the Listener receives | |
| Creation Date/Time | Listener creation time | |
| Delete | Delete Listener button |
tag
Load Balancer List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
Work History tab allows you to view the work history of the selected resource.
| Category | Detailed description |
|---|---|
| Work log | Task execution details |
| Work Date/Time | Task execution date and time |
| Resource Type | Resource Type |
| Resource name | Load Balancer name |
| Operation result | Task execution result (success/failure) |
| Operator Information | User information of the performed operation |
Load Balancer Resource Management
You can manage resources such as creating and deleting Load Balancer listeners.
Create Listener
Create a Listener on the Load Balancer to receive client requests and handle traffic according to the Listener configuration.
The protocol that receives client requests varies depending on the Load Balancer service type.
- L4 Load Balancer case: TLS, TCP, UDP protocols
- When using an L7 Load Balancer: HTTP, HTTPS protocols
Creating a Listener in L4 Load Balancer
To create a Listener in the L4 Load Balancer, follow these steps.
- Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
- Load Balancer List page, click the Load Balancer resource to create a Listener. You will be taken to the Load Balancer Details page.
- On the Load Balancer Details page, click the Connected Resources tab. You will be taken to the Connected Resources tab page.
- On the Connected Resources tab page, click the Create Listener button in the upper right.
- Enter or select the required information in the Service Information Input area.
- The information that can be entered varies depending on the protocol.
| Category | Required | Detailed description |
|---|---|---|
| Load Balancer | Required | Name of the Load Balancer resource where the Listener will be created |
| Listener name | Required | Listener resource name |
| Protocol | Required | Select Listener receive protocol
|
| service port | Required | Enter Listener receiving port
|
| Routing rules | Required | Routing rule configuration
|
| Session retention time | Required | Client session keep-alive time setting
|
| Proxy Protocol | Select | Set whether to add client IP information to the proxy protocol header (when using TCP protocol)
|
| Persistence | Required | Select Sticky Session method (set when using TCP, TLS protocols)
|
| SSL certificate | Select | Select default encryption certificate and security level (when using the TLS protocol)
|
| Server SSL security level | Required | Select security level when configuring End-to-End SSL (TLS protocol settings)
|
- In the Additional Information Input area, enter or select the required information.
| Category | Required | Detailed description |
|---|---|---|
| Explanation | Select | Enter resource description |
| tag | Select | Add tags
|
- Verify the created service information and click the Create button.
- When creation is complete, verify the created resource on the Load Balancer Details page’s Connected Resources tab.
Creating a Listener in L7 Load Balancer
Follow these steps to create a Listener in an L7 Load Balancer.
- Click the All Services > Networking > Load Balancer menu. Go to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
- On the Load Balancer List page, click the Load Balancer resource for which you want to create a Listener. You will be taken to the Load Balancer Details page.
- Click the Connected Resources tab on the Load Balancer Details page. You will be taken to the Connected Resources tab page.
- On the Connected Resources tab page, click the Create Listener button in the upper right.
- In the Service Information Input area, enter or select the required information.
- The information that can be entered varies depending on the protocol.
| Category | Required status | Detailed description |
|---|---|---|
| Load Balancer | Required | Load Balancer resource name where the Listener is created |
| Listener name | Required | Listener resource name |
| Protocol | Required | Select Listener reception protocol
|
| service port | Required | Listener receive port input
|
| Routing Rules > Routing Action | Required | Select routing processing method
|
| Routing Rules > Routing Conditions | Required | When the routing action is LB server group forwarding, set the LB server group per routing condition
|
| Persistence | Selection | Select Sticky Session mode (set when the routing action is LB server group forwarding)
|
| Listener timeout setting > Session keep-alive time | Select | HTTP connection keep-alive time setting
|
| Listener timeout setting > HTTP connection timeout | Select | Set HTTP response timeout
|
| X-Forwarded-For | Select | Set whether to insert client IP information
|
| X-Forwarded-Proto | Select | Set whether to insert client request protocol information
|
| X-Forwarded-Port | Select | Set whether to insert client request port information
|
| HTTP 2.0 | Select | Set whether to use HTTP/2 for client‑server connections |
| SSL certificate | Select | Select encryption certificate and security level (HTTPS protocol usage)
|
| Server SSL security level | Required | Select security level when configuring End-to-End SSL (HTTPSS protocol setting)
|
The routing rule’s URL path matching method is Starts with(prefix match).
- It checks whether the entered URL path starts with a specific string, and if the beginning matches, the routing rule is applied.
- Example: when the entered URL is
/api/- Matching URL:
/api/users, /api/v1/login, /api/images/logo.png - Unmatched URL:
/auth/api/, /API/users
- Matching URL:
- In the Additional Information Input area, enter or select the required information.
| Category | Required status | Detailed description |
|---|---|---|
| Explanation | Select | Enter resource description |
| tag | Select | Add tags
|
- Verify the created service information and click the Create button.
- When creation is complete, verify the created resource on the Load Balancer Details page’s Connected Resources tab.
SSL security level support items
The list of TLS versions and Cipher Suites supported by the Listener for each SSL security level is as follows.
| Security level | TLS version | Cipher Suite (encryption algorithm) |
|---|---|---|
| High | TLS 1.3 | TLS13_AES_128_GCM_SHA256 TLS13_AES_256_GCM_SHA384 TLS13_CHACHA20_POLY1305_SHA256 |
| Normal/Low | Normal: TLS 1.3, 1.2 Low: TLS 1.3, 1.2, 1.1 | TLS13_AES_128_GCM_SHA256 TLS13_AES_256_GCM_SHA384 TLS13_CHACHA20_POLY1305_SHA256 RC4-MD5 RC4-SHA DES-CBC3-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-CHACHA20-PLY1305 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-CHACHA20-POLY135 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305 |
Check Listener detailed information
On the Connected Resources tab of the Load Balancer Details page, you can select a Listener to view and edit its detailed information.
To view the Listener’s detailed information, follow these steps.
- Click the All Services > Networking > Load Balancer menu. Navigate to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer List page.
- On the Load Balancer List page, click the resource whose details you want to view. You will be taken to the Load Balancer Details page.
- On the Load Balancer Details page, click the Connected Resources tab.
- Click the Listener to view detailed information from the list of connected resources. It navigates to the Listener Details page.
- Listener Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.
| Category | Detailed description |
|---|---|
| status | Listener status
|
| Delete Listener | Delete Listener |
Detailed Information
Detailed Information tab allows you to view the Listener’s detailed information and edit the necessary details. Detailed information varies depending on the Load Balancer in use.
L4 Load Balancer Detailed Information
| Category | Detailed description |
|---|---|
| Service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource Name |
| Resource ID | Unique resource ID in the service |
| constructor | User requesting listener creation |
| Creation Date/Time | Listener creation time |
| Editor | User requesting listener modification |
| Modification date | Listener modification timestamp |
| Listener name | Listener name |
| Protocol | Listener usage protocol |
| Port | Listener port |
| Session retention time | Client session retention time
|
| Proxy Protocol | Whether to insert client IP information
|
| Persistence | Use of sticky session
|
| Routing rules | Routing action and LB server group information
|
| SSL certificate | Default certificate and SSL security level, expiration date and time information
|
| SNI certificate | SNI Certificate Details
|
| Server SSL security level | Whether server connection is encrypted
|
| Explanation | Additional information about the Listener
|
L7 Load Balancer Detailed Information
| Category | Detailed description |
|---|---|
| Service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource Name |
| Resource ID | Unique resource ID in the service |
| constructor | User requesting listener creation |
| Creation Date/Time | Listener creation time |
| Editor | User requesting listener modification |
| Modification date | Listener modification timestamp |
| Listener name | Listener name |
| Protocol | Listener usage protocol |
| Port | Listener port |
| Session retention time | HTTP connection keep-alive time
|
| Client connection keep-alive time | HTTP client connection keep-alive timeout
|
| Server response latency | HTTP server response wait timeout
|
| X-Forwarded-For | Whether to insert client IP information
|
| X-Forwarded-Proto | Whether to insert client request protocol information
|
| X-Forwarded-Port | Whether to insert client request port information
|
| Persistence | Use of sticky session
|
| HTTP 2.0 | Whether to use HTTP/2 for client-server connections
|
| Routing rules | Routing action and routing condition/redirect target information
|
| SSL certificate | Default certificate and SSL security level, expiration date and time information
|
| SNI certificate | SNI Certificate Details
|
| Server SSL security level | Whether server connection is encrypted
|
| Explanation | Additional information about the Listener
|
tag
You can view, add, modify, or delete a Listener’s tag information.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the Listener’s operation history.
| Category | Detailed description |
|---|---|
| Work log | Task execution details |
| Operation Date/Time | Task execution date and time |
| Resource Type | Resource Type |
| Resource Name | Listener name |
| Operation result | Task execution result (success/failure) |
| Operator Information | Information about the user who performed the task |
Modify routing rules
On the Connected Resources tab of the Load Balancer Details page, you can modify the Listener’s routing rules.
To modify the Listener’s routing rules, follow these steps.
- Click the All Services > Networking > Load Balancer menu. Navigate to the Load Balancer’s Service Home page.
- From the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
- On the Load Balancer List page, click the resource you want to view details for. You will be taken to the Load Balancer Details page.
- On the Load Balancer Details page, click the Connected Resources tab.
- Click the Listener to add a lighting condition from the list of connected resources. You will be taken to the Listener Details page.
- On the Listener Details page, click the Edit icon of the Routing Rules item. The Edit Routing Rules popup window opens.
- After modifying the routing rule according to the routing action, click the Confirm button.
Category Required statusDetailed description Routing Action - Current routing method (cannot be modified) Routing condition Required If the routing action is LB server group forwarding, routing conditions can be modified - URL path: Modify request URL path and LB server group (up to 20 additions possible)
- Host header: Modify request host and LB server group (up to 20 additions possible)
Redirect target Required When the routing action is URL redirection, the redirect target can be modified - Path: the URL path can be changed
- Host: the host can be changed
- Protocol/Port: cannot be modified (only HTTP → HTTPS redirection is allowed)
Table. Listener routing rule modification items
Delete Listener
To delete an unused Listener, follow these steps.
- Click the All Services > Networking > Load Balancer menu to go to the Load Balancer’s Service Home page.
- Click the Load Balancer menu on the Service Home page. You will be taken to the Load Balancer List page.
- Load Balancer List page, click the Load Balancer resource whose Listener you want to delete. You will be taken to the Load Balancer Details page.
- On the Load Balancer Details page, click the Connected Resources tab. You will be taken to the Connected Resources tab page.
- On the Connected Resources tab page, click the Listener you want to delete. Navigate to the Listener Details page.
- On the Listener Details page, click the Delete Listener button.
Terminate Load Balancer
You can reduce costs by terminating unused Load Balancers. However, since this may affect application services, request termination only after thorough prior review.
In the following cases, the Load Balancer cannot be terminated.
- If there is a Listener attached to the Load Balancer: Delete the attached Listener on the Load Balancer Details page’s Connected Resources tab.
- If you are using a Public NAT IP on the Load Balancer: Load Balancer Details page’s Details tab, deselect the Public NAT IP that is in use.
- If you are using a Private NAT IP on the Load Balancer: Load Balancer Details page’s Details tab, deselect the Private NAT IP in use.
- If there are rules registered in the Firewall: delete the Firewall rules in use from the Load Balancer Details page’s Detailed Information tab.
- If connected to a PrivateLink Service: Check the connected Load Balancer on the PrivateLink Service Details page.
To cancel the Load Balancer, follow these steps.
- Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
- On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer List page.
- Load Balancer List page, click the resource to terminate. You will be taken to the Load Balancer Details page.
- On the Load Balancer Details page, click the Terminate Service button.
- After termination is complete, check the resource termination status in the Load Balancer list.