You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?
You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?
To implement a secure and highly available solution for deploying a web application using Compute Engine and managed instance groups, you should use HTTP(S) load balancing. HTTP(S) load balancing is designed for web applications, providing global distribution, high availability, automatic scaling, and support for SSL termination. Additionally, to make your application accessible over the internet, you should use an A record in your DNS public zone with the load balancer’s IP address. This setup ensures that your application is reachable to users globally while following Google-recommended best practices.
D is correct!
Compliance question was already two times before. And I stay with HTTP(S) load balancer because it recommend practices in Associate Cloud Engineer Path. HTTP(S) Load Balancing: This is a globally distributed, managed service for HTTP and HTTPS traffic that provides high availability, automatic scaling, and support for SSL termination. It ensures your web application is secure and can handle varying traffic loads efficiently. A Record in DNS Public Zone: An A record maps your domain name to the IP address of the load balancer, making your application accessible to users over the internet. Using a public DNS zone ensures that your application is reachable globally.
SSL Proxy Load Balancing with DNS Private Zone and A record: SSL Proxy Load Balancing is suitable for non-HTTP(S) traffic and not recommended for web applications serving HTTP/HTTPS content. Using a private DNS zone would restrict access to internal networks, not the internet.