Скачать или смотреть Configuring Traffic Blocklisting with Google Cloud Armor

Overview
HTTP(S) Load balancing is implemented at the edge of Google's network in Google's points of presence (POP) around the world. User traffic directed to an HTTP(S) load balancer enters the POP closest to the user and is then load balanced over Google's global network to the closest backend that has sufficient capacity available.

Google Cloud Armor IP blocklists/allowlists enable you to restrict or allow access to your HTTP(S) load balancer at the edge of the Google Cloud, as close as possible to the user and to malicious traffic. This prevents malicious users or traffic from consuming resources or entering your virtual private cloud (VPC) networks.

In this lab, you will verify that the HTTP load balancer with global backends is deployed. This load balancer is automatically provisioned for you during startup. You will then create a VM to test access to the load balancer. Finally, you will stress test the load balancer and blocklist the stress test IP with Google Cloud Armor.

Objectives
In this lab, you will learn how to perform the following tasks:

Verify that the HTTP load balancer is deployed.
Create a VM to test access to the HTTP load balancer.
Use Google Cloud Armor to blocklist an IP address and restrict access to an HTTP load balancer.
#gcp #googlecloud #qwiklabs #learntoearn