Modular Global HTTP Load Balancer for GCE using forwarding rules.

• If you would like to allow for backend groups to be managed outside Terraform, such as via GKE services, see the dynamic backends submodule.
• If you would like to use load balancing with serverless backends (Cloud Run, Cloud Functions or App Engine), see the serverless_negs submodule and cloudrun example.

• TCP load balancer
• HTTP/S load balancer
• Internal load balancer

This module is meant for use with Terraform 0.13. If you haven't upgraded and need a Terraform 0.12.x-compatible version of this module, the last released version intended for Terraform 0.12.x is v4.5.0.

module "gce-lb-http" { source = "GoogleCloudPlatform/lb-http/google" version = "~> 4.4" project = "my-project-id" name = "group-http-lb" target_tags = [module.mig1.target_tags, module.mig2.target_tags] backends = { default = { description = null protocol = "HTTP" port = var.service_port port_name = var.service_port_name timeout_sec = 10 enable_cdn = false custom_request_headers = null security_policy = null connection_draining_timeout_sec = null session_affinity = null affinity_cookie_ttl_sec = null health_check = { check_interval_sec = null timeout_sec = null healthy_threshold = null unhealthy_threshold = null request_path = "/" port = var.service_port host = null logging = null } log_config = { enable = true sample_rate = 1.0 } groups = [ { # Each node pool instance group should be added to the backend. group = var.backend balancing_mode = null capacity_scaler = null description = null max_connections = null max_connections_per_instance = null max_connections_per_endpoint = null max_rate = null max_rate_per_instance = null max_rate_per_endpoint = null max_utilization = null }, ] iap_config = { enable = false oauth2_client_id = null oauth2_client_secret = null } } } }

Figure 1. diagram of terraform resources

Current version is 3.0. Upgrade guides:

• 1.X -> 2.X
• 2.X -> 3.0

map(object({
 protocol = string
 port = number
 port_name = string

 description = string
 enable_cdn = bool
 security_policy = string
 custom_request_headers = list(string)

 timeout_sec = number
 connection_draining_timeout_sec = number
 session_affinity = string
 affinity_cookie_ttl_sec = number

 health_check = object({
 check_interval_sec = number
 timeout_sec = number
 healthy_threshold = number
 unhealthy_threshold = number
 request_path = string
 port = number
 host = string
 logging = bool
 })

 log_config = object({
 enable = bool
 sample_rate = number
 })

 groups = list(object({
 group = string

 balancing_mode = string
 capacity_scaler = number
 description = string
 max_connections = number
 max_connections_per_instance = number
 max_connections_per_endpoint = number
 max_rate = number
 max_rate_per_instance = number
 max_rate_per_endpoint = number
 max_utilization = number
 }))
 iap_config = object({
 enable = bool
 oauth2_client_id = string
 oauth2_client_secret = string
 })
 }))

[
 "default"
]

[
 "default"
]

• google_compute_global_forwarding_rule.http: The global HTTP forwarding rule.
• google_compute_global_forwarding_rule.https: The global HTTPS forwarding rule created when ssl is true.
• google_compute_target_http_proxy.default: The HTTP proxy resource that binds the url map. Created when input ssl is false.
• google_compute_target_https_proxy.default: The HTTPS proxy resource that binds the url map. Created when input ssl is true.
• google_compute_ssl_certificate.default: The certificate resource created when input ssl is true and managed_ssl_certificate_domains not specified.
• google_compute_managed_ssl_certificate.default: The Google-managed certificate resource created when input ssl is true and managed_ssl_certificate_domains is specified.
• google_compute_url_map.default: The default URL map resource when input url_map is not provided.
• google_compute_backend_service.default.*: The backend services created for each of the backend_params elements.
• google_compute_health_check.default.*: Health check resources created for each of the (non global NEG) backend services.
• google_compute_firewall.default-hc: Firewall rule created for each of the backed services to allow health checks to the instance group.