Fabian Lee : Software Engineer

GCP: Enable HttpLoadBalancing feature on Cluster to avoid errors when applying BackEndConfig

June 5, 2022
Categories: Hyperscaler, Kubernetes

If you are configuring Istio/ASM ingress gateways with a BackendConfig for specifying health checks, timeouts, or Cloud Armor policies, then you need to ensure that your GKE cluster has the HttpLoadBalancing feature enabled. If this feature is not enabled, you will see an error message like below when attempting to apply the BackendConfig manifest: unable … GCP: Enable HttpLoadBalancing feature on Cluster to avoid errors when applying BackEndConfig

GCP: enabling Cloud Armor on GCP HTTPS LB for Anthos Service Mesh

March 6, 2022
Categories: Hyperscaler

If you are using Anthos Service Mesh to deliver your public applications from a GFE HTTPS LB, I would strongly suggest enabling Cloud Armor which is a WAF (web application firewall) that can mitigate and defend against a variety of attacks such as cross-site scripting and denial of service. As a summary overview, the first … GCP: enabling Cloud Armor on GCP HTTPS LB for Anthos Service Mesh