Load balancing

Google-managed public SSL certificates signed by Public Certificate Authority (pki.goog) are gradually transitioning from a 90-day validity period to a 45-day…

Google-managed public SSL certificates signed by Public Certificate Authority ( pki.goog ) are gradually transitioning from a 90-day validity period to a 45-day validity period to improve security.

Service rate limiting policies are now available in Preview for regional internal Application Load Balancers and Secure Web Proxies.

Service rate limiting policies let you maintain service availability among trusted clients that might consume an inordinate amount of resources.

Regular expression matchers in host and route rules in URL maps are now generally available (GA).

You can now use regular expressions (regex) matchers to configure more flexible and precise traffic routing rules within URL maps for Application Load Balancers. This feature allows you to leverage the power of RE2 syntax for matching on:

Generally Available: Exceptions in WAF for Azure Application Gateway and Azure Front Door

Announcing the general availability of exceptions for Web Application Firewall on Azure Application Gateway and Azure Front Door.

Public Preview: IPv6 Support for Application Gateway WAF

Announcing the Public Preview of IPv6 support for Application Gateway WAF.

External IPv6 addresses are now supported for Standard Tier.

For more information, see IPv6 subnet ranges.

A new quota system governing the configuration size of Application Load Balancers is now generally available.

This update increases the individual URL map size limit from 64 KB and 128 KB to 1 MB. For more information, see URL map size and quota units.

Zonal network endpoint groups (NEGs) with GCE_VM_IP and GCE_VM_IP_PORT endpoints support IPv6-only endpoints that reference IPv6-only or dual-stack Compute…

Zonal network endpoint groups (NEGs) with GCE_VM_IP and GCE_VM_IP_PORT endpoints support IPv6-only endpoints that reference IPv6-only or dual-stack Compute Engine VM network interfaces.

Managed workload identity for backend mTLS is generally available for the following Application Load Balancers:

Global external Application Load Balancers

AWS Transfer Family now supports source IP preservation for SFTP servers behind a Network Load Balancer (NLB)

AWS Transfer Family now preserves the client's source IP address using Proxy Protocol v2 (PPv2) when you place a Network Load Balancer (NLB) in front of your SFTP server that uses a VPC-hosted endpoint.

Public Preview: HTTP/3 over QUIC support in Azure Application Gateway

Announcing public preview support for HTTP/3 over QUIC on Azure Application Gateway. HTTP/3 is the next evolution of HTTP and uses QUIC to improve connection setup time, reduce latency, and provide better resiliency for modern web applications and APIs.

AWS Gateway Load Balancer now supports TCP Reset for faster failure recovery

A WS Gateway Load Balancer (GWLB) now supports sending TCP Reset (RST) packets when a target becomes unhealthy, is deregistered, or when a flow's idle timeout expires.

Load Balancing now supports pool sets

Cloudflare Load Balancing now supports pool sets through the API. Pool sets combine geographic matching with location-specific traffic steering. One load balancer can now use different routing behavior for different locations.

For regional external passthrough Network Load Balancers, reserving specific or automatically allocated bring your own IP (BYOIP) IPv6 addresses before…

For regional external passthrough Network Load Balancers, reserving specific or automatically allocated bring your own IP (BYOIP) IPv6 addresses before creating a load balancer, and promoting an ephemeral BYOIP IPv6 address in use by a load balancer to a reserved static IP…

SSL policy cross-project referencing is now available for Application Load Balancers and proxy Network Load Balancers in Preview.

You can use cross-project referencing to define and maintain a central SSL policy in an administrative project and reference it from target HTTPS proxies or target SSL proxies in different projects.

Generally Available: Custom block response code and body for Application Gateway WAF

Announcing the General Availability of custom block response code and body for WAF integrated with Application Gateway

Global Front End combines global external Application Load Balancers, Google Cloud Armor, Cloud CDN, and Service Extensions into one solution to help deliver,…

Global Front End combines global external Application Load Balancers, Google Cloud Armor, Cloud CDN, and Service Extensions into one solution to help deliver, scale, and secure your internet-facing applications.

Load balancing analytics now filters by pool name

Load balancing analytics now filters traffic data by pool name instead of pool ID, aligning the query behavior with the pool names displayed in the filter dropdown.

Load Balancing health notifications now resolve automatically

Load Balancing health notifications are now stateful. When a pool or endpoint becomes unhealthy, the notification opens an incident in your alerting tool as before.

AWS Application and Network Load Balancers now support RFC 9151 compliant security policies

AWS Application Load Balancer (ALB) and Network Load Balancer (NLB) now support new TLS-based security policies that comply with RFC 9151 TLS server requirements for Commercial National Security Algorithm (CNSA) 1.0 suite requirements.