Console

Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator role (roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.create permission.Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator role (roles/resourcemanager.projectCreator), which contains theresourcemanager.projects.create permission.Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

gcloud

gcloud config set projectPROJECT_ID

ReplacePROJECT_ID with the project that you are using for this guide.

Terraform

export GOOGLE_CLOUD_PROJECT=PROJECT_ID

Console

1. In the Google Cloud console, go to theCloud StorageBuckets page.

   Go to Cloud Storage Buckets

2. ClickCreate bucket.

3. In theName your bucket box, enter a globally unique name that followsthenaming guidelines.

4. ClickChoose where to store your data.

5. SetLocation type toRegion.

6. SetLocation toeurope-north1. This isBUCKET_1_NAME in thisguide.

7. ClickCreate.

8. ClickBuckets to return to the Cloud Storage Buckets page.Use these instructions to create a second bucket, but set theLocation tous-east1. This isBUCKET_2_NAME inthis guide.

gcloud

gcloud storage buckets create gs://BUCKET_1_NAME --project=PROJECT_ID --default-storage-class=standard --location=europe-north1 --uniform-bucket-level-access

gcloud storage buckets create gs://BUCKET_2_NAME --project=PROJECT_ID --default-storage-class=standard --location=us-east1 --uniform-bucket-level-access

ReplaceBUCKET_1_NAME andBUCKET_2_NAMEwith the names of the buckets that you want to create.

Terraform

To create the buckets, use thegoogle_storage_bucket resource.

# Create Cloud Storage bucketsresource "random_id" "bucket_prefix" {  byte_length = 8}resource "google_storage_bucket" "bucket_1" {  name                        = "${random_id.bucket_prefix.hex}-bucket-1"  location                    = "us-east1"  uniform_bucket_level_access = true  storage_class               = "STANDARD"  // delete bucket and contents on destroy.  force_destroy = true}resource "google_storage_bucket" "bucket_2" {  name                        = "${random_id.bucket_prefix.hex}-bucket-2"  location                    = "us-east1"  uniform_bucket_level_access = true  storage_class               = "STANDARD"  // delete bucket and contents on destroy.  force_destroy = true}

To learn how to apply or remove a Terraform configuration, seeBasic Terraform commands.

gcloud

1. ClickterminalActivate Cloud Shell.

2. Run the following commands in Cloud Shell, replacing the bucket namevariables with your Cloud Storage bucket names:

gcloud storage cp gs://gcp-external-http-lb-with-bucket/three-cats.jpg gs://BUCKET_1_NAME/never-fetch/

gcloud storage cp gs://gcp-external-http-lb-with-bucket/two-dogs.jpg gs://BUCKET_2_NAME/love-to-fetch/

Terraform

To copy items into the bucket, you can use thegoogle_storage_bucket_object resource.

resource "google_storage_bucket_object" "cat_image" {  name         = "never-fetch/three-cats.jpg"  source       = "images/three-cats.jpg"  content_type = "image/jpeg"  bucket = google_storage_bucket.bucket_1.name}resource "google_storage_bucket_object" "dog_image" {  name         = "love-to-fetch/two-dogs.jpg"  source       = "images/two-dogs.jpg"  content_type = "image/jpeg"  bucket = google_storage_bucket.bucket_2.name}

Alternatively, use thenull_resource resource.

resource "null_resource" "upload_cat_image" {provisioner "local-exec" {  command = "gcloud storage cp gs://gcp-external-http-lb-with-bucket/three-cats.jpg gs://${google_storage_bucket.bucket_1.name}/never-fetch/"}}resource "null_resource" "upload_dog_image" {provisioner "local-exec" {  command = "gcloud storage cp gs://gcp-external-http-lb-with-bucket/two-dogs.jpg gs://${google_storage_bucket.bucket_2.name}/love-to-fetch/"}}

Console

To grant all users access to view objects in your buckets, repeat thefollowing procedure for each bucket:

1. In the Google Cloud console, go to theCloud Storage Buckets page.

   Go to Cloud Storage Buckets

2. Click the bucket name, followed by thePermissions tab.

3. ClickAdd.

4. In theNew principals box, enterallUsers.

5. In theSelect a role box, selectCloud Storage > Storage Object Viewer.

6. ClickSave.

7. ClickAllow public access.

gcloud

To grant all users access to view objects in your buckets, run the followingcommands:

gcloud storage buckets add-iam-policy-binding gs://BUCKET_1_NAME --member=allUsers --role=roles/storage.objectViewer

gcloud storage buckets add-iam-policy-binding gs://BUCKET_2_NAME --member=allUsers --role=roles/storage.objectViewer

Terraform

To grant all users access to view objects in your buckets, use thegoogle_storage_bucket_iam_member resource and specify theallUsersmember.

# Make buckets publicresource "google_storage_bucket_iam_member" "bucket_1" {  bucket = google_storage_bucket.bucket_1.name  role   = "roles/storage.objectViewer"  member = "allUsers"}resource "google_storage_bucket_iam_member" "bucket_2" {  bucket = google_storage_bucket.bucket_2.name  role   = "roles/storage.objectViewer"  member = "allUsers"}

Console

1. In the Google Cloud console, go to theExternal IP addresses page.

   Go to External IP addresses

2. ClickReserve static address.

3. In theName box, enterexample-ip.

4. Set theNetwork Service Tier toPremium.

5. Set theIP version toIPv4.

6. Set theType toGlobal.

7. ClickReserve.

gcloud

gcloud compute addresses create example-ip \    --network-tier=PREMIUM \    --ip-version=IPV4 \    --global

Note the IPv4 address that was reserved:

gcloud compute addresses describe example-ip \    --format="get(address)" \    --global

Terraform

To reserve an external IP address, use thegoogle_compute_global_address resource.

# Reserve IP addressresource "google_compute_global_address" "default" {  name = "example-ip"}

Console

Select the load balancer type

1. In the Google Cloud console, go to theLoad balancing page.

   Go to Load balancing

2. ClickCreate load balancer.
3. ForType of load balancer, selectApplication Load Balancer (HTTP/HTTPS) and clickNext.
4. ForPublic facing or internal, selectPublic facing (external) and clickNext.
5. ForGlobal or single region deployment, selectBest for global workloads and clickNext.
6. ForLoad balancer generation, selectClassic Application Load Balancer and clickNext.
7. ClickConfigure.

Basic configuration

1. In theName box, enterhttp-lb.

Configure the backend

1. ClickBackend configuration.

2. Click theBackend services and backend buckets box, and then clickCreate a backend bucket.

3. In theBackend bucket name box, entercats.

4. In theCloud Storage bucket box, clickBrowse.

5. SelectBUCKET_1_NAME, and then clickSelect. Creating thecats backend bucket first makes it the default, where all unmatchedtraffic requests are directed. You can't change a default backend bucket'sredirect rules in the load balancer.

6. ClickCreate.

7. Use the same process to create a backend bucket nameddogs, and selectBUCKET_2_NAME.

8. ClickOK.

Configure routing rules

Routing rules determine how your traffic is directed. To configure routing,you'll set up host rules and path matchers, which are configuration componentsof anexternal Application Load Balancer'sURL map. To set upthe rules for this example:

1. ClickHost and path rules.
2. Fordogs, enter* in theHosts field, and/love-to-fetch/* in thePaths field.

Configure the frontend

1. ClickFrontend configuration.

2. Verify that the following options are configured with these values:

   Property	Value (type a value or select an option as specified)
   Protocol	HTTP
   Network Service Tier	Premium
   IP version	IPv4
   IP address	example-ip
   Port	80

   If you want to create an HTTPS load balancer instead of an HTTP loadbalancer, you must have anSSL certificate(gcloud compute ssl-certificates list), and you must fill in the fieldsas follows:

   Property	Value (type a value or select an option as specified)
   Protocol	HTTP(S)
   Network Service Tier	Premium
   IP version	IPv4
   IP address	example-ip
   Port	443
   Certificate	Select thewww-ssl-cert certificate you created in theSet up an SSL certificate resource section, or create a new certificate.
   Optional: Enable HTTP to HTTPS Redirect	Use this checkbox to enable redirects. Enabling this checkbox creates an additional partial HTTP load balancer that uses the same IP address as your HTTPS load balancer and redirects HTTP requests to your load balancer's HTTPS frontend. This checkbox can only be selected when the HTTPS protocol is selected and a reserved IP address is used.

3. ClickDone.

Review the configuration

1. ClickReview and finalize.

2. Review theFrontend,Host and path rules, andBackend buckets.

3. ClickCreate and wait for the load balancer to be created.

4. Click the name of the load balancer (http-lb).

5. Note the IP address of the load balancer for the next task. In this guide,it's referred to asIP_ADDRESS.

gcloud

Configure the backend

gcloud compute backend-buckets create cats \  --gcs-bucket-name=BUCKET_1_NAME

gcloud compute backend-buckets create dogs \  --gcs-bucket-name=BUCKET_2_NAME

Configure the URL map

gcloud compute url-maps create http-lb \  --default-backend-bucket=cats

gcloud compute url-maps add-path-matcher http-lb \  --path-matcher-name=path-matcher-2 \  --new-hosts=* \  --backend-bucket-path-rules="/love-to-fetch/*=dogs" \  --default-backend-bucket=cats

Configure the target proxy

gcloud compute target-http-proxies create http-lb-proxy \  --url-map=http-lb

Configure the forwarding rule

gcloud compute forwarding-rules create http-lb-forwarding-rule \  --load-balancing-scheme=EXTERNAL \  --network-tier=PREMIUM \  --address=example-ip \  --global \  --target-http-proxy=http-lb-proxy \  --ports=80

Terraform

To create the load balancer, use the following Terraform resources.

Configure the backend

To create the backend, use thegoogle_compute_backend_bucket resource.

# Create LB backend bucketsresource "google_compute_backend_bucket" "bucket_1" {  name        = "cats"  description = "Contains cat image"  bucket_name = google_storage_bucket.bucket_1.name}resource "google_compute_backend_bucket" "bucket_2" {  name        = "dogs"  description = "Contains dog image"  bucket_name = google_storage_bucket.bucket_2.name}

Configure the URL map

To create the URL map, use thegoogle_compute_url_map resource.

# Create url mapresource "google_compute_url_map" "default" {  name = "http-lb"  default_service = google_compute_backend_bucket.bucket_1.id  host_rule {    hosts        = ["*"]    path_matcher = "path-matcher-2"  }  path_matcher {    name            = "path-matcher-2"    default_service = google_compute_backend_bucket.bucket_1.id    path_rule {      paths   = ["/love-to-fetch/*"]      service = google_compute_backend_bucket.bucket_2.id    }  }}

Configure the target proxy

To create the target HTTP proxy, use thegoogle_compute_target_http_proxy resource.

# Create HTTP target proxyresource "google_compute_target_http_proxy" "default" {  name    = "http-lb-proxy"  url_map = google_compute_url_map.default.id}

Configure the forwarding rule

To create the forwarding rule, use thegoogle_compute_global_forwarding_rule resource.

# Create forwarding ruleresource "google_compute_global_forwarding_rule" "default" {  name                  = "http-lb-forwarding-rule"  ip_protocol           = "TCP"  load_balancing_scheme = "EXTERNAL_MANAGED"  port_range            = "80"  target                = google_compute_target_http_proxy.default.id  ip_address            = google_compute_global_address.default.id}

NOTE: To change themode to classic Application Load Balancer, set theload_balancing_scheme attribute to"EXTERNAL" instead of"EXTERNAL_MANAGED".

To learn how to apply or remove a Terraform configuration, seeBasic Terraform commands.

Console

In a web browser, go to the following addresses to test your load balancer,replacingIP_ADDRESS with theload balancer's IP address:

• http://IP_ADDRESS/love-to-fetch/two-dogs.jpg

• http://IP_ADDRESS/never-fetch/three-cats.jpg

If you've set up an HTTP load balancer, make sure your browser doesn'tautomatically redirect to HTTPS.

gcloud

Use thecurl command to test the response from the following URLs. ReplaceIP_ADDRESS with theload balancer's IPv4 address:

curl http://IP_ADDRESS/love-to-fetch/two-dogs.jpg

curl http://IP_ADDRESS/never-fetch/three-cats.jpg