Creating a network load balancer

Written by

Yandex Cloud

Updated at November 26, 2024

Examples
- Creating a network load balancer without a listener
- Creating a network load balancer with a listener and attached target group

Note

Before creating a network load balancer, create a target group to attach to it.

You can only set the load balancer type (internal or external) when creating it. You cannot update its type afterwards.

Management console

CLI

Terraform

API

To create a network load balancer:

In the management console, select the folder to create a load balancer in.
In the list of services, select Network Load Balancer.
Click Create a network load balancer.
Enter a name. The naming requirements are as follows:
- The name must be from 3 to 63 characters long.
- It may contain lowercase Latin letters, numbers, and hyphens.
- The first character must be a letter and the last character cannot be a hyphen.
Assign a public IP address to the load balancer. You can assign an address automatically or select one from the list of reserved addresses.
Under Listeners, add a listener:
1. Click Add listener.
2. In the window that opens, set the listener parameters:
  - Name.
  - Protocol: TCP or UDP.
    
    Note
    
    By default, the listener uses TCP. To use UDP, submit a request to technical support.
  - Port where the listener will listen for incoming traffic. The values range from 1 to 32767.
  - Target port the load balancer will redirect traffic to. The values range from 1 to 32767.
3. Click Add.
Under Target groups add a target group:
1. Click Add target group.
2. Select a target group or create a new one:
  - In the Target group field, select Create target group.
  - In the window that opens, enter a target group name.
  - Add virtual machines to the target group.
  - Click Create.
3. Optionally, under Health check, click Configure. In the window that opens, specify the resource health check settings:
  - Name.
  - Type: HTTP or TCP. For health checks to use HTTP, specify the URL to check in the Path field.
  - Port for health checks. The values range from 1 to 32767.
  - Timeout in sec: Response timeout in seconds. The possible values are from 1 to 60. The interval must be at least 1 second longer than the waiting time.
  - Interval in sec: Health check interval in seconds. The values range from 1 to 60.
  - Healthy threshold: Number of successful checks required to consider a VM instance ready to receive traffic.
  - Unhealthy threshold: Number of failed checks after which no traffic will be routed to a VM instance.
4. Click Apply.
Click Create.

If you do not have the Yandex Cloud command line interface yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

See the description of the CLI command to create a network load balancer:
```
yc load-balancer network-load-balancer create --help
```
To create a load balancer with a listener and a target group, run this command:
```
yc load-balancer network-load-balancer create <load_balancer_name> \
   --listener name=<listener_name>,`
             `port=<port>,`
             `target-port=<target_port>,`
             `protocol=<protocol>,`
             `external-ip-version=<IP_address_version> \
   --target-group target-group-id=<target_group_ID>,`
                 `healthcheck-name=<health_check_name>,`
                 `healthcheck-interval=<interval_between_checks>s,`
                 `healthcheck-timeout=<health_check_timeout>s,`
                 `healthcheck-unhealthythreshold=<number_of_failed_checks_to_get_Unhealthy_status>,`
                 `healthcheck-healthythreshold=<number_of_successful_checks_to_get_Healthy_status>,`
                 `healthcheck-tcp-port=<TCP_port>,`
                 `healthcheck-http-port=<HTTP_port>,`
                 `healthcheck-http-path=<URL>
```
Where:
- listener: Listener parameters:
  - name: Name of the listener.
  - port: Port where the load balancer will accept incoming traffic. The acceptable values are from 1 to 32767.
  - target-port: Port to which the load balancer will redirect traffic. The acceptable values are from 1 to 32767.
  - protocol: Protocol the listener will use (TCP or UDP).
  - external-address: External IP address of the listener.
  - external-ip-version: Version of the external IP address (ipv4 or ipv6).
- --target-group: Target group parameters and settings of its resource health checks:
  - target-group-id: Target group ID.
    
    To find out the ID, get a list of target groups in the folder.
  - healthcheck-name: Resource health check name.
  - healthcheck-interval: Health check interval in seconds. The possible values are from 1s to 60s. The interval must be at least 1 second longer than the waiting time.
  - healthcheck-timeout: Response timeout in seconds. The possible values are from 1s to 60s.
  - healthcheck-unhealthythreshold: Number of failed checks after which no traffic will be routed to a virtual machine. The possible values are from 2 to 10.
  - healthcheck-healthythreshold: Number of successful checks required to consider a virtual machine ready to receive traffic. The possible values are from 2 to 10.
  - healthcheck-tcp-port: Port for health checks via TCP. The possible values are from 1 to 32,767.
  - healthcheck-http-port: Port for health checks via HTTP. The possible values are from 1 to 32,767.
  - healthcheck-http-path: URL to perform health checks via HTTP.
  You cannot specify healthcheck-tcp-port and healthcheck-http-port at the same time.
  
  Warning
  
  The healthcheck-interval and healthcheck-timeout parameter values must be in <time_in_seconds>s format, e.g., 20s.

With Terraform, you can quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. These files store the infrastructure description written in HashiCorp Configuration Language (HCL). If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.

Terraform is distributed under the Business Source License. The Yandex Cloud provider for Terraform is distributed under the MPL-2.0 license.

For more information about the provider resources, see the documentation on the Terraform website or mirror website.

If you don't have Terraform, install it and configure the Yandex Cloud provider.

Describe the parameters of the network load balancer resource in a configuration file.

Here is an example of the configuration file structure:
```
resource "yandex_lb_network_load_balancer" "foo" {
  name = "<load_balancer_name>"
  deletion_protection = "<deletion_protection>"
  listener {
    name = "<listener_name>"
    port = <port_number>
    external_address_spec {
      ip_version = "<IP_address_version>"
    }
  }
  attached_target_group {
    target_group_id = "<target_group_ID>"
    healthcheck {
      name = "<health_check_name>"
      http_options {
        port = <port_number>
        path = "<URL>"
      }
    }
  }
}
```
Where:
- name: Name of the network load balancer.
- deletion_protection: Deletion protection for the network load balancer. You cannot delete a load balancer with this option enabled. If load balancer deletion protection is enabled, you can still delete its listeners and target groups. The default value is false.
- listener: Listener properties:
  - name: Listener name.
  - port: Port in the range from 1 to 32767 the network load balancer will receive incoming traffic at.
  - external_address_spec: Specification of the listener for the external load balancer:
    - ip_version: External IP address specification. Specify the IP address version, ipv4 or ipv6. The default value is ipv4.
- attached_target_group: Description of the network load balancer's target group parameters:
  - target_group_id: Target group ID.
    
    To find out the ID, get a list of target groups in the folder.
  - healthcheck: Health check parameters. Enter a name, a port number ranging from 1 to 32767, and a path for health checks.
For more information about the yandex_lb_network_load_balancer resource parameters in Terraform, see the provider documentation.
Make sure the settings are correct.
1. Using the command line, navigate to the folder that contains the up-to-date Terraform configuration files with an infrastructure plan.
2. Run the command:
```
terraform validate
```
  If there are errors in the configuration files, Terraform will point to them.
Create a network load balancer.
1. Run the command to view planned changes:
```
terraform plan
```
  If the resource configuration descriptions are correct, the terminal will display a list of the resources to modify and their parameters. This is a test step. No resources are updated.
2. If you are happy with the planned changes, apply them:
  1. Run the command:
```
terraform apply
```
  2. Confirm the update of resources.
  3. Wait for the operation to complete.

To create a new network load balancer, use the create REST API method for the NetworkLoadBalancer resource or the NetworkLoadBalancerService/Create gRPC API call.

Examples