Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
  • Blog
  • Pricing
  • Documentation
Yandex project
© 2025 Yandex.Cloud LLC
Yandex Smart Web Security
  • Getting started
    • All tutorials
    • Creating an L7 load balancer with a security profile
    • Creating an L7 load balancer with a security profile through an Application Load Balancer Ingress controller
    • API Gateway protection with Smart Web Security
    • Centralized online publication and DDoS protection of applications
      • Overview
        • Overview
        • Management console
        • Terraform
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. Tutorials
  2. Migrating services from an NLB to L7 ALB for DDoS protection using Smart Web Security
  3. NLB as a target for ALB
  4. Overview

Migrating services from an external NLB load balancer to an L7 ALB load balancer with an internal NLB load balancer as a target

Written by
Yandex Cloud
Updated at April 9, 2025

Yandex Network Load Balancer can distribute traffic across your load balancer pods deployed in a Yandex Managed Service for Kubernetes cluster. If Yandex Application Load Balancer does not support your load balancer configuration, you can add an internal network load balancer for distributing traffic to your load balancer pods and connect the internal network load balancer as a target for the Application Load Balancer L7 load balancer with a Yandex Smart Web Security security profile.

In this tutorial, we describe the scenario where you create an internal network load balancer to distribute traffic across the NGINX Ingress controller pods deployed in a Managed Service for Kubernetes cluster and specify the internal network load balancer’s IP address in the L7 load balancer target group.

You can create a service migration infrastructure using the following tools:

  • Management console: Use the Yandex Cloud management console to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Terraform Yandex Cloud provider.

Was the article helpful?

Previous
Terraform
Next
Management console
Yandex project
© 2025 Yandex.Cloud LLC