Migrating services from a NLB to an L7 ALB for DDoS protection using Yandex Smart Web Security

Distributed denial of service, or DDoS, is a type of cyberattack that involves sending massive numbers of requests to a server or network to overwhelm it or make it inoperable.

You can deploy services in Yandex Cloud using a Yandex Network Load Balancer which distributes traffic across cloud resources. To protect such services from DDoS attacks and bots at the application level (L7) using Yandex Smart Web Security, you will need to migrate the service from the Network Load Balancer to an L7 Yandex Application Load Balancer.

Service migration depends on what targets are used by the Network Load Balancer:

• Network Load Balancer with VMs as targets
• Network Load Balancer with an instance group as a target
• Network Load Balancer with a Managed Service for Kubernetes cluster as a target
• Network Load Balancer as a target for Application Load Balancer