Yandex Cloud
Search
Contact UsGet started
  • Blog
  • Pricing
  • Documentation
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML & AI
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Customer Stories
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
  • Blog
  • Pricing
  • Documentation
Yandex project
© 2025 Yandex.Cloud LLC
Tutorials
    • All tutorials
    • Differentiation of access permissions for user groups
    • Creating an L7 load balancer with a Smart Web Security security profile through an Application Load Balancer Ingress controller
    • Centralized online publication and app protection against DDoS attacks
      • Overview
        • Overview
        • Management console
        • Terraform
    • Delivering logs from a VM instance to Cloud Logging
    • Storing load balancer logs to PostgreSQL
    • Secure storage of GitLab CI passwords as Yandex Lockbox secrets
    • Service account with an OS Login profile for VM management via Ansible
    • Transferring logs from Container Optimized Image to Cloud Logging
    • Adding an HTML page to work with SmartCaptcha
    • Creating an L7 load balancer with a security profile
    • Alert settings in Monitoring
    • Exporting audit logs to MaxPatrol SIEM
    • Exporting audit logs to SIEM Splunk systems
    • Uploading audit logs to ArcSight SIEM
    • Server-side encryption for an Object Storage bucket
    • Encrypting secrets in Hashicorp Terraform
    • Managing KMS keys with Hashicorp Terraform
    • Auto Unseal in Hashicorp Vault
  1. Security
  2. Migrating services from an NLB to L7 ALB for DDoS protection using Smart Web Security
  3. NLB with a Managed Service for Kubernetes cluster as a target
  4. Overview

Migrating services from a NLB load balancer with a Yandex Managed Service for Kubernetes cluster as a target to an L7 ALB load balancer

Written by
Yandex Cloud
Updated at April 9, 2025

You can use a Yandex Network Load Balancer load balancer as part of services within a Yandex Managed Service for Kubernetes cluster. The cluster itself creates network load balancer objects according to the manifests provided and monitors the load balancer's target group receiving VMs from that cluster's node groups.

One of the options for a network load balancer in a Managed Service for Kubernetes cluster is to use it as part of an nginx Ingress controller.

This tutorial covers the migration from a network load balancer to an Yandex Application Load Balancer L7 load balancer created by an Application Load Balancer Ingress controller, with a Yandex Smart Web Security security profile connected.

You can create a service migration infrastructure using the following tools:

  • Management console: Use the Yandex Cloud management console to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Terraform Yandex Cloud provider.

Was the article helpful?

Previous
Terraform
Next
Management console
Yandex project
© 2025 Yandex.Cloud LLC