Application Load Balancer API, REST: LoadBalancer.UpdateListener

Written by

Updated at July 9, 2026

HTTP request
Path parameters
Body parameters
ListenerSpec
EndpointSpec
AddressSpec
ExternalIpv4AddressSpec
InternalIpv4AddressSpec
ExternalIpv6AddressSpec
StreamListener
StreamHandler
HttpListener
HttpHandler
Http2Options
Redirects
TlsListener
TlsHandler
ClientCertificatesVerification
SniMatch
Response
Status

Updates the specified listener of the specified application load balancer.

HTTP request

POST https://alb.api.cloud.yandex.net/apploadbalancer/v1/loadBalancers/{loadBalancerId}:updateListener

Path parameters

Field

Description

loadBalancerId

string

Required field. ID of the application load balancer to update the listener in.

Body parameters

{
  "updateMask": "string",
  "listenerSpec": {
    "name": "string",
    "endpointSpecs": [
      {
        "addressSpecs": [
          {
            // Includes only one of the fields `externalIpv4AddressSpec`, `internalIpv4AddressSpec`, `externalIpv6AddressSpec`
            "externalIpv4AddressSpec": {
              "address": "string"
            },
            "internalIpv4AddressSpec": {
              "address": "string",
              "subnetId": "string"
            },
            "externalIpv6AddressSpec": {
              "address": "string"
            }
            // end of the list of possible fields
          }
        ],
        "ports": [
          "string"
        ]
      }
    ],
    // Includes only one of the fields `stream`, `http`, `tls`
    "stream": {
      "handler": {
        "backendGroupId": "string",
        "idleTimeout": "string"
      }
    },
    "http": {
      "handler": {
        "httpRouterId": "string",
        "rewriteRequestId": "boolean",
        // Includes only one of the fields `http2Options`, `allowHttp10`
        "http2Options": {
          "maxConcurrentStreams": "string"
        },
        "allowHttp10": "boolean",
        // end of the list of possible fields
        "preserveHttp1HeaderCasing": "boolean"
      },
      "redirects": {
        "httpToHttps": "boolean"
      }
    },
    "tls": {
      "defaultHandler": {
        // Includes only one of the fields `streamHandler`, `httpHandler`
        "streamHandler": {
          "backendGroupId": "string",
          "idleTimeout": "string"
        },
        "httpHandler": {
          "httpRouterId": "string",
          "rewriteRequestId": "boolean",
          // Includes only one of the fields `http2Options`, `allowHttp10`
          "http2Options": {
            "maxConcurrentStreams": "string"
          },
          "allowHttp10": "boolean",
          // end of the list of possible fields
          "preserveHttp1HeaderCasing": "boolean"
        },
        // end of the list of possible fields
        "certificateIds": [
          "string"
        ],
        "clientCertificatesVerification": {
          "requireClientCertificate": "boolean",
          // Includes only one of the fields `bytes`
          "bytes": "string"
          // end of the list of possible fields
        }
      },
      "sniHandlers": [
        {
          "name": "string",
          "serverNames": [
            "string"
          ],
          "handler": {
            // Includes only one of the fields `streamHandler`, `httpHandler`
            "streamHandler": {
              "backendGroupId": "string",
              "idleTimeout": "string"
            },
            "httpHandler": {
              "httpRouterId": "string",
              "rewriteRequestId": "boolean",
              // Includes only one of the fields `http2Options`, `allowHttp10`
              "http2Options": {
                "maxConcurrentStreams": "string"
              },
              "allowHttp10": "boolean",
              // end of the list of possible fields
              "preserveHttp1HeaderCasing": "boolean"
            },
            // end of the list of possible fields
            "certificateIds": [
              "string"
            ],
            "clientCertificatesVerification": {
              "requireClientCertificate": "boolean",
              // Includes only one of the fields `bytes`
              "bytes": "string"
              // end of the list of possible fields
            }
          }
        }
      ]
    }
    // end of the list of possible fields
  }
}

Field

Description

updateMask

string (field-mask)

A comma-separated names off ALL fields to be updated.
Only the specified fields will be changed. The others will be left untouched.
If the field is specified in updateMask and no value for that field was sent in the request,
the field's value will be reset to the default. The default value for most fields is null or 0.

If updateMask is not sent in the request, all fields' values will be updated.
Fields specified in the request will be updated to provided values.
The rest of the fields will be reset to the default.

listenerSpec

ListenerSpec

Required field. New attributes of the listener.

ListenerSpec

Field	Description
name	string Required field. Name of the listener. The name is unique within the application load balancer. Value must match the regular expression `[a-z][-a-z0-9]{1,61}[a-z0-9]`.
endpointSpecs[]	EndpointSpec Endpoints of the listener. Endpoints are defined by their IP addresses and ports.
stream	StreamListener Unencrypted stream (TCP) listener settings. Includes only one of the fields `stream`, `http`, `tls`. Listener type and settings.
http	HttpListener Unencrypted HTTP listener settings. Includes only one of the fields `stream`, `http`, `tls`. Listener type and settings.
tls	TlsListener TLS-encrypted HTTP or TCP stream listener settings. All handlers within a listener (TlsListener.defaultHandler and TlsListener.sniHandlers) must be of one type, HttpHandler or StreamHandler. Mixing HTTP and TCP stream traffic in a TLS-encrypted listener is not supported. Includes only one of the fields `stream`, `http`, `tls`. Listener type and settings.

EndpointSpec

Field

Description

addressSpecs[]

AddressSpec

Endpoint public (external) and internal addresses.

The number of elements must be greater than 0.

ports[]

string (int64)

Endpoint ports.

The number of elements must be greater than 0. Acceptable values are 1 to 65535, inclusive.

AddressSpec

Field	Description
externalIpv4AddressSpec	ExternalIpv4AddressSpec Public IPv4 endpoint address. Includes only one of the fields `externalIpv4AddressSpec`, `internalIpv4AddressSpec`, `externalIpv6AddressSpec`. Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.
internalIpv4AddressSpec	InternalIpv4AddressSpec Internal IPv4 endpoint address. To enable the use of listeners with internal addresses, contact support. Includes only one of the fields `externalIpv4AddressSpec`, `internalIpv4AddressSpec`, `externalIpv6AddressSpec`. Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.
externalIpv6AddressSpec	ExternalIpv6AddressSpec Public IPv6 endpoint address. Includes only one of the fields `externalIpv4AddressSpec`, `internalIpv4AddressSpec`, `externalIpv6AddressSpec`. Endpoint address of one of the types: public (external) IPv4 address, internal IPv4 address, public IPv6 address.

ExternalIpv4AddressSpec

Field

Description

address

string

IPv4 address.

InternalIpv4AddressSpec

Field

Description

address

string

IPv4 address.

subnetId

string

Required field. ID of the subnet that the address belongs to.

ExternalIpv6AddressSpec

Field

Description

address

string

IPv6 address.

StreamListener

A stream (TCP) listener resource.

Field

Description

handler

StreamHandler

Required field. Settings for handling stream (TCP) requests.

StreamHandler

A stream (TCP) handler resource.

Field

Description

backendGroupId

string

Required field. ID of the backend group processing requests. For details about the concept, see
documentation.
The backend group type, specified via BackendGroup.backend, must be stream.
To get the list of all available backend groups, make a BackendGroupService.List request.

idleTimeout

string (duration)

The idle timeout is duration during which no data is transmitted or received on either the upstream or downstream connection.
If not configured, the default idle timeout is 1 hour. Setting it to 0 disables the timeout.

HttpListener

An HTTP listener resource.

Field

Description

handler

HttpHandler

Settings for handling HTTP requests.
Only one of handler and redirects can be specified.

redirects

Redirects

Redirects settings.
Only one of redirects and handler can be specified.

HttpHandler

An HTTP handler resource.

Field	Description
httpRouterId	string ID of the HTTP router processing requests. For details about the concept, see documentation. To get the list of all available HTTP routers, make a HttpRouterService.List request.
rewriteRequestId	boolean When unset, will preserve the incoming x-request-id header, otherwise would rewrite it with a new value.
http2Options	Http2Options HTTP/2 settings. If specified, incoming HTTP/2 requests are supported by the listener. Includes only one of the fields `http2Options`, `allowHttp10`. Protocol settings. For HTTPS (HTTP over TLS) connections, settings are applied to the protocol negotiated using TLS ALPN extension.
allowHttp10	boolean Enables support for incoming HTTP/1.0 and HTTP/1.1 requests and disables it for HTTP/2 requests. Includes only one of the fields `http2Options`, `allowHttp10`. Protocol settings. For HTTPS (HTTP over TLS) connections, settings are applied to the protocol negotiated using TLS ALPN extension.
preserveHttp1HeaderCasing	boolean When enabled, preserves the original casing of HTTP/1.1 header names (e.g. "CONTENT-Type" -> "CONTENT-Type"). Has no effect on HTTP/2 connections where headers are always lowercase per RFC 7540.

Http2Options

An HTTP/2 options resource.

Field

Description

maxConcurrentStreams

string (int64)

Maximum number of concurrent HTTP/2 streams in a connection.

Redirects

A listener redirects resource.

Field

Description

httpToHttps

boolean

Redirects all unencrypted HTTP requests to the same URI with scheme changed to https.
The setting has the same effect as a single, catch-all HttpRoute
with RedirectAction.replaceScheme set to https.

TlsListener

TLS-encrypted (HTTP or TCP stream) listener resource.

Field

Description

defaultHandler

TlsHandler

Required field. Settings for handling requests by default, with Server Name
Indication (SNI) not matching any of the sniHandlers.

sniHandlers[]

SniMatch

Settings for handling requests with Server Name Indication (SNI)
matching one of SniMatch.serverNames values.

TlsHandler

A TLS-encrypted (HTTP or TCP stream) handler resource.

Field	Description
streamHandler	StreamHandler Stream (TCP) handler. Includes only one of the fields `streamHandler`, `httpHandler`. Settings for handling requests.
httpHandler	HttpHandler HTTP handler. Includes only one of the fields `streamHandler`, `httpHandler`. Settings for handling requests.
certificateIds[]	string ID's of the TLS server certificates from Certificate Manager. RSA and ECDSA certificates are supported, and only the first certificate of each type is used. The string length in characters for each value must be greater than 1. The maximum number of elements is 1.
clientCertificatesVerification	ClientCertificatesVerification Client certificates verification settings.

ClientCertificatesVerification

Client certificates verification settings.

Field

Description

requireClientCertificate

boolean

If true, ALB will reject connections without a valid client certificate.

bytes

string

Trusted certificate authority certificates bundle (PEM text).

Includes only one of the fields bytes.

SniMatch

A SNI handler resource.

Field	Description
name	string Required field. Name of the SNI handler.
serverNames[]	string Server names that are matched by the SNI handler. The string length in characters for each value must be 1-255. Each value must match the regular expression `([*].)?[-.a-z0-9]+`. The number of elements must be greater than 0.
handler	TlsHandler Required field. Settings for handling requests with Server Name Indication (SNI) matching one of `serverNames` values.

Response

HTTP Code: 200 - OK

{
  "id": "string",
  "description": "string",
  "createdAt": "string",
  "createdBy": "string",
  "modifiedAt": "string",
  "done": "boolean",
  "metadata": "object",
  // Includes only one of the fields `error`, `response`
  "error": {
    "code": "integer",
    "message": "string",
    "details": [
      "object"
    ]
  },
  "response": "object"
  // end of the list of possible fields
}

An Operation resource. For more information, see Operation.

Field	Description
id	string ID of the operation.
description	string Description of the operation. 0-256 characters long.
createdAt	string (date-time) Creation timestamp. String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
createdBy	string ID of the user or service account who initiated the operation.
modifiedAt	string (date-time) The time when the Operation resource was last modified. String in RFC3339 text format. The range of possible values is from `0001-01-01T00:00:00Z` to `9999-12-31T23:59:59.999999999Z`, i.e. from 0 to 9 digits for fractions of a second. To work with values in this field, use the APIs described in the Protocol Buffers reference. In some languages, built-in datetime utilities do not support nanosecond precision (9 digits).
done	boolean If the value is `false`, it means the operation is still in progress. If `true`, the operation is completed, and either `error` or `response` is available.
metadata	object Service-specific metadata associated with the operation. It typically contains the ID of the target resource that the operation is performed on. Any method that returns a long-running operation should document the metadata type, if any.
error	Status The error result of the operation in case of failure or cancellation. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set.
response	object The normal response of the operation in case of success. If the original method returns no data on success, such as Delete, the response is google.protobuf.Empty. If the original method is the standard Create/Update, the response should be the target resource of the operation. Any method that returns a long-running operation should document the response type, if any. Includes only one of the fields `error`, `response`. The operation result. If `done == false` and there was no failure detected, neither `error` nor `response` is set. If `done == false` and there was a failure detected, `error` is set. If `done == true`, exactly one of `error` or `response` is set.

Status

The error result of the operation in case of failure or cancellation.

Field	Description
code	integer (int32) Error code. An enum value of google.rpc.Code.
message	string An error message.
details[]	object A list of messages that carry the error details.

Application Load Balancer API, REST: LoadBalancer.UpdateListener

HTTP requestHTTP request

Path parametersPath parameters

Body parametersBody parameters

ListenerSpecListenerSpec

EndpointSpecEndpointSpec

AddressSpecAddressSpec

ExternalIpv4AddressSpecExternalIpv4AddressSpec

InternalIpv4AddressSpecInternalIpv4AddressSpec

ExternalIpv6AddressSpecExternalIpv6AddressSpec

StreamListenerStreamListener

StreamHandlerStreamHandler

HttpListenerHttpListener

HttpHandlerHttpHandler

Http2OptionsHttp2Options

RedirectsRedirects

TlsListenerTlsListener

TlsHandlerTlsHandler

ClientCertificatesVerificationClientCertificatesVerification

SniMatchSniMatch

ResponseResponse

StatusStatus

Was the article helpful?

HTTP request

Path parameters

Body parameters

ListenerSpec

EndpointSpec

AddressSpec

ExternalIpv4AddressSpec

InternalIpv4AddressSpec

ExternalIpv6AddressSpec

StreamListener

StreamHandler

HttpListener

HttpHandler

Http2Options

Redirects

TlsListener

TlsHandler

ClientCertificatesVerification

SniMatch

Response

Status