Migrating services from an NLB with a Yandex Managed Service for Kubernetes cluster as a target to an L7 ALB

Written by

Updated at November 10, 2025

You can migrate the load from a Yandex Network Load Balancer load balancer to a Yandex Application Load Balancer L7 load balancer. The network load balancer is used as part of the NGINX Ingress Controller within a Yandex Managed Service for Kubernetes cluster. The cluster itself creates network load balancer objects as per the provided manifests and monitors the load balancer's target group consisting of the VMs from that cluster's node groups.

During the migration, an L7 load balancer with an active Yandex Smart Web Security security profile will be created using the Application Load Balancer ingress controller. An L7 load balancer with a connected security profile operates as follows:

You can create a service migration infrastructure using the following tools:

Management console: Use the Yandex Cloud management console to create your infrastructure step by step.
Terraform: Streamline creating and managing your resources using the Infrastructure as Code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Terraform Yandex Cloud provider.