Migrating services from a NLB to an L7 ALB to protect against DDoS attacks using Yandex Smart Web Security

DDoS (Distributed Denial of Service) is a cyberattack that involves sending massive numbers of requests to a server or network to overwhelm it or render it inoperable.

You can deploy services in Yandex Cloud using a Yandex Network Load Balancer which distributes traffic across cloud resources. To protect such services from DDoS attacks and bots at the application level (L7) using Yandex Smart Web Security, you will need to migrate the service from the Network Load Balancer to an L7 Yandex Application Load Balancer.

Service migration depends on what target resources are used by the Network Load Balancer:

• Network Load Balancer with target resources from VMs
• Network Load Balancer with target resources from an instance group
• Network Load Balancer with target resources from a Managed Service for Kubernetes cluster
• Network Load Balancer as a target resource for Application Load Balancer