Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI Studio
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Education and Science
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Tutorials
    • All tutorials
    • Differentiation of access permissions for user groups
      • Overview
      • Management console, CLI
      • Terraform
    • Creating an L7 load balancer with a Smart Web Security profile through an Application Load Balancer ingress controller
    • Centralized online publication and app protection against DDoS attacks
    • Emergency DdoS protection in Application Load Balancer, L7
    • Delivering logs from a VM instance to Cloud Logging
    • Writing load balancer logs to PostgreSQL
    • Secure storage of GitLab CI passwords as Yandex Lockbox secrets
    • Service account with an OS Login profile for VM management via Ansible
    • Transferring logs from Container Optimized Image to Cloud Logging
    • Adding an HTML page to work with SmartCaptcha
    • Creating an L7 load balancer with a security profile
    • Alert settings in Monitoring
    • Exporting audit logs to MaxPatrol SIEM
    • Exporting audit logs to SIEM Splunk systems
    • Uploading audit logs to ArcSight SIEM
    • Server-side encryption for an Object Storage bucket
    • Encrypting secrets in Hashicorp Terraform
    • Managing KMS keys with Hashicorp Terraform
    • Auto Unseal in Hashicorp Vault
    • Transferring Managed Service for Greenplum® cluster logs to Yandex Cloud Logging
  1. Security
  2. Creating an L7 load balancer with DDoS protection
  3. Overview

Creating a load balancer with DDoS protection

Written by
Yandex Cloud
Updated at May 29, 2025

Distributed denial of service, or DDoS, is a type of cyberattack that involves sending massive numbers of requests to a server or network to overwhelm it or make it inoperable.

In this tutorial, you will deploy a DDoS protection infrastructure for app backends in Yandex Cloud. To do this, you will create a cloud network, set up Yandex Virtual Private Cloud security groups, create a Yandex Compute Cloud instance group to serve as backends, and link it to the infrastructure of a Yandex Application Load Balancer L7 load balancer with a DDoS-protected public IP address.

You can create a DDoS protection infrastructure using the following tools:

  • Management console, CLI: Use the Yandex Cloud management console or CLI to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources using the infrastructure as code (IaC) approach. Download a Terraform configuration example and then deploy the infrastructure using the Yandex Cloud Terraform provider.

Was the article helpful?

Previous
Differentiation of access permissions for user groups
Next
Management console, CLI
© 2025 Direct Cursus Technology L.L.C.