Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Tutorials
    • All tutorials
    • Differentiation of access permissions for user groups
    • Inviting a new user and assigning roles
    • Creating an L7 load balancer with a Smart Web Security profile through an Application Load Balancer ingress controller
    • Centralized online publication and app protection against DDoS attacks
    • Basic SWS setup
    • Emergency DDoS protection in Application Load Balancer, L7
      • Overview
        • Overview
        • Management console
        • Terraform
    • Delivering logs from a VM instance to Cloud Logging
    • Writing load balancer logs to PostgreSQL
    • Secure storage of GitLab CI passwords as Yandex Lockbox secrets
    • Service account with an OS Login profile for VM management via Ansible
    • Transferring logs from Container Optimized Image to Cloud Logging
    • Adding an HTML page to work with SmartCaptcha
    • Configuring alerts and dashboards in Monitoring
    • Uploading audit logs to MaxPatrol SIEM
    • Uploading audit logs to Splunk SIEM
    • Uploading audit logs to ArcSight SIEM
    • Server-side encryption for an Object Storage bucket
    • Encrypting secrets in Hashicorp Terraform
    • Managing KMS keys with Hashicorp Terraform
    • Auto Unseal in Hashicorp Vault
    • Transferring Yandex MPP Analytics for PostgreSQL cluster logs to Yandex Cloud Logging
  1. Security
  2. Migrating services from an NLB to an L7 ALB to enable Smart Web Security protection
  3. NLB with an instance group as a target
  4. Overview

Migrating services from a NLB load balancer with an instance group as a target to an L7 ALB load balancer

Written by
Yandex Cloud
Updated at November 10, 2025

You can migrate the load from a Yandex Network Load Balancer load balancer to a Yandex Application Load Balancer L7 load balancer. The network load balancer is integrated with a VM group. This instance group tracks the number of VMs in the group and changes the composition of the load balancer's target group as needed. An instance group can be integrated with only one of the balancers: either a network load balancer or an L7 load balancer. Therefore, to migrate you need to change the target group integration for the instance group by replacing the network load balancer's target group with the L7 load balancer's target group.

During the migration process, the L7 load balancer will have a Yandex Smart Web Security security profile connected to it. An L7 load balancer with a connected security profile operates as follows:

You can create a service migration infrastructure using the following tools:

  • Management console: Use the Yandex Cloud management console to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Terraform Yandex Cloud provider.

Was the article helpful?

Previous
Terraform
Next
Management console
© 2025 Direct Cursus Technology L.L.C.