Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Tutorials
    • All tutorials
    • Differentiation of access permissions for user groups
    • Inviting a new user and assigning roles
    • Creating an L7 load balancer with a Smart Web Security profile through an Application Load Balancer ingress controller
    • Centralized online publication and app protection against DDoS attacks
    • Basic SWS setup
    • Emergency DDoS protection in Application Load Balancer, L7
      • Overview
        • Overview
        • Management console
        • Terraform
    • Delivering logs from a VM instance to Cloud Logging
    • Writing load balancer logs to PostgreSQL
    • Secure storage of GitLab CI passwords as Yandex Lockbox secrets
    • Service account with an OS Login profile for VM management via Ansible
    • Transferring logs from Container Optimized Image to Cloud Logging
    • Adding an HTML page to work with SmartCaptcha
    • Configuring alerts and dashboards in Monitoring
    • Uploading audit logs to MaxPatrol SIEM
    • Uploading audit logs to Splunk SIEM
    • Uploading audit logs to ArcSight SIEM
    • Server-side encryption for an Object Storage bucket
    • Encrypting secrets in Hashicorp Terraform
    • Managing KMS keys with Hashicorp Terraform
    • Auto Unseal in Hashicorp Vault
    • Transferring Yandex MPP Analytics for PostgreSQL cluster logs to Yandex Cloud Logging
  1. Security
  2. Migrating services from an NLB to an L7 ALB to enable Smart Web Security protection
  3. NLB with a Managed Service for Kubernetes cluster as a target
  4. Overview

Migrating services from a NLB load balancer with a Yandex Managed Service for Kubernetes cluster as a target to an L7 ALB load balancer

Written by
Yandex Cloud
Updated at November 10, 2025

You can migrate the load from a Yandex Network Load Balancer load balancer to a Yandex Application Load Balancer L7 load balancer. The network load balancer is used as part of the NGINX Ingress Controller within a Yandex Managed Service for Kubernetes cluster. The cluster itself creates network load balancer objects as per the provided manifests and monitors the load balancer's target group consisting of the VMs from that cluster's node groups.

During the migration, an L7 load balancer with an active Yandex Smart Web Security security profile will be created using the Application Load Balancer ingress controller. An L7 load balancer with a connected security profile operates as follows:

You can create a service migration infrastructure using the following tools:

  • Management console: Use the Yandex Cloud management console to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources with the infrastructure as code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Terraform Yandex Cloud provider.

Was the article helpful?

Previous
Terraform
Next
Management console
© 2025 Direct Cursus Technology L.L.C.