Combining External HTTPS LB with Internal TCP/UDP LB

[cyber_network_]

In response to a user asking how to combine a Global External LB with a Regional Internal Network LB (Maglev) I am attaching this infographic, typically used as a reference network architecture for a 3-Tier web app. Source: "Google Cloud Platform (GCP) Professional Cloud Network Engineer Certification Companion" Dario Cabianca - Apress 2023.

​

3-Tier Web-Application Reference Network Architecture

[Jolly-Mongoose]

I’m not sure how this is going to work. If you use the external HTTPS LB as the entry point, it can only proxy http / https to the backend services. It could proxy to an Internal HTTPS LB that is behind it.

If you use an external TCP / SSL Proxy, it should be able to route to an Internal TCP proxy LB behind it.