How to configure the policy and rule¶

This section describes how to configure the policy.

When configuring L4 load balancing
- Configure health monitors, listeners, and target groups in advance.
- With this function, you can associate health monitors and target groups with listeners, and specify algorithms and persistence methods.
When setting up L7 load balancing
- Configure health monitors, listeners, target groups, and upload SSL certificates (for HTTPS only) in advance.
- With this function, you can associate health monitors and target groups with listeners, and specify algorithms, persistence methods, and rule (forwarding destination URLs, etc.). For HTTPS, specify the SSL certificate to be used along with the TLS policy.
- Optionally, you can set to transfer to the Sorry page when all the load balancing destination servers belonging to the target group are down. Specify the Sorry page URL in the policy settings.

Note

In the policy settings, there are items that can be set or not depending on the protocol selected in the listener and health monitor. Please refer to the descriptions and notes in the setting item table when making settings.

Contents

Add policy and rule
Display the details of policy and rule
Editing policy and rule
Cancel the changes of settings for policy and rule
Delete policy and rule

Add policy and rule ¶

Add policy¶

1． From the control panel, select Cloud / Server Local Network → Managed Load Balancer.

2． The Managed Load Balancers list page is displayed, select the Managed Load Balancer to which you want to add a policy.

３． Open the "Policy" tab and click "Add Policy".

4． Enter the required fields to add the policy and click "Add Policy". The items that can be set are as follows.

tab	Specifiable parameters	Contents	Input format
detail	name	You can specify name of the policy.	255 half-width characters
	explanation	You can specify a description for the policy.	255 half-width characters
	tag	You can specify tags for the policy.	JSON format
	algorithm	You can select the load balancing algorithm to use from the pull-down menu. [round-robin, weighted-round-robin, least-connection, weighted-least-connection, source-ip-port-hash]
	persistence	You can select the session maintenance method to use from the pull-down menu. [none, source-ip, cookie]
	Sorry Page URL	You can specify the forwarding URL when all load balancing destination servers are down. This item can be set only when HTTP/HTTPS is selected for the protocol.	For HTTP, from "http://" For HTTPS, start the description with "https://"
details 2	SSL certificate	You can specify the SSL certificate to use. Must be specified when the health monitor and listener protocol is HTTPS.
	health monitor	You can specify the health monitor to use.
	listener	You can specify the listener to use.
	default target group	You can specify the default target group to use.
	TLS policy	TLSv1.2_202210_01 (Default) TLSv1.2_202210_02 You can choose from the above two. For a list of protocols and cipher suites applied in each pattern, see here .

Note

SSL certificate and TLS policy can be selected only when HTTPS is selected as the listener protocol.
If you select HTTPS as the listener protocol and do not select a TLS policy, the Default TLS policy pattern is automatically applied.

distributed algorithm: The distribution algorithms that can be selected and their contents are as follows.

algorithm	Contents
round-robin	Distributes requests to servers in order.
weighted-round-robin	Distributes requests based on weights assigned to servers.
least-connection	Distributes requests to servers with fewer connections.
weighted-least-connection	Distributes requests based on a combination of weight and number of connections assigned to a server.
source-ip-port-hash	Distributes requests to the server based on the hash value of the source IP header and port number from the client.

persistence: The selectable persistence settings (session maintenance method) and their contents are as follows.

Session maintenance method	Contents
none	Persistence (session maintenance method) is not set.
source-ip	Requests from the same source IP address are distributed to the same server.
cookies	Fixes the server to be allocated by cookie information.

5． Click "Add Policy" at the bottom right of the screen to determine the settings.

6． Confirm that the policy config status is "CREATE_STAGED".

7． Executed "Apply Managed Load Balancer Settings" to complete the addition of policy.

Note

You can apply the changes of settings for Managed Load Balancer together with other setting items.

Add rule¶

You can add rule only if you have selected HTTP/HTTPS as the protocol for the listener selected in the policy.

1． In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer to which you want to add policy rule.

2． Open the "Policy" tab and click the resource name of the policy to add rule to display the "Policy details" screen.

３． Open the "Rule" tab and click "Add Rule".

4． Enter the required items. The items that can be set are as follows.

tab	Specifiable parameters	Contents	Input format
detail	name	You can specify a name for the rule.	255 half-width characters
	explanation	You can specify a description for the rule.	255 half-width characters
	tag	You can specify tags for the rule.	JSON format
	priority	You can specify the priority of the rule.	Integer 1~1000
	target group	You can specify the target group to use. You must specify a target group that is different from the default target group.
path	path	You can specify the path to forward traffic to.	Directory specification method (Description starts with "/")

Note

The target group specified in the rule must be different from the default target group. Before adding a rule, create a target group that is different from the default target group.

5．Click "Add Rule" at the bottom right of the screen to determine the settings.

6． Confirm that the configuration status of the rule is "CREATE_STAGED".

7． Execute "Apply Managed Load Balancer Settings" to complete addition of policy rule.

Note

You can apply the changes of settings for Managed Load Balancer together with other setting items.

Display the details of policy and rule ¶

View policy details¶

1． In the Managed Load Balancer list page, click the resource name of the Managed Load Balancer for which you want to check the policy details.

2． Open the "Policy" tab and click the resource name of the policy for which you want to see details.

3． The policy details screen will be displayed. The information that can be confirmed is as follows.

tab	Specifiable parameters	Contents
Overview	name	You can see the name of the policy.
	ID	You can see the ID of the policy.
	explanation	You can see the policy description.
	tag	You can see the tag of the policy.
	Config status	You can see the configuration status of the policy. The possible values are as follows. ・"ACTIVE"：Managed Load Balancer does not have a config waiting to be applied. ・"CREATE_STAGED"：The config added to the Managed Load Balancer is waiting to be applied. ・"UPDATE_STAGED"：The config to be changed to the Managed Load Balancer is waiting to be applied. ・"DELETE_STAGED"：The config to be deleted by the Managed Load Balancer is waiting to be applied.
	Operation status	You can see the operational status of the policy. The possible values are as follows. ・”NONE”：Initial state ・"PROCESSING" : The state of applying the config to Managed Load Balancer. ・”COMPLETE”：The state where the latest operation is completed ・”STUCK”：The latest operation processing is stopped and operator intervention is required, so it is impossible to operate the resource. ・”ERROR”：The latest operation processing failed, but since it has been rolled back normally, it is possible to operate the resource.
	Monitoring status	You can see the number of normal members and the number of abnormal members in the target group associated with the policy.
	algorithm	You can see the load balancing algorithm to be used.
	persistence	You can see the session maintenance method to be used.
	Sorry Page URL	You can see the transfer destination URL when all load balancing destination servers are down.
	SSL certificate ID	You can see the selected SSL certificate.
	Health monitor ID	You can see the selected health monitor ID.
	Listener ID	You can see the selected listener ID.
	Default target group ID	You can see the selected default target group ID.
	TLS policy	You can see the selected TLS policy.
rule	name	You can see the name of the rule.
	Config status	You can see the configuration status of the rule. The possible values are as follows. ・"ACTIVE"：Managed Load Balancer does not have a config waiting to be applied. ・"CREATE_STAGED"：The config added to the Managed Load Balancer is waiting to be applied. ・"UPDATE_STAGED"：The config to be changed to the Managed Load Balancer is waiting to be applied. ・"DELETE_STAGED"：The config to be deleted by the Managed Load Balancer is waiting to be applied.
	Operation status	You can see the operation status of the rule. The possible values are as follows. ・”NONE”：Initial state ・"PROCESSING" : The state of applying the config to Managed Load Balancer. ・”COMPLETE”：The state where the latest operation is completed ・”STUCK”：The latest operation processing is stopped and operator intervention is required, so it is impossible to operate the resource. ・”ERROR”：The latest operation processing failed, but since it has been rolled back normally, it is possible to operate the resource.
	priority	You can see the priority of the rule.

Note

The ”Details” of the monitoring status provides a link to the monitoring service GUI. If you have never accessed the GUI of the monitoring service, you will be redirected to the SDPF portal, so you need to access the monitoring service from the SDPF portal in advance.

Detailed display of rule¶

1． From the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose rule details you want to check.

2． Open the "Policy" tab and click the resource name of the policy whose details you want to check.

３． Open the "Rule" tab on the policy details screen and click the resource name of the rule whose details you want to check.

4． The detail screen of the rule will be displayed. The information that can be confirmed is as follows.

tab	Specifiable parameters	Contents
Overview	name	You can see the name of the rule.
	ID	You can see the ID of the policy.
	explanation	You can see the policy description.
	tag	You can see the tag of the policy.
	policy ID	You can see the ID of the policy to which the rule belongs.
	Config status	You can see the configuration status of the rule. The possible values are as follows. ・"ACTIVE"：Managed Load Balancer does not have a config waiting to be applied. ・"CREATE_STAGED"：The config added to the Managed Load Balancer is waiting to be applied. ・"UPDATE_STAGED"：The config to be changed to the Managed Load Balancer is waiting to be applied. ・"DELETE_STAGED"：The config to be deleted by the Managed Load Balancer is waiting to be applied.
	Operation status	You can see the operation status of the rule. The possible values are as follows. ・”NONE”：Initial state ・"PROCESSING" : The state of applying the config to Managed Load Balancer. ・”COMPLETE”：The state where the latest operation is completed ・”STUCK”：The latest operation processing is stopped and operator intervention is required, so it is impossible to operate the resource. ・”ERROR”：The latest operation processing failed, but since it has been rolled back normally, it is possible to operate the resource.
	priority	You can see the priority of the rule.
	target group	You can view the target groups you are using.
path	path	You can browse the paths to which traffic is forwarded.
	status	You can see the status of the pass. The possible values are as follows. ·"No change" ・"Waiting for addition" ・"Waiting for deletion"

Editing policy and rule ¶

Edit policy¶

1． In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose policy you want to edit.

2． Open the "Policy" tab and click "Edit Policy" from the action pulldown of the policy you want to edit.

3． Enter the settings to be edited. The items that can be set are as follows.

tab	Specifiable parameters	Contents	Input format
detail	name	You can specify name of the policy.	255 half-width characters
	explanation	You can specify a description for the policy.	255 half-width characters
	tag	You can specify tags for the policy.	JSON format
	algorithm	You can select the load balancing algorithm to use from the pull-down menu. [round-robin, weighted-round-robin, least-connection, weighted-least-connection, source-ip-port-hash]
	persistence	You can select the session maintenance method to use from the pull-down menu. [none, source-ip, cookie]
	Sorry Page URL	You can specify the forwarding URL when all load balancing destination servers are down. This item can be set only when HTTP/HTTPS is selected for the protocol.	For HTTP, from "http://" For HTTPS, start the description with "https://"
details 2	SSL certificate	You can specify the SSL certificate to use. Must be specified when the health monitor and listener protocol is HTTPS.
	health monitor	You can specify the health monitor to use.
	listener	You can specify the listener to use.
	default target group	You can specify the default target group to use.
	TLS policy	TLSv1.2_202210_01 (Default) TLSv1.2_202210_02 You can choose from the above two. For a list of protocols and cipher suites applied in each pattern, see here .

Note

SSL certificate and TLS policy can be selected only when HTTPS is selected as the listener protocol.
If you select HTTPS as the listener protocol and do not select a TLS policy, the Default TLS policy pattern is automatically applied.

4． Click "Edit Policy" at the bottom right of the screen to determine the settings.

5． If the configuration status of the policy is "UPDATE_STAGED" or "CREATE_STAGED", execute "Apply Managed Load Balancer Settings" to complete editing the policy.

Note

If you edit the name, description, or tag, the config status will not change to ”UPDATE_STAGED”.
You can apply the changes of settings for Managed Load Balancer together with other setting items.

Edit rule¶

1． In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose rule you want to edit.

2． Open the "Policy" tab and click the resource name of the policy whose rule you want to edit.

3． Open the "Rule" tab on the policy details screen, and click "Edit rule" from the action pulldown for the rule you want to edit.

4． Enter the settings to be edited. The items that can be set are as follows.

tab	Specifiable parameters	Contents	Input format
detail	name	You can specify a name for the rule.	255 half-width characters
	explanation	You can specify a description for the rule.	255 half-width characters
	tag	You can specify tags for the rule.	JSON format
	priority	You can specify the priority of the rule.	Integer 1~1000
	target group	You can specify the target group to use. You must specify a target group that is different from the default target group.
path	path	You can specify the path to forward traffic to.	Directory specification method (Description starts with "/")

Note

The target group specified in the rule must be different from the default target group. If you want to change the target group by editing rule, create a target group that is different from the default target group.

5． Click “Edit Rule” at the bottom right of the screen to determine the settings.

6． If the configuration status of the policy is "UPDATE_STAGED" or "CREATE_STAGED", execute "Apply Managed Load Balancer Settings" to complete rule editing.

Note

If you edit the name, description, or tag, the config status will not change to ”UPDATE_STAGED”.
You can apply the changes of settings for Managed Load Balancer together with other setting items.

Cancel the changes of settings for policy and rule ¶

Cancel the changes of settings for policy¶

1． You can cancel the changes made in "Edit Policy" before they are applied.

2．In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose policy settings you want to cancel.

３． Open the "Policy" tab and click "Cancel the Policy Settings" from the action pull-down of the policy whose settings you want to cancel.

4．The confirmation screen for canceling the policy setting change will be displayed. Click "Execute".

Note

If the policy is CREATE_STAGED, the associated rule with status CREATE_STAGED will be deleted.

Cancel rule setting changes¶

1．In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose rule settings you want to cancel.

2． Open the "Policy" tab and click the resource name of the policy whose rule settings you want to cancel.

3． Open the "Rule" tab on the policy details screen and click the resource name of the rule whose settings you want to cancel.

4． Click "Cancel rule setting change" from the action pull-down menu.

5． The confirmation screen for deleting the rule will be displayed. Click "Cancel rule setting change".

Delete policy and rule ¶

Delete policy¶

1．In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose policy settings are to be deleted

2． Open the "Policy" tab and click "Delete policy" from the action pulldown of the policy to be deleted.

３． The confirmation screen for deleting the policy will be displayed. Click "Delete policy".

Note

After the policy config status becomes "DELETE_STAGED" by this operation, the policy settings will not be deleted from the Managed Load Balancer instance until "Apply Managed Load Balancer Settings" are executed. If you want to delete the policy settings from the Managed Load Balancer instance, execute "Apply Managed Load Balancer Settings" following this operation.
Also, if you want to cancel the setting of "DELETE_STAGED", please execute "Cancel policy setting change".
Of the linked rule, those with a status of CREATE_STAGED will be deleted, and those with a status of ACTIVE or UPDATE_STAGED will transition to DELETE_STAGED.

4． Confirm that the policy status is "DELETE_STAGED".

5． Execute "Apply Managed Load Balancer Settings" to complete the deletion of the policy.

Note

You can apply the changes of settings for Managed Load Balancer together with other setting items.

Delete rule¶

1．In the Managed Load Balancer list screen, click the resource name of the Managed Load Balancer whose rule you want to delete.

2． Open the "Policy" tab and click the resource name of the policy whose rule you want to delete.

３． Open the "Rule" tab on the policy details screen and click the resource name of the rule to be deleted.

4． Click "Delete rule" from the action pulldown.

5． The confirmation screen for deleting the rule will be displayed. Click "Delete rule".

6． Confirm that the status of the rule is "DELETE_STAGED".

7． Execute "Apply Managed Load Balancer Settings" to complete deletion of the rule.

How to configure the SSL certificate

How to configure Source NAT and X-Forwarded-For

How to configure the policy and rule¶

Add policy and rule¶

Add policy¶

Add rule¶

Display the details of policy and rule¶

View policy details¶

Detailed display of rule¶

Editing policy and rule¶

Edit policy¶

Edit rule¶

Cancel the changes of settings for policy and rule¶

Cancel the changes of settings for policy¶

Cancel rule setting changes¶

Delete policy and rule¶

Delete policy¶

Delete rule¶

Add policy and rule ¶

Display the details of policy and rule ¶

Editing policy and rule ¶

Cancel the changes of settings for policy and rule ¶

Delete policy and rule ¶