Backend Servers for Network Load Balancers
Describes how to specify the backend servers that receive incoming traffic based on the policies you specified for the backend set that contains it for the network load balancer.
When you create a network load balancer, you must specify the backend servers (compute instances ) to include in each backend set . The load balancer routes incoming traffic to these backend servers based on the policies you specified for the backend set. You can use the Console to add and remove backend servers in a backend set.
You can perform the following backend server management tasks:
To route traffic to a backend server, the Load Balancer service requires the IP address of the compute instance and the relevant application port. If the backend server resides within the same VCN as the load balancer, Oracle recommends that you specify the compute instance's private IP address. You also must ensure that the VCN's security rules allow Internet traffic.
You cannot add backend servers using public IPs.
You cannot place backend servers behind an internet gateway or dynamic routing gateways (DRGs).
When you add backend servers to a backend set, you specify either the instance OCID or an IP address for the server to add. An instance with multiple VNICs attached can have multiple IP addresses pointing to it.
If you identify a backend server by OCID, Load Balancing uses the primary VNIC's primary private IP address.
If you identify the backend servers to add to a backend set by their IP addresses, you can point to the same instance more than one time.
To enable backend traffic, your backend server subnets must have appropriate ingress and egress security rules. When you add backend servers to a backend set, you can specify the applicable network security groups (NSGs). If you prefer to use security lists for your VCN, the Load Balancer service Console can suggest security list rules for you. You also can configure them yourself through the Networking service. See Security Lists for more information.
To accommodate high-volume traffic, Oracle strongly recommends that you use stateless security rules for your load balancer subnets. See Stateful Versus Stateless Rules for more information.
You can add and remove backend servers without disrupting traffic.