How to Secure a Compute Engine VM

[devopsbms]

Hi,

I have a Compute Engine VM that has my backend running and other 3-4 frontend apps . All running on different ports. I need to secure and apply SSL on the VM and want to expose all ports and link them via subdomains. How can i achieve that ??

Tried using API Gateway and load balancers but could not get an efficient solution.

Thanks in Advance..

[JuatonCJ]

Hi @devopsbms, 

Welcome to Google Cloud Community!

To set up and implement SSL on a VM with an External Application Load Balancer, an SSL certificate is required for the HTTP(S) target proxy. You can create an SSL certificate resource using either a  Google-managed SSL certificate or a self-managed SSL certificate.

These certificates supports the following load balancers:

• Global external Application Load Balancer
• Classic Application Load Balancer
• Regional external Application Load Balancer

The configuration methods and certificate types depend on the external Application Load Balancer you use either global, regional, or classic. For detailed information, please see Certificates and Google Cloud load balancers and load balancing for API Gateway.

For further reference on available Google Cloud SSL certificates and troubleshooting please review the following documentation:

• SSL certificates quotas and limits
• Troubleshooting SSL certificates.

I hope the above information is helpful.