App Engine - Front to Back

[danielopezNext]

Hello, I have several questions about deploying an application with a front-end node and a back-end Python flask in the app engine.

- The two services are in the same project.

- The front is public access.

- The rear is accessed internally.

Doubts:

1_ How to enable the connection between the two application engine services (Front and Back). Is it possible by service account token? Is another service, such as Cloud Balancer, necessary? What happens if I have two Back services?

2_ Are the services located in different VMs?

3_ Does it have to be a flexible or standard environment, due to websocket issues?

Thanks

[juliadeanne]

Hello @danielopezNext ,

Welcome to the Google Cloud Community!

1.With App Engine, you can easily set up internal HTTP(S) connections between your project's services. This lets your front-end service directly communicate with your back-end without needing to go online. For simpler setup than using service account tokens, visit our guide on setting up private, internal-only services at Configuring Private Internal-Only Services. If your project has multiple back-end services, consider using Cloud Load Balancing to manage traffic. It allows your front-end to send requests to a single load balancer that forwards them to the appropriate back-end service.

2. In the Standard environment, services share a managed infrastructure and may run on the same or different servers, depending on needs. The Flexible environment uses Docker containers on Google Compute Engine VMs, offering more control and likely separating services onto different VMs, especially when scaling. Learn more about scaling in App Engine at Scaling Characteristics.

3. If your app needs Websockets, the Flexible environment is your go-to since the Standard environment doesn't support them. The Flexible environment fully supports Websockets. For a quick comparison of both environments, check out the App Engine Environments.

[danielopezNext]

Thanks for the response @juliadeanne,

I am using the standard app engine and the backend services are secured with IAP.

I have https endpoints and make the request from another version of the app engine in the same project. How can I access only the front end service account of the services application engine?

What is the best way of autenticated to through the IAP service?

For this, is better use standard or flexible app engine?

Thanks