Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Cloud Load Balancing

You can now use the Google Cloud Console to create the following load balancers in Premium Tier:

  • Regional external Application Load Balancer
  • Regional external proxy Network Load Balancer

Previously, only Standard Tier support was available in the Console.

Previously, the classic external Application Load Balancer had lenient HTTP/2 request parsing that did not reject requests containing certain invalid characters in the request path. The same requests would have been rejected if they had arrived over HTTP/1 or HTTP/3.

Now, all HTTP requests, including HTTP/2 requests, are rejected if the path contains a character that isn't one of the following:

  • An allowed ASCII character specified in RFC 3986, sections 3.3 and 3.4.

  • One of the following special allowed characters: [ ] { } | ^

All other characters must be properly URL encoded.

You can identify rejected requests in the proxy logs by looking for the following:

  • responseCode: 400
  • response_code_details: invalid_http2_client_header_format

 

0 0 150