# \#server-configuration **URL:** https://discuss.google.dev/tag/server-configuration/383.md [Latest](https://discuss.google.dev/latest.md) · [Categories](https://discuss.google.dev/categories.md) · [Tags](https://discuss.google.dev/tags.md) --- ## [AppEngine is now able to block TLS 1.0 and 1.1](https://discuss.google.dev/t/appengine-is-now-able-to-block-tls-1-0-and-1-1/184207)
**Author:** [@OddPrints](https://discuss.google.dev/u/OddPrints)\ **Replies:** 6\ **Last updated:** [August 3, 2026, 8:46pm UTC](https://discuss.google.dev/t/appengine-is-now-able-to-block-tls-1-0-and-1-1/184207 "2026-08-03T20:46:08Z")
For some reason, I’m not able to reply to this post: https://www.googlecloudcommunity.com/gc/General-Misc-Q-A/How-to-Disable-TLS-1-0-and-1-1-in-AppEngine-site-How-to-active/m-p/619354 (/cc @Fabiotbp @mslarkin @chrisgo… --- ## [Can I disable Cipher TLS\_CHACHA20\_POLY1305\_SHA256 in Custom SSL Policy?](https://discuss.google.dev/t/can-i-disable-cipher-tls-chacha20-poly1305-sha256-in-custom-ssl-policy/175546)
**Author:** [@RaphaCBrainWalk](https://discuss.google.dev/u/RaphaCBrainWalk)\ **Replies:** 3\ **Last updated:** [June 2, 2026, 3:01am UTC](https://discuss.google.dev/t/can-i-disable-cipher-tls-chacha20-poly1305-sha256-in-custom-ssl-policy/175546 "2026-06-02T03:01:40Z")
Hi Folks! After disabling the TLS\_CHACHA20\_POLY1305\_SHA256 cipher in a Custom SSL policy, it still remains active through a test with Qualys SSL LABS and also through PenTest. Would it be possible to disable it permane… --- ## [Enable TLS 1.3 only on GCP Global Ext App LB. Reject clients connection using TLS 1.2 or lower](https://discuss.google.dev/t/enable-tls-1-3-only-on-gcp-global-ext-app-lb-reject-clients-connection-using-tls-1-2-or-lower/155117)
**Author:** [@azzi](https://discuss.google.dev/u/azzi)\ **Replies:** 4\ **Last updated:** [June 2, 2026, 2:56am UTC](https://discuss.google.dev/t/enable-tls-1-3-only-on-gcp-global-ext-app-lb-reject-clients-connection-using-tls-1-2-or-lower/155117 "2026-06-02T02:56:15Z")
Hi guys, In GCP Load Balancer there were SSL Policy settings. In there, we can set the minimum TLS up until 1.2 only but not 1.3 I have tried to create custom profile by selecting only below ciphers that exclusively… --- ## [Setting minimum TLS v1.3](https://discuss.google.dev/t/setting-minimum-tls-v1-3/153229)
**Author:** [@alan-liu](https://discuss.google.dev/u/alan-liu)\ **Replies:** 3\ **Last updated:** [June 1, 2026, 5:31pm UTC](https://discuss.google.dev/t/setting-minimum-tls-v1-3/153229 "2026-06-01T17:31:03Z")
As part of the documentation, it refers to TLS 1.3, but I only see min TLS settings up to 1.2. For compliance purposes, we’re looking to set min TLS 1.3. Am I missing a setting somewhere? --- ## [Unable to delete default VPC](https://discuss.google.dev/t/unable-to-delete-default-vpc/192890)
**Author:** [@Yeswanth\_Kumar](https://discuss.google.dev/u/Yeswanth_Kumar)\ **Replies:** 4\ **Last updated:** [May 7, 2026, 2:30pm UTC](https://discuss.google.dev/t/unable-to-delete-default-vpc/192890 "2026-05-07T14:30:16Z")
Hi there, Right now, I’m facing an issue with the delete default VPC network. I’ve removed every services connected to this VPC and an error is displayed when I try to reach my action: Operation type \[delete\] failed w… --- ## [How can I connect my PMS to add its data to locker studio?](https://discuss.google.dev/t/how-can-i-connect-my-pms-to-add-its-data-to-locker-studio/322012)
**Author:** [@Verónica\_Pineda](https://discuss.google.dev/u/Ver%C3%B3nica_Pineda)\ **Replies:** 1\ **Last updated:** [February 6, 2026, 8:01pm UTC](https://discuss.google.dev/t/how-can-i-connect-my-pms-to-add-its-data-to-locker-studio/322012 "2026-02-06T20:01:59Z")
How can I connect my PMS to add its data to locker studio? --- ## [GCP Certificate-Manager global Certificate-Map global certificate : "invalid scope"](https://discuss.google.dev/t/gcp-certificate-manager-global-certificate-map-global-certificate-invalid-scope/184466)
**Author:** [@nalb](https://discuss.google.dev/u/nalb)\ **Replies:** 3\ **Last updated:** [December 17, 2025, 12:32pm UTC](https://discuss.google.dev/t/gcp-certificate-manager-global-certificate-map-global-certificate-invalid-scope/184466 "2025-12-17T12:32:39Z")
I have a GCP project with : a global (“scope: ALL\_REGIONS”) active existing Google-managed certificate (listed as “Certificate” not “classicCertificate”) an existing global certificate map when adding the cert into th… --- ## [Unconditional drop overload error on load balancers deployed through Kubernetes Gateway API](https://discuss.google.dev/t/unconditional-drop-overload-error-on-load-balancers-deployed-through-kubernetes-gateway-api/191563)
**Author:** [@garango](https://discuss.google.dev/u/garango)\ **Replies:** 4\ **Last updated:** [December 17, 2025, 12:21pm UTC](https://discuss.google.dev/t/unconditional-drop-overload-error-on-load-balancers-deployed-through-kubernetes-gateway-api/191563 "2025-12-17T12:21:32Z")
Hi, close to the GCP outage, at 2025-06-12 13:13:40 EDT I started having issues on multiple load balancer rules. When accessing the URL that resolves to a load balancer created with Gateway API resources that points to s… --- ## [Looker reports feature](https://discuss.google.dev/t/looker-reports-feature/296626)
**Author:** [@Renato\_Cruzalegui](https://discuss.google.dev/u/Renato_Cruzalegui)\ **Replies:** 1\ **Last updated:** [December 17, 2025, 12:17pm UTC](https://discuss.google.dev/t/looker-reports-feature/296626 "2025-12-17T12:17:49Z")
I was in the process of enabling looker reports on Looker (Google Cloud core) by following these instructions Enabling and disabling Looker reports | Google Cloud Documentation but it seems that system /feature is not … --- ## [Identity Aware Proxy (IAP) Invalid IAP Credentials: Invalid bearer token. Invalid JWT Audience](https://discuss.google.dev/t/identity-aware-proxy-iap-invalid-iap-credentials-invalid-bearer-token-invalid-jwt-audience/155136)
**Author:** [@oc96](https://discuss.google.dev/u/oc96)\ **Replies:** 1\ **Last updated:** [December 3, 2025, 5:18am UTC](https://discuss.google.dev/t/identity-aware-proxy-iap-invalid-iap-credentials-invalid-bearer-token-invalid-jwt-audience/155136 "2025-12-03T05:18:04Z")
Hi there, I have an internal, regional load balancer, that I tried securing with Identity Aware Proxy (IAP). The backend services are Cloud Run services. For some reason, it didn’t end up working, most likely because I’… --- ## [How is "250,000 packets per second" implemented in the HA VPN?](https://discuss.google.dev/t/how-is-250-000-packets-per-second-implemented-in-the-ha-vpn/193169)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 3\ **Last updated:** [October 10, 2025, 3:45am UTC](https://discuss.google.dev/t/how-is-250-000-packets-per-second-implemented-in-the-ha-vpn/193169 "2025-10-10T03:45:03Z")
1 HA VPN gateway + 1 HA VPN gateway ? 1 HA VPN gateway + 1 Customer managed VPN gateway ? 1 HA VPN have 2 tunnels ? 1 tunnel can implement ? I think HA VPN topologies to increase bandwidth\](HA VPN topologies t… --- ## [Whether does request flow from NVAs to Cloud Load Balancing?](https://discuss.google.dev/t/whether-does-request-flow-from-nvas-to-cloud-load-balancing/193016)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 6\ **Last updated:** [July 16, 2025, 1:22pm UTC](https://discuss.google.dev/t/whether-does-request-flow-from-nvas-to-cloud-load-balancing/193016 "2025-07-16T13:22:29Z")
This picture is in the https://cloud.google.com/architecture/blueprints/security-foundations/networking I think first NAVs should do deep package inspection and other purposes, if no problem, after that, Cloud Load B… --- ## [Why is Multi-network not be supported in the Platform environment of Cloud service mesh?](https://discuss.google.dev/t/why-is-multi-network-not-be-supported-in-the-platform-environment-of-cloud-service-mesh/193855)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 2\ **Last updated:** [July 16, 2025, 11:11am UTC](https://discuss.google.dev/t/why-is-multi-network-not-be-supported-in-the-platform-environment-of-cloud-service-mesh/193855 "2025-07-16T11:11:18Z")
Whether does Multi-network also mean cross-cloud (Azure, AWS, Google Cloud) network and hybrid network? ​ --- ## [what docs replace Legacy documentation in the Cloud service mesh?](https://discuss.google.dev/t/what-docs-replace-legacy-documentation-in-the-cloud-service-mesh/193850)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 2\ **Last updated:** [July 16, 2025, 11:10am UTC](https://discuss.google.dev/t/what-docs-replace-legacy-documentation-in-the-cloud-service-mesh/193850 "2025-07-16T11:10:40Z")
https://cloud.google.com/service-mesh/docs/service-routing/service-directory-integration I have also sent feedback in the website, but nobody reply me. I have also reviewed many and many docs in the docs, many docs h… --- ## [how to differentiate services and workloads?](https://discuss.google.dev/t/how-to-differentiate-services-and-workloads/193854)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 2\ **Last updated:** [July 16, 2025, 11:03am UTC](https://discuss.google.dev/t/how-to-differentiate-services-and-workloads/193854 "2025-07-16T11:03:15Z")
I don’t understand 1000 services and 5000 workloads per cluster I keep to think services is the same as workloads. or say, these two things mean the same concept. When I was software engineer, I would develop some code… --- ## [If you're a continuing Traffic Director customer or a new customer, you don't need to read this doc?](https://discuss.google.dev/t/if-youre-a-continuing-traffic-director-customer-or-a-new-customer-you-dont-need-to-read-this-doc/193853)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 2\ **Last updated:** [July 16, 2025, 10:52am UTC](https://discuss.google.dev/t/if-youre-a-continuing-traffic-director-customer-or-a-new-customer-you-dont-need-to-read-this-doc/193853 "2025-07-16T10:52:02Z")
How to understand this statement: If you’re a continuing Traffic Director customer or a new customer, you don’t need to read this document. ? this document means only Overview docs or Overview, Managed control plane mod… --- ## [Cloud Armor - multiple rate limiters in a single Security Policy](https://discuss.google.dev/t/cloud-armor-multiple-rate-limiters-in-a-single-security-policy/171924)
**Author:** [@sokol8](https://discuss.google.dev/u/sokol8)\ **Replies:** 9\ **Last updated:** [July 16, 2025, 10:19am UTC](https://discuss.google.dev/t/cloud-armor-multiple-rate-limiters-in-a-single-security-policy/171924 "2025-07-16T10:19:02Z")
Hi everyone, I would like to have several rate limiters that would operate on different time-horizons. For example: RateLimiter1 will allow a user (ip-address + path pair) make max 10 requests per minute and ban the… --- ## [No labs yet, but vibes are 100% cloud ☁️](https://discuss.google.dev/t/no-labs-yet-but-vibes-are-100-cloud/193506)
**Author:** [@Appu\_001](https://discuss.google.dev/u/Appu_001)\ **Replies:** 2\ **Last updated:** [July 12, 2025, 8:18am UTC](https://discuss.google.dev/t/no-labs-yet-but-vibes-are-100-cloud/193506 "2025-07-12T08:18:10Z")
Just joined Google Cloud Arcade… Haven’t done any labs yet, but I’m mentally in the cloud :cloud: :laptop: Free Google swag, I’m coming for you (slowly…) #GoogleCloud #CloudArcade #SwagHunter #LearningModeOn --- ## [Cloud NAT Port Usage Metric](https://discuss.google.dev/t/cloud-nat-port-usage-metric/193703)
**Author:** [@kcacciatore](https://discuss.google.dev/u/kcacciatore)\ **Replies:** 5\ **Last updated:** [July 10, 2025, 8:54pm UTC](https://discuss.google.dev/t/cloud-nat-port-usage-metric/193703 "2025-07-10T20:54:25Z")
Hi, I’m hoping to understand more about the router.googleapis.com/nat/port\_usage metric. The description reads: Maximum number of connections from VM to a single internet endpoint (IP:port). Which is somewhat confusin… --- ## [Filtering Static Files Before Callout with traffic extension](https://discuss.google.dev/t/filtering-static-files-before-callout-with-traffic-extension/193601)
**Author:** [@laurodd](https://discuss.google.dev/u/laurodd)\ **Replies:** 3\ **Last updated:** [July 10, 2025, 3:54pm UTC](https://discuss.google.dev/t/filtering-static-files-before-callout-with-traffic-extension/193601 "2025-07-10T15:54:43Z")
Hello everyone, I’d like to get your input on something I’ve been testing. I was exploring the possibility of extending the match condition in our service extension (traffic) to filter out static files using CEL (Common… --- ## [Unable to provision certificate](https://discuss.google.dev/t/unable-to-provision-certificate/164442)
**Author:** [@mountaincode2](https://discuss.google.dev/u/mountaincode2)\ **Replies:** 6\ **Last updated:** [July 10, 2025, 2:21pm UTC](https://discuss.google.dev/t/unable-to-provision-certificate/164442 "2025-07-10T14:21:00Z")
I am trying to follow the steps in the following document to create a certificate using Certificate Manager: https://cloud.google.com/certificate-manager/docs/deploy-google-managed-dns-auth#create-cert-dns-auth I have … --- ## [Should my L7 ILB be cross region or regional](https://discuss.google.dev/t/should-my-l7-ilb-be-cross-region-or-regional/193712)
**Author:** [@amitkhosla](https://discuss.google.dev/u/amitkhosla)\ **Replies:** 1\ **Last updated:** [July 10, 2025, 2:05pm UTC](https://discuss.google.dev/t/should-my-l7-ilb-be-cross-region-or-regional/193712 "2025-07-10T14:05:54Z")
I am trying to use L7 ILB. Backend will be Private Service Connect NEGs pointing to ApigeeX service attachment. As the backend will be in the region the Apigee is (my use case is to have 1-1 mapping with ILB to Apigee),… --- ## [Shared VPC subnet permission Query](https://discuss.google.dev/t/shared-vpc-subnet-permission-query/193564)
**Author:** [@Xienan](https://discuss.google.dev/u/Xienan)\ **Replies:** 1\ **Last updated:** [July 7, 2025, 2:22pm UTC](https://discuss.google.dev/t/shared-vpc-subnet-permission-query/193564 "2025-07-07T14:22:55Z")
I have created shared VPC in the host project and attach a service project with it. But even I only set up the individual subnet access when attaching the service project, I can still view all subnets in the service proj… --- ## [GCP website redriect issue](https://discuss.google.dev/t/gcp-website-redriect-issue/193338)
**Author:** [@gregsolo](https://discuss.google.dev/u/gregsolo)\ **Replies:** 2\ **Last updated:** [July 7, 2025, 7:38am UTC](https://discuss.google.dev/t/gcp-website-redriect-issue/193338 "2025-07-07T07:38:57Z")
I have a web server on GCP. I want to be able to open www.example.com by typing example.com in the browser. What settings do I need to make on GCP? --- ## [route rules not working](https://discuss.google.dev/t/route-rules-not-working/185300)
**Author:** [@mountaincode2](https://discuss.google.dev/u/mountaincode2)\ **Replies:** 4\ **Last updated:** [July 3, 2025, 4:24pm UTC](https://discuss.google.dev/t/route-rules-not-working/185300 "2025-07-03T16:24:08Z")
Hello, I have set up the following route rules for my URL map: defaultService: projects/test-case2-b/global/backendServices/cross-ref-backend-service name: test-path-matcher routeRules: matchRules: prefixMatch: ‘/i… --- ## [Load Balancer SQL, front end give IP address to all servers and is not possible to failover.](https://discuss.google.dev/t/load-balancer-sql-front-end-give-ip-address-to-all-servers-and-is-not-possible-to-failover/193056)
**Author:** [@hcljunior](https://discuss.google.dev/u/hcljunior)\ **Replies:** 4\ **Last updated:** [July 2, 2025, 7:40pm UTC](https://discuss.google.dev/t/load-balancer-sql-front-end-give-ip-address-to-all-servers-and-is-not-possible-to-failover/193056 "2025-07-02T19:40:43Z")
I have one Load Balancer with a frontend IP and twoo servers with SQL Always ON in backend. The IP from front end are in both servers and I can not failover SQL. Can some help me about this failover? I want to the IP o… --- ## [HA (GCP and AWS)](https://discuss.google.dev/t/ha-gcp-and-aws/191125)
**Author:** [@fadynabil](https://discuss.google.dev/u/fadynabil)\ **Replies:** 4\ **Last updated:** [July 2, 2025, 9:06am UTC](https://discuss.google.dev/t/ha-gcp-and-aws/191125 "2025-07-02T09:06:45Z")
This article for create highly available VPN connections between Amazon Web Services (AWS) and Google Cloud (GCP) for direct communication between VPC networks across the two cloud platforms. This article assumes that y… --- ## [Does MACsec for Cloud Interconnect actually encrypt traffic or not?](https://discuss.google.dev/t/does-macsec-for-cloud-interconnect-actually-encrypt-traffic-or-not/192838)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 3\ **Last updated:** [July 2, 2025, 8:41am UTC](https://discuss.google.dev/t/does-macsec-for-cloud-interconnect-actually-encrypt-traffic-or-not/192838 "2025-07-02T08:41:15Z")
MACsec for Cloud Interconnect overview have two statements: MACsec for Cloud Interconnect doesn’t provide encryption in transit within Google. The following diagrams show how MACsec encrypts traffic This docs is… --- ## [Are Private Service Connect (PSC) and interconnect belong to a product? or different products?](https://discuss.google.dev/t/are-private-service-connect-psc-and-interconnect-belong-to-a-product-or-different-products/192845)
**Author:** [@anlex\_N](https://discuss.google.dev/u/anlex_N)\ **Replies:** 1\ **Last updated:** [June 30, 2025, 2:50pm UTC](https://discuss.google.dev/t/are-private-service-connect-psc-and-interconnect-belong-to-a-product-or-different-products/192845 "2025-06-30T14:50:25Z")
I keep to think these two are different products until I review this docs\](https://cloud.google.com/hybrid-connectivity?hl=en)) This docs says: Private Service Connect (PSC) over interconnect. Oh my god. Is this docs w… --- ## [Media CDN flexible origin shielding: Reducing origin load, latency, and improving viewer experience](https://discuss.google.dev/t/media-cdn-flexible-origin-shielding-reducing-origin-load-latency-and-improving-viewer-experience/192810)
**Author:** [@anandpv](https://discuss.google.dev/u/anandpv)\ **Replies:** 0\ **Last updated:** [June 26, 2025, 8:53pm UTC](https://discuss.google.dev/t/media-cdn-flexible-origin-shielding-reducing-origin-load-latency-and-improving-viewer-experience/192810 "2025-06-26T20:53:58Z")
Anand Vijayan, Senior Product Manager Rachel Thornton, Senior Software Engineer Media CDN is Google Cloud’s content delivery network for large-scale workloads, including video streaming and software downloads, leveragi… [Next page](https://discuss.google.dev/tag/server-configuration/383.md?match_all_tags=true&page=1&tags%5B%5D=server-configuration)