Flexible Load Balancing Features

Balance network traffic and workloads, either publicly or privately, to support scaling, high availability, and ensure application responsiveness.

Gain high availability

OCI Flexible Load Balancer offers a public IP address to front-end internet traffic within a single availability domain or across regions, ensuring applications are always available during peak demand.

Optimize traffic routing

Match your load balancing policy to your application requirements and optimize efficiency and reliability. Customers choose from round-robin, least connections, IP hash load balancing, or customized policies.

Multiple protocol flexibility

Customers use rules to define routing policies to balance incoming traffic with supported protocols such as TCP, HTTP, HTTP/2, and WebSockets. Automate load balancing tasks via API or web console.

TLS termination/SSL offloading

Transport Layer Security (TLS) termination decrypts SSL-encrypted data traffic (think of TLS as providing the ‘S’ in HTTPS). SSL termination also works to increase site and web application performance by reducing the workload scope of back-end servers. Customers can handle very high throughput SSL handshakes with the 8 Gbps load balancer shape.

Security built-in

Gain support for the modern TLS 1.2 protocol along with strong cipher suite for a secure front end to your application tier. Protect all traffic to your cloud with TLS encryption, and offload TLS handshakes to the load balancer. Leverage security lists to configure inbound and outbound access policies at the infrastructure level.

Low global pricing

Customer spend on load balancing is transparent and predictable, thanks to consistent global pricing, which offers savings of 100% or more in some geographies relative to competitors. OCI Flexible Network Load Balancer is offered at no cost to the customer.

Pass-through layer 4 (TCP/UDP) load balancing

Flexible Network Load Balancer preserves the original client packet (IP/Port) characteristics and load-balances them as is, without terminating the client session. The load-balancing decision is based on a hash of source/destination IP/Port and protocol information. It can provide network flow connection persistence based on client source IP and ensure that the subsequent requests from a client session are sent to the same back-end server.

WAF enforcement

Directly apply and enforce Oracle Cloud Infrastructure WAF protection on your flexible load balancer for both public and private instances to secure both your internet-facing and internal (VCN only) application workloads. OCI WAF helps protect against OWASP Top 10 attacks, layer 7 DDOS and insider threats, and provides enhanced security for your in-region application workloads.

Flexible performance

Create load balancers that will meet the performance you need and don’t be afraid of a surprise bill. OCI Flexible Load Balancer provides instant readiness for your workloads with minimum bandwidth and autoscales bandwidth based on the client traffic up to the defined maximum bandwidth. OCI Flexible Network Load Balancer scales up elastically based on incoming client traffic with no bandwidth configuration required.

Concurrency control with entity tags (ETags)

ETags provide optimistic concurrency control for load balancers via the API and protect against conflicting changes made by multiple users. Any conflicting changes to a load balancer, such as to its shape, listeners, back-end sets, or routing policies, are tagged for review prior to implementation.