Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GCP LB timeout recommendation #52312

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

GCP LB timeout recommendation #52312

Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b6b268f
GCP LB timeout recommendation
WilliamLoy Feb 19, 2025
8e0d431
Update docs/pages/admin-guides/deploy-a-cluster/deployments/gcp.mdx
WilliamLoy Mar 12, 2025
5cda609
Update docs/pages/admin-guides/deploy-a-cluster/deployments/gcp.mdx
WilliamLoy Mar 12, 2025
81ab9fe
Update gcp.mdx
WilliamLoy Mar 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/pages/admin-guides/deploy-a-cluster/deployments/gcp.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -117,6 +117,10 @@ storage:
Load Balancing is required for Proxy and SSH traffic. Use `TCP Load Balancing` as
Teleport requires custom ports for SSH and Web Traffic.

GCP sets a default Load Balancer timeout of 30 seconds. You should either increase this to be longer than the Teleport Auth Service default keepalive interval of 300 seconds or decrease the Teleport `keep_alive_interval` to be lower than the GCP timeout value.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This information is incomplete and not true in most cases.

AFAIK GCP does not have a concept of timeout for Passthrough TCP/UDP LBs, not for Proxy TCP/UDP LBs. The 30 second timeout is only on Application LBs (L7/HTTP) and varies based on the target type (target pool vs NEG).

The guide instructs users to use L4 LBs so they should not have to set the timeout (and I don't even think it's possible to set the L4 Lb timeout in GCP).

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I made revisions that I believe avoid inaccurate information while still informing the reader that L7 is an available option.


Please reference the [Teleport Auth Service Configuration](https://goteleport.com/docs/reference/config/#auth-service) documentation for additional details.

### Network Services: Cloud DNS

Cloud DNS is used to set up the public URL of the Teleport Proxy.
Expand Down
Loading