Тёмный

How to Setup HTTPS/SSL/TLS on Google Cloud Platform 

Data Slayer
Подписаться 218 тыс.
Просмотров 37 тыс.
50% 1

This tutorial walks you through the process of creating a website on Google Compute engine virtual machine instance, configuring a load balancer, enabling Google managed SSL certificate, configuring the DNS zone and DNS records with the domain registrar.
This is the easiest way to setup SSL for any web server or API service.
#ssl #encryption

Опубликовано:

 

1 окт 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 140   
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Listen UP! GCP changed how health checks work - I NOW SUGGEST USING a TCP Health Check instead of HTTP. This should resolve some issues folks were seeing.
@landonschropp665
@landonschropp665 3 года назад
Thanks for the great tutorial! Could you elaborate a little more on this? Why should I use a TCP health check over an HTTP health check?
@gcxs
@gcxs 3 года назад
GCP is so inconsistent, time wasted on reading updates
@danielmarco4818
@danielmarco4818 2 года назад
@@gcxs Not happy with it myself.
@jeffersonjoblatorreflores4540
@jeffersonjoblatorreflores4540 4 года назад
Hi, how is it that I have a problem with the subfolders not loading? I get an error: "The requested URL / cosmos_2020 / users / login was not found on this server." ... please help
@DataSlayerMedia
@DataSlayerMedia 4 года назад
What program is returning the error? Your server?
@kellyjohna
@kellyjohna 3 года назад
@@DataSlayerMedia Same problem for me.
@raedmusaab1363
@raedmusaab1363 2 года назад
i have a Lab from which am access as https but it keeps saying that there is a cryptocurrency prob and stop the services ! how to secure https to my VM Lab ?
@DataSlayerMedia
@DataSlayerMedia 2 года назад
Your VM has been compromised. Check your service accounts change passwords, create new vm's etc
@ytutoriallearning6251
@ytutoriallearning6251 3 года назад
Can internal http be turned into https ? see cloud.google.com/load-balancing/docs/l7-internal/
@DataSlayerMedia
@DataSlayerMedia 2 года назад
You can always create or terminate encryption along the path of traffic proxying.
@nachogalvezantunez1915
@nachogalvezantunez1915 2 года назад
Hello Tim, I registered 3 domains at my google managed certificate; I want to change one of them, for what I think I have to extrac it from the certificate and from my load balancer, right? My question is would it be enough deleting the zone I created for this domain I want to extract? Thanks in advanced.
@DataSlayerMedia
@DataSlayerMedia 2 года назад
Need more details.
@nachogalvezantunez1915
@nachogalvezantunez1915 2 года назад
Ok Tim, great, thanks. So when I created my certificate, at the time of creating the frontend service, One must register the domain to protect so here I registered 3 domains because they are pointing to the same IP; however one of this domains I am going to direct it to another IP, tus my question is: since I have no way to edit my google managed certificate, shall I just edit or delete my DNS Zone of this specific domain or there is a way to edit the cerficate? I hope I was less redundant, I apreciate very much in advanced any posible advice.
@raedmusaab1363
@raedmusaab1363 2 года назад
Mate, i have a simple Lab to access but cryptocurrency prob still there where GCP stop my VM. how to secure the https connection ?
@lenielluzardo3043
@lenielluzardo3043 3 года назад
Hey thank you so much again for the explanation about this topic. It worked perfectly for me. And if you let me ask you another question would be great. So, do you have a video, content, resources, or something that explain how to redirect the http requests to https on the load balancer? EDIT: For those looking at the same this guide is pretty straightforward cloud.google.com/load-balancing/docs/https/setting-up-http-https-redirect
@DataSlayerMedia
@DataSlayerMedia 3 года назад
ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-2yaq-0C-cmU.html
@bala-st9cj
@bala-st9cj 3 года назад
Can I use Kubernet instead of app engine?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
This video uses compute engine, I believe you can use any google service.
@bala-st9cj
@bala-st9cj 3 года назад
@@DataSlayerMedia I did ,it works with kubernet, thank u for ur works
@ePreneurs
@ePreneurs Год назад
If i get an organization ssl; I can upload it with the same steps to get ov ssl?
@jhillsff684
@jhillsff684 2 года назад
I have a static website in the cloud storage browser. Just html, css, and images. Will this work or do I need to do any additional steps to connect the VM to my bucket?
@DataSlayerMedia
@DataSlayerMedia 2 года назад
You need a server to serve the website.
@jhillsff684
@jhillsff684 2 года назад
@@DataSlayerMedia I deleted the VM and VM group, used the storage browser bucket as a backend bucket for the load balancer, and no longer had to pay to the VM!
@PAIGELYNNCURRAN
@PAIGELYNNCURRAN 3 года назад
Break dows like this enormously helpful. I'm working hard to teach myself these things while going to school for design. The Prob with the school doesn't teach you how to maneuver the computer and set things up by yourself. But teaching myself online, everyone assumes you know the simple things, for example, if I need to get to my PHP for WordPress because I changed the URL on my site. So basically, The instructions say it's easy (talk about make me feel bad). You need to go in my PHP in ssh type in code, then I'm good. But............. How do I get to the PHP and maneuver while I'm in there? These are the things that make working online extremely difficult. Customer Service forget about it, on most platforms; WordPress has no contact. They have forms, and people send you right back to the confusing directions. All I'm saying is thank you so so much for your videos. You are certainly helping people.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Do you need to be learning web development? There are a lot of tools that abstract away this stuff. In most cases, even for my own projects, I would not pursue coding my own site. I would use something like Webflow, Wix, Squarespace, etc.
@ahmedalazazy
@ahmedalazazy 2 года назад
Thx
@howlingsailstudio
@howlingsailstudio 2 года назад
The VM with the NGINX running if someone hits that public IP that will still not be in HTTPS.. How do you make the VM not be public available?
@zakariasaputra9404
@zakariasaputra9404 4 года назад
Hello mate, can you make tutorial, how to ponting a domain with google domain because i'm so confuse with google cloud the domain bnsholiday.com screnshoot Vm prnt.sc/ukudm8 Cloud DNS prnt.sc/ukue6f External Ip prnt.sc/ukufgt Google Domain NS prnt.sc/ukueek Google Domain Record prnt.sc/ukuep7 can you see, what problem with this
@dhanysaguntoro
@dhanysaguntoro Год назад
the load balancer editor now is different, I tried to adapt your tutorial using this new interface but failed, I tried to navigate the load balancer's STATIC IP using my browser but didn't get any response,
@amrbaligh7787
@amrbaligh7787 3 года назад
Thank you so much for these 2 tuts, I have 2vms 1.Win server OS for web app 2.linux for DB - I want to access the application through a domain instade of the vm static IP everything worked fine ( instance group, LB frontend, SSL cert., cloud DNS .. etc) [ the problem is my backend service status is unhealthy ] http and https rules IP : 0.0.0.0/0 TCP : 80,442 when I hit my vm static ip address directly the app works fine.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Where does it say the backend service is unhealthy? In the load balancer? If so, check the logic being used to determine the health. Ensure that the protocol/https(s), domain, route, status code and text response are all correct.
@jeffersonjoblatorreflores4540
@jeffersonjoblatorreflores4540 4 года назад
Hello, I'm from PERU, my name is JEFFERSON JOB, I have a VM instance running on Google Platform and I just bought a domain, I saw your tutorials on the web but I don't speak much English, please maybe you can make a tutorial or you can help me put https to my platform, I hope you respond thanks.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
I'm happy to help just throw your questions in the comments.
@ecovillaraza2953
@ecovillaraza2953 2 года назад
Thank you so much, this is very helpful
@ahmedsamirabdelreheem6313
@ahmedsamirabdelreheem6313 3 года назад
Thank you so much. This saved me a lot of time.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Woohoo!
@FidboxServices
@FidboxServices Год назад
Hi, I have followed every step but getting error - no healthy upstream Can you please suggest what will be the cause and solution?
@hexise
@hexise 3 года назад
Works exactly as described. Saved me lots of time and effort! Thank you for your detailed introduction! Just some tips, you can use subdomain instead of the main domain for the load balancer certificate, and add type-A dns mapping in your domain provider(namecheap) instead of GCP. Then your main domain can still point to digital ocean but the subdomain can point to GCP load balancer.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Interesting, good to know!
@tonyVelazquez-i8t
@tonyVelazquez-i8t Год назад
What I am facing is thatmy wordpress site external ip and my ssl external ip are different and if I set the dns to the wordpress instance the site doesn't show if I type the url but if i type ip addresses they both ip addresses works , any suggestions of how to fix the issue o have ssl setup
@cleverhippo
@cleverhippo 3 года назад
great tutorial man! do you have anything on how to import a domains.google.com ssl cert to the VM? I wish google domains was better integrated with GCP
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Not yet but I just made a note to get on that! Thank you
@chriseteka
@chriseteka 4 года назад
To be honest you got a nice tutorial and very good explanations as to what happens behind the scene, you've also given really clear steps on how to chieve this. Thing is I followed these steps but it still failed with same error @rudranil chakrabortty had earlier stated, I researched on this and found out this problem is unique and many persons have faced same in the past, it had to deal with the "external IP" which the frontend resolves to. There are couple of open issues on google support with regards this, no solution has been profound to this yet. Watching your vid however, I can't say how yours seem to work pretty well. Since I couldn't get mine working with the steps you explained in your vids, I had to explore other means, and it worked for me.
@DataSlayerMedia
@DataSlayerMedia 4 года назад
How did you resolve your issue?
@prlinsell
@prlinsell 3 года назад
Very helpful, many thanks Macgyver.
@oogieboogie7028
@oogieboogie7028 4 года назад
The health check was fine when I initially set it up but now it's unhealthy and I can't fix it. Please help me with it. Thanks in advance
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Does that health check route return a 200 status code?
@johnguo4217
@johnguo4217 3 года назад
My website already has trouble signing in. Does the tutorial still work?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
What kind of trouble?
@javierolguin4751
@javierolguin4751 3 года назад
Thank you so much! Finally 'll forget about buying and configurating mannually the certs
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Amen!
@viktorviljac3994
@viktorviljac3994 3 года назад
Can you help me?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
What's up?
@ionessina
@ionessina 4 года назад
This has to be the best & clearest explanation. Thank you so much
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Thanks Stephen
@MiladEkramnia
@MiladEkramnia 4 месяца назад
Excellent, it was a great help, and thanks for the nice intro
@shetulr6949
@shetulr6949 3 года назад
hi, under ssh trying to install nginx there is an error code (1) how do i take it further? I have an bitnami wordpress.... could this be an msmatch?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Yes, you don't need nginx. Wordpress has it's own apache server.
@shetulr6949
@shetulr6949 3 года назад
@@DataSlayerMedia ok, thank you!
@NxInfinite
@NxInfinite 3 года назад
How do I ADD SSL to an existing website on Google Cloud?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
How is the website hosted, app engine/compute engine etc?
@hrdiijital2161
@hrdiijital2161 4 года назад
you are best bro I am very helpful our video :)
@AndreGiavara
@AndreGiavara 4 года назад
This does not work with a wordpress instance (because it is managed and cannot be added to an unmanaged instance group) is there any solution? (I don't want use other certificate like lets encrypt, I would to use google certificate)
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Word press shouldn't dictate the instance group type, how are you setting up word press?
@AndreGiavara
@AndreGiavara 4 года назад
Macgyver thanks for the response. I created the wp site with automatic deployment in Google marketplace
@mcomatt
@mcomatt 3 года назад
@@AndreGiavara did you get it working or not with Wordpress ?
@ilhabibi
@ilhabibi 2 года назад
Thank you to make this video
@DataSlayerMedia
@DataSlayerMedia 2 года назад
Thank you to watch
@johnguo4217
@johnguo4217 3 года назад
Will creating a new VM instance cost something?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Yes, the cost estimate will be shown on the screen when setting up the virtual machine.
@carlos_melgoza
@carlos_melgoza 3 года назад
Where can I buy you a coffee? You saved my life
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Like the video instead!
@scammerscrimesecurityroman8294
@scammerscrimesecurityroman8294 4 года назад
Hello Macgyver, Thanks for sharing! Will, u pls kindly make a video on WordPress security on different levels respectively from infrastructure, operating software, software, apps, user PPI ... etc., the whole package on security ... Thanks in advance!!!
@DataSlayerMedia
@DataSlayerMedia 4 года назад
I am not a big fan of Word Press (it's old tech). So unfortunately I don't think I'll touch on these topics. I prefer managed SAAS alternatives like WebFlow.
@scammerscrimesecurityroman8294
@scammerscrimesecurityroman8294 4 года назад
Macgyver thanks for your reply, did you make videos on SAAS - web-flow? I will like to learn that ... especially security n make mob- web apps or site , did u have the whole course? Thanks in advance! 🙏👍☀️
@scammerscrimesecurityroman8294
@scammerscrimesecurityroman8294 4 года назад
Macgyver webflow on GCP? Security?
@ADChauhan2016
@ADChauhan2016 3 месяца назад
Great Job bro, My web working.
@adorkable81
@adorkable81 2 года назад
and for this convenience, what is the price per hour for load balancing ?
@ChapuneisZxH
@ChapuneisZxH 2 года назад
awesome content, liked & subs
@DataSlayerMedia
@DataSlayerMedia 2 года назад
Thanks for the sub!
@seanlyons858
@seanlyons858 3 года назад
I can not even begin to explain how grateful I am. I deployed flask app and I have been trying to sort this out for days. Thank you!
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Glad it helped
@user-zb5jp4ti1d
@user-zb5jp4ti1d 2 года назад
This is how it's done. You start off with an illustration!
@josephwaldner1976
@josephwaldner1976 Год назад
this is a GREAT vid. If you are using google domains make sure to add an 'a' record that points to your public ip address from the load balancer.
@TravisHydzik
@TravisHydzik 3 года назад
Excellent, thanks heaps.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Your very welcome.
@ericyangchen
@ericyangchen 6 месяцев назад
Gold
@find127
@find127 Год назад
Amazing video!! Thank you so much
@yawdarks4458
@yawdarks4458 4 года назад
So just to re-enstate my instance with the working WordPress install, I have had to delete everything i.e Instance group, Load Balancer, etc etc, but I still receive error > @Macgyver: Please assist
@DataSlayerMedia
@DataSlayerMedia 3 года назад
When you hit the ip address in your browser does it resolve to the website? It should.
2 года назад
Thankyou!
@DataSlayerMedia
@DataSlayerMedia 2 года назад
You're welcome!
@ramonvega8960
@ramonvega8960 4 года назад
Crack, thanks!
@RLAPERU2
@RLAPERU2 4 года назад
How do I configure backend api with https. Example api.whimsical.ai?
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Same process
@UditBhan
@UditBhan 3 года назад
I performed all the steps and implemented SSL. But I am now unable to implement Canonical on my website, also all the internal links have converted to IP addresses rather than being the normal URLs. What can be done about that? Please help.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
This setup should not have affected your internal links, I assume your using WordPress? I have another video for that. studio.ru-vid.comb5rgePxh6nc/comments
@yawdarks4458
@yawdarks4458 4 года назад
Sorry sir but I still haven't seen your response to the Error 404. Please treat as urgent
@wraaps
@wraaps 2 года назад
this is too hard
@DataSlayerMedia
@DataSlayerMedia 2 года назад
Sorry
@gorgeouxpanjira8894
@gorgeouxpanjira8894 4 года назад
Awesome!!
@alexanderdelagarza4707
@alexanderdelagarza4707 Год назад
was a rough start but you delivered! Thanks for the set up, and thanks for leaving that last part as well so we can see what causes the error and what we can do or expect to fix them
@khmermobiletv
@khmermobiletv 3 года назад
It is dum idea to set ssl certificate compute engine. You should look at heroku. The way they do is very simple to set up ssl certificate within a few seconds.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Why don't you think it makes sense?
@PAIGELYNNCURRAN
@PAIGELYNNCURRAN 3 года назад
Hi. Do you have any suggestions for what virtual machine is the best? Could you make a video for how to code the site? I took a web design class. We learned how to use HTML, CSS, and javascript, but those skills are dying because I don't know how to use them on the sites that I am building or where to start. When you changed the name at the top if I remember you used HTML, is there a way to hook all three languages up to design the site? I love your channel. Help the lost and confused, lol.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Unless you want to learn the skill set of web development you should use low code solutions like webflow, wix, squarespace, etc. What are you trying to do?
@lenielluzardo3043
@lenielluzardo3043 3 года назад
Thank you so much. It help me a lot. Where can I find theory/books of all this???
@DataSlayerMedia
@DataSlayerMedia 3 года назад
GCP is changing all the time and fairly new so probably won't be much literature on the matter. You can check out the Google docs
@miketierce
@miketierce 4 года назад
I don't know if it's just me but I am never given an option to add any of my existing instances to a new unmanaged group - which made this tutorial hard to follow along with. I feel I get the concept though and tried just recreating my setup inside of one of their Managed Groups and after a ton of work figuring out the whole cloud server exit hook to rename the hostname of the so call managed instance I was able to get IP_ADDRESS:2083 IP_ADRESS:2087 working but pointing the DNS records of domain.com to the load balancer public IP address just gave me 404 errors and ER__EmptyRespone It's made for a miserable week if you know what I mean
@DataSlayerMedia
@DataSlayerMedia 4 года назад
You point the DN domain to the name servers in the DNS entry in GCP, not the ip address.
@nerdvanaracing
@nerdvanaracing 4 года назад
Are you creating the instance group in the same region as the instances for example US-west-1a
@tiongemfune8660
@tiongemfune8660 4 года назад
i am getting this error ' 404. That’s an error. The requested URL / was not found on this server. That’s all we know.' kindly help
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Google couldn't connect to your server. What happens when you hit your back end ip address directly?
@avendite7206
@avendite7206 3 года назад
@Pedro Henrique I had the same issue, I was just typing my domain name or frontend IP adress and I would get error 404. If you type before the IP of frontend(or your domain if you set it up as in the video above) and it works, then the problem is you don't have HTTP to HTTPS redirect. Essentialy you have to do another load balancer, but without another backend. Here is google documentation how to fix it: cloud.google.com/load-balancing/docs/https/setting-up-http-https-redirect#console_1
@vatsal088
@vatsal088 4 года назад
sir example domain issue occurs during ssl certificate what should now i do to recover my website
@DataSlayerMedia
@DataSlayerMedia 4 года назад
The SSL cert may not have been provisioned yet.
@orestvasylyk5185
@orestvasylyk5185 3 года назад
Hi! Please, tell how to allow HTTP & HTTPS Traffic in a Firewall, if those options are freeze? Thank you!
@DataSlayerMedia
@DataSlayerMedia 3 года назад
It is a setting on the virtual machine, "allow http/https"
@orestvasylyk5185
@orestvasylyk5185 3 года назад
@@DataSlayerMedia ,Thank You!
@pavelgrishin
@pavelgrishin 4 года назад
I did all as you show. It doesn't work. Even when I enter static PI of balancer into browser - it gives 404
@DataSlayerMedia
@DataSlayerMedia 4 года назад
404 from google or your webserver?
@vadym.masiuk
@vadym.masiuk 3 года назад
Most likely there is an issue with your instance response... You can try checking your instance response by making request to your instance ip directly, and see if error occurs
@rhitjadhav
@rhitjadhav 4 года назад
Sir i need how to install ssl in WordPress installed instance... because it won't show the wp instance in a instance group... I already msg you on instagram...
@abhijeetdey4800
@abhijeetdey4800 4 года назад
hello Rohit , you can add your existing wordpress deployment of compute engine as an unmanaged instance group. you will see the unmanaged instance group option when creating the instance group.
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Needs to be unmanaged. Checkout my other video Part 2 ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-245ZJLm1AV4.html
@rudranil-c
@rudranil-c 4 года назад
Hi, Thank you for explaining how this internally works in this video. I tried your process to get the certificate, but it is not working. I have my server deployed using Click to deploy WordPress. Now, I did all the instance group, load balancer creation. Then, I edited the A name to point to the load balancer IP. It was previously pointing to the HTTP: IP that I got while installing the click to deploy VM. I also have a CName pointing to www So, after updating the A name, I see that when I type in the website name in the browser, I get an error, page not found
@joaoantonio7542
@joaoantonio7542 4 года назад
Have you figured out how to solve it?
@DataSlayerMedia
@DataSlayerMedia 4 года назад
Was the certificate provisioned yet?
@joaoantonio7542
@joaoantonio7542 4 года назад
@@DataSlayerMedia Yes
@YannDXB
@YannDXB 4 года назад
I have exactly the same issue...followed the instructions step by step and now 404 error, The requested URL / was not found on this server.
@rewritegpt
@rewritegpt 4 года назад
​@@DataSlayerMedia Thanks for the great content! Very helpful to understand. Unfortunately I'm getting getting a similar issues for me too :( Fully followed the guide and the compute engine works fine( 34.64.200.110/ ) but my backend service for my load balancer is showing unhealthy and also getting a "502 Server Error" when trying to reach via the domain ( ssadic.co.kr/ ). Is there any way to debug this issue?
@kubilaytasdemir.
@kubilaytasdemir. 3 года назад
You are so handsome will u marry me❤️❤️❤️
@kellyjohna
@kellyjohna 3 года назад
Took away my down vote. This is a good instructional video. My problem was with the App I was using, Moodle. It was jacking up my https/http redirection. So When I went past https//billandteds.com/moodle to //billandteds/moodle/login at that point some of my content wasn't using ssl. It took me awhile to realize it was moodle bc I didn't know how to read the google loadbalancer logs which honestly were pretty bad.
@DataSlayerMedia
@DataSlayerMedia 3 года назад
Is it working now?
@kellyjohna
@kellyjohna 3 года назад
@@DataSlayerMedia Yeah it is, Thanks. But I couldn't figure out how to to include my centos server at home behind the same load balancer. I tried a few things which I can't remember now but nothing worked. I do remember trying to set up a second load balancer specifically for centos at home it failed so I gave up.
Далее
HTTPS, SSL, TLS & Certificate Authority Explained
43:29
ОБЗОР НА ШТАНЫ от БЕЗДNA
00:59
Просмотров 391 тыс.
SSL, TLS, HTTPS Explained
5:54
Просмотров 770 тыс.
How to set up Django on Cloud Run with Terraform
13:46
What is DNS? (and how it makes the Internet work)
24:22
Episode 1: Creating a React Web App & Deploying to GCP
14:29
Quick and Easy Local SSL Certificates for Your Homelab!
12:08
HomeLab SSL certificates for FREE with minimal effort
19:41
ОБЗОР НА ШТАНЫ от БЕЗДNA
00:59
Просмотров 391 тыс.