Use URL maps

This guide shows you how to configure Google Cloud URL maps. A URL map is a set of rules for routing incoming HTTP(S) requests to specific backend services or backend buckets. A minimal URL map matches all incoming request paths (/*).

Before following this guide, familiarize yourself with URL map concepts.

URL maps are used with the following Google Cloud products:

URL maps used with global external Application Load Balancers, regional external Application Load Balancers, internal Application Load Balancers, and Cloud Service Mesh also support several advanced traffic management features. For more information, see URL map concepts: Advanced traffic management.

URL map defaults

URL maps have two defaults, as described in the following table.

Default type Setting Meaning
URL map default gcloud compute url-maps create

--default-service | --default-backend-bucket

The specified default backend service or backend bucket is used if none of the path matchers or host rules match the incoming URL.
Path matcher default gcloud compute url-maps add-path-matcher

--default-service | --default-backend-bucket

The specified default backend service or backend bucket is used if the URL's path matches a path matcher, but none of the specified --path-rules match.

Host rules

A host rule defines a set of hosts to match requests against.

In a host rule, the hostname must be a fully qualified domain name (FQDN). The hostname can't be an IPv4 or IPv6 address. For example:

  • Works: example.com
  • Works: web.example.com
  • Works: *.example.com
  • Doesn't work: 35.244.221.250

Configure URL maps

A URL map can send traffic to backend services or backend buckets.

Console

To add a URL map using the Google Cloud console, perform the following steps:

  1. Go to the Load balancing page.

    Go to Load balancing

  2. Click the Name of a load balancer.
  3. On the Load Balancer Details page, click Edit for the selected load balancer.
  4. Select Host and path rules.
  5. Click Add host and path rule.
  6. Fill in the Host field, Paths field, or both, and select a backend service or backend bucket.

    1. Enter a fully qualified Host name, for example web.example.com.
    2. Enter the path—for example, /video.
    3. On the Host and path rules page, in the Backends menu, select an available backend service or backend bucket.
  7. Look for the blue checkmark to the left of Host and Path Rules and click the Update button.

gcloud

To add a URL map using the Google Cloud CLI, use the url-maps create command:

gcloud compute url-maps create URL_MAP_NAME \
   (--default-backend-bucket=DEFAULT_BACKEND_BUCKET | --default-service=DEFAULT_SERVICE) \
   [--description DESCRIPTION] \
   [--global | --region=REGION]

For regional external Application Load Balancers and internal Application Load Balancers, make sure to include the --region flag when you create the URL map.

To create a path matcher, use the gcloud compute url-maps add-path-matcher command:

gcloud compute url-maps add-path-matcher URL_MAP_NAME \
   (--default-backend-bucket=DEFAULT_BACKEND_BUCKET | --default-service=DEFAULT_SERVICE) \
   --path-matcher-name PATH_MATCHER \
   [--path-rules="PATH=SERVICE or BUCKET"]

This command requires a default backend service or backend bucket to which it can send unmatched requests. The --path-rules flag defines mappings between request paths and backend services or buckets. The following example routes the request paths /video/ and /video/* to the video-service backend service:

--path-rules="/video=video-service,/video/*=video-service"

To create a host rule, use the gcloud compute url-maps add-host-rule command:

gcloud compute url-maps add-host-rule URL_MAP_NAME \
    --hosts=[HOSTS] --path-matcher-name=PATH_MATCHER

For example, the following --hosts value matches requests against www.example.com and any subdomain of altostrat.com:

--hosts=[*.altostrat.com,www.example.com]

To change the default service or default bucket of a URL map, use the url-maps set-default-service command:

gcloud compute url-maps set-default-service URL_MAP_NAME
  (--default-backend-bucket=DEFAULT_BACKEND_BUCKET
  | --default-service=DEFAULT_SERVICE)[GCLOUD_WIDE_FLAG ...]

Terraform

To create a global URL map, use the google_compute_url_map resource.

# url map
resource "google_compute_url_map" "default" {
  name            = "http-lb"
  default_service = google_compute_backend_bucket.default.id
}

To create a regional URL map, use the google_compute_region_url_map resource.

resource "google_compute_region_url_map" "default" {
  name            = "regional-l7-xlb-map"
  region          = "us-west1"
  default_service = google_compute_region_backend_service.default.id
}

Validate the URL map configuration

Before deploying a URL map, make sure you validate the URL map configuration to ensure that the map is routing requests to the appropriate backends as intended. You can do this by adding tests to the URL map configuration. You can experiment with different URL map rules and run as many tests as needed to be confident that the map will route traffic appropriately when it is deployed. Additionally, if any rule changes are needed in the future, you can test those changes before actually going live with the new configuration.

Use the gcloud compute url-maps validate command to validate URL map configuration. This command only tests the configuration provided. Irrespective of whether the tests pass or fail, no changes are saved to the deployed URL map. This behavior is unlike other URL map commands (edit, import), which also run the same tests but will actually save the new configuration if tests pass. When you want to test a new routing configuration without making changes to the deployed URL map, use the validate command.

The validate command lets you test advanced route configurations such as routing based on headers and query parameters, HTTP to HTTPS redirects, and URL rewrites.

Console

You can't use the Google Cloud console to validate URL map configuration. Use gcloud or the REST API instead.

gcloud

To validate your URL map configuration use the gcloud compute url-maps validate command.

For the global external Application Load Balancer:

gcloud compute url-maps validate --source PATH_TO_URL_MAP_CONFIG_FILE \
    --load-balancing-scheme=EXTERNAL_MANAGED \
    --global

For the classic Application Load Balancer:

gcloud compute url-maps validate --source PATH_TO_URL_MAP_CONFIG_FILE \
    --load-balancing-scheme=EXTERNAL \
    --global
  • PATH_TO_URL_MAP_CONFIG_FILE: Replace with a path to the file that contains the URL map configuration for validation.

Validate changes to an existing load balancer's URL map

If you have an existing load balancer that needs changes to the URL map, you can test those configuration changes before making them live.

  1. Export the load balancer's existing URL map to a YAML file.

    gcloud compute url-maps export URL_MAP_NAME \
       --destination PATH_TO_URL_MAP_CONFIG_FILE \
       --global
    
  2. Edit the YAML file with new configuration. For example, if you want to edit an external Application Load Balancer and send all requests with the path /video to a new backend service called video-backend-service, you can add tests to the URL map configuration as follows:

    Existing URL map configuration with a single default web-backend-service:

     kind: compute#urlMap
     name: URL_MAP_NAME
     defaultService: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/web-backend-service
     

    Edited URL map configuration with added path matcher and tests for both the default web-backend-service and the new video-backend-service backend service:

     kind: compute#urlMap
     name: URL_MAP_NAME
     defaultService: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/web-backend-service
     hostRules:
     - hosts:
       - '*'
       pathMatcher: pathmap
     pathMatchers:
     - defaultService: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/web-backend-service
       name: pathmap
       pathRules:
       - paths:
         - /video
         - /video/*
         service: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/video-backend-service
     tests:
     - description: Test routing to existing web service
       host: foobar
       path: /
       service: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/web-backend-service
     - description: Test routing to new video service
       host: foobar
       path: /video
       service: https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/backendService/video-backend-service
    
  3. Validate the new configuration.

    gcloud compute url-maps validate --source PATH_TO_URL_MAP_CONFIG_FILE
    

    If all tests pass successfully, you should see a success message such as:

    Successfully validated [https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/urlMaps/URL_MAP_CONFIG_FILE_NAME]
    

    If the tests fail, an error message appears. Make the required fixes to the URL map config file and try validating again.

    Error: Invalid value for field 'urlMap.tests': ''.
    Test failure: Expect URL 'HOST/PATH' to map to service 'EXPECTED_BACKEND_SERVICE', but actually mapped to 'ACTUAL_BACKEND_SERVICE'.
    
  4. Once you know that the new configuration works and does not impact your existing setup, you can import it into the URL map. Note that this step also deploys the URL map with the new configuration.

    gcloud compute url-maps import URL_MAP_NAME \
       --source PATH_TO_URL_MAP_CONFIG_FILE \
       --global
    

Add tests to a URL map

You can add configuration tests to a URL map to ensure that your URL map routes requests to the backend services or backend buckets as intended.

This section describes how to add tests to a URL map that has already been deployed. If you want to test new changes to a URL map without actually deploying the map, see Validate URL map configuration.

When you edit your URL map, the tests run, and an error message appears if a test fails:

Error: Invalid value for field 'urlMap.tests': ''.
Test failure: Expect URL 'HOST/PATH' to map to service 'EXPECTED_BACKEND_SERVICE', but actually mapped to 'ACTUAL_BACKEND_SERVICE'.

Adding tests to URL maps is optional.

Console