Enable and manage Global Front End Enterprise in your Google Cloud project

When you enable Global Front End Enterprise in a project, Google Cloud bundles global external Application Load Balancers, Cloud CDN, Google Cloud Armor (Enterprise features), and Service Extensions into a single Global Front End Enterprise pricing model.

View the enablement status of Global Front End Enterprise in a project

You can verify whether Global Front End Enterprise is enabled in your project or your project is using standard individual pricing.

Console

  1. In the Google Cloud console, go to the Global Front End page.

    Go to Global Front End

  2. In the project selector menu, select your project.

  3. On the Global Front End page, locate the highlighted active tier to view the enablement status of Global Front End Enterprise.

REST

Enable the Compute Engine alpha API, and then send a GET request to retrieve the enablement status of Global Front End Enterprise in the project:

curl -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     "https://compute.googleapis.com/compute/alpha/projects/PROJECT_ID/global/globalFrontendSettings"

Replace PROJECT_ID with the ID of the project you want to view Global Front End Enterprise enablement details for.

In the JSON response, verify the value of the bundleType field:

  • GLOBAL_FRONT_END: indicates that Global Front End Enterprise is enabled in the project.
  • INDIVIDUAL: indicates that Global Front End Enterprise is not enabled in the project.

Enable Global Front End Enterprise in a project

To enable Global Front End Enterprise in your project, contact your Google Cloud Account representative to add the project to the allowlist.

Before you enable Global Front End Enterprise in a project, make sure your workloads primarily use global external Application Load Balancers. Regional load balancers, passthrough load balancers, and Standard tier traffic are excluded from the Global Front End Enterprise pricing and are billed individually.

REST

After your project is added to the allowlist and you enable the Compute Engine alpha API, do the following:

  1. Optional: View the enablement status of Global Front End Enterprise. If Global Front End Enterprise isn't enabled in your project, continue to the next step.

  2. Send a PATCH request to enable Global Front End Enterprise in your project.

    curl --request PATCH \
-H "Authorization: Bearer $(gcloud auth print-access-token)" \
-H "Content-Type: application/json" \
--data '{
  "bundleType": "GLOBAL_FRONT_END"
}' \
"https://compute.googleapis.com/compute/alpha/projects/PROJECT_ID/global/globalFrontendSettings"

    Replace PROJECT_ID with the ID of the project in which you want to enable Global Front End Enterprise.

  3. Wait a few moments, and then view the enablement status of Global Front End Enterprise to confirm.

Disable Global Front End Enterprise in a project

You can disable Global Front End Enterprise and revert your project to individual billing.

When you disable Global Front End Enterprise, your Cloud Armor project-level tier determines active protections. Google Cloud doesn't automatically restore your project to the Cloud Armor tier that you used before you enabled Global Front End Enterprise. You must manually designate a Cloud Armor billing tier (either Cloud Armor Standard or Cloud Armor Enterprise PayGo) to avoid security policy degradation or unexpected billing changes. For more information, see Cloud Armor Enterprise downgrade.

Console

  1. In the Google Cloud console, go to the Global Front End page.

    Go to Global Front End

  2. In the project selector menu, select your project.

  3. In the À la carte column, click Enable.

  4. In the confirmation dialog, click Confirm.

REST

If not already enabled, enable the Compute Engine alpha API, and then send a PATCH request to set the bundleType field to INDIVIDUAL:

curl --request PATCH \
     -H "Authorization: Bearer $(gcloud auth print-access-token)" \
     -H "Content-Type: application/json" \
     --data '{
       "bundleType": "INDIVIDUAL"
     }' \
     "https://compute.googleapis.com/compute/alpha/projects/PROJECT_ID/global/globalFrontendSettings"

Replace PROJECT_ID with the ID of the project in which you want to disable Global Front End Enterprise.

Wait a few moments, and then view the enablement status of Global Front End Enterprise to confirm.

What's next