CDN and Load Balancer
The Load Balancer and the CDN add a Google Cloud layer between your visitors and your server. The Load Balancer points your domain at a Google load balancer, which is where Cloud Armor runs. The CDN caches and delivers your site's content so it loads faster.
Settings › Integrations › Services, the CDN and Load Balancer cards. Available to the project's Super Admin and Admin roles. Both services apply to the production branch.
Choose between CDN and Load Balancer
The CDN and the Load Balancer both point your domain at a load balancer, so they cannot each run on their own at the same time. The only possible combination is the CDN added on an active Load Balancer.
| Setup | Possible | Note |
|---|---|---|
| Load Balancer alone | Yes | Cloud Armor can be activated. Projects on a dedicated Google Cloud server only. |
| CDN alone | Yes | The CDN has its own load balancer; Cloud Armor can be activated. |
| CDN on an active Load Balancer | Yes | The CDN is added to the existing Load Balancer. |
| CDN alone, then Load Balancer | No | Deactivate the CDN first (see below). |
The Load Balancer is only available for projects hosted on a dedicated Google Cloud server. Otherwise, activation is refused with The load balancer is only available for projects on a dedicated Google Cloud server.
Activate the Load Balancer
- Open the Load Balancer card.
- Click Activate Now. The operation runs in the background; the page updates when it is done.
- Once active, the Load Balancer is Active panel offers the Configure Cloud Armor → link to set up the firewall.

Requests sent straight to your server's IP address do not go through the load balancer, and therefore not through Cloud Armor.
Activate the CDN
- Open the CDN card.
- Click Activate Now. The operation runs in the background; the panel then shows CDN Service is Active.
If the Load Balancer is active, the CDN is added to it. Otherwise, the CDN runs on its own, with its own load balancer.
Move from a standalone CDN to a CDN on the Load Balancer
If the CDN is already active on its own, the Load Balancer's Activate Now button is disabled and a message explains what to do:
- Deactivate the CDN and wait for it to finish.
- Activate the Load Balancer and wait for it to finish.
- Activate the CDN again: it is then added to the Load Balancer.
While one of the two services is changing, the other cannot be activated (… is still changing on this project …). Wait for the current operation to finish.
Deactivate the CDN or the Load Balancer
Click Deactivate in the service panel, then confirm. If the button is not shown, contact your Karizma representative. The effect depends on your setup:
| You deactivate | Effect |
|---|---|
| The CDN (alone) | Your domain points straight back at your server. If Cloud Armor is on, it pauses until a load balancer is active again; its rules are kept. |
| The CDN (on the Load Balancer) | The CDN comes off the Load Balancer. Your domain stays on the Load Balancer and Cloud Armor keeps running. |
| The Load Balancer | Your domain points straight back at your server. The CDN running on the Load Balancer is turned off with it, and Cloud Armor pauses (rules kept). |

Once paused, Cloud Armor resumes automatically with its rules as soon as a Load Balancer or a CDN is active again. See Cloud Armor.
Change domains while the CDN is active
If you change the project's Karizma subdomain while the CDN is active, Karizma One temporarily turns the CDN off, applies the domain change, then turns the CDN back on. The production branch shows pending during the operation.
See also
- Cloud Armor to filter traffic going through the load balancer.
- Services overview for activation and purchase.