# Step 7: Enable Additional Load Balancer Options (Optional)

{% hint style="warning" %}
This step is optional and unneeded for the example application in this tutorial; however, production cloud apps require an elevated level of protection.

To set up a Web Application Firewall (WAF) for a production application, follow the steps in the [Web Application Firewall procedure](/docs/automation-platform/overview/aws-services/web-application-firewall-waf.md).
{% endhint %}

In this tutorial step, for the Application Load Balancer (ALB) you created in [Step 6](/docs/automation-platform/overview/quick-start/quick-start-duplocloud-docker-services/step-6-create-loadbalancer.md), you will:

* Enable access logging to monitor [HTTP message](https://en.wikipedia.org/wiki/HTTP_message_body) details and record incoming traffic data. Access logs are crucial for analyzing traffic patterns and identifying potential threats, but they are not enabled by default. You must manually activate them in the Load Balancer settings.
* Protect against requests that contain [invalid headers](https://en.wikipedia.org/wiki/List_of_HTTP_header_fields).

*Estimated time to complete Step 7: 5 minutes.*

## Prerequisites

Before securing a Load Balancer, verify that you accomplished the tasks in the previous tutorial steps. Using the DuploCloud Portal, confirm that:

* An [Infrastructure and Plan](/docs/automation-platform/overview/quick-start/step-1-infrastructure.md) exist, both named **NONPROD**.
* The **NONPROD** infrastructure has EKS[ **Enabled**](/docs/automation-platform/overview/quick-start/step-1-infrastructure.md#check-your-work).
* A Tenant named [**dev01** has been created](/docs/automation-platform/overview/quick-start/step-2-tenant.md).
* A Host named [**host01** has been created](/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-3-create-host.md).
* A Service named [**demo-service** has been created](/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-5-create-app-via-k8s.md).
* An [Load Balancer](/docs/automation-platform/overview/quick-start/quick-start-duplocloud-docker-services/step-6-create-loadbalancer.md) has been created.

## Securing the Load Balancer

1. In the **Tenant** list box, select the **dev01** Tenant.
2. In the DuploCloud Portal, navigate to **Kubernetes** -> **Services**.
3. From the **NAME** column, select the Service (**demo-service**).
4. Select the **Load Balancers** tab.
5. In the **Other Settings** card, click **Edit**. The **Other Load Balancer Settings** pane displays.<br>

   <figure><img src="/files/eIthQrBKqxzv8Tq35jzt" alt=""><figcaption><p>The <strong>Load Balancers</strong> tab with the <strong>Other Settings Edit</strong> option highlighted</p></figcaption></figure>
6. Select the **Enable Access Logs** and **Drop Invalid Headers** options.<br>

   <div align="left"><figure><img src="/files/Chrp8wBNgZbqjHv4p6K5" alt=""><figcaption><p>The <strong>Other Load Balancer Settings</strong> pane</p></figcaption></figure></div>
7. Accept the remaining default settings and click **Save**. The settings are updated.

## Checking Your Work

1. In the **Tenant** list box, select the **dev01** Tenant.
2. In the DuploCloud Portal, navigate to **Kubernetes** -> **Services**.
3. From the **NAME** column, select the Service (**demo-service**).
4. Select the **Load Balancers** tab.
5. Verify that the **Other Settings** card contains the selections you made above for:

* **Web ACL** - `None`
* **HTTP to HTTPS Redirect** - `False`
* **Enable Access Logs** - `True`
* **Drop Invalid Headers** - `True`

<div align="left"><figure><img src="/files/vOySALCbsPPsydRZpEaf" alt="" width="375"><figcaption><p>The <strong>Other Settings</strong> card</p></figcaption></figure></div>

Enabling access logs enhances the security and monitoring capabilities of your Load Balancer and provides insights into the traffic accessing your application, for a more robust security posture.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-7-secure-the-load-balancer.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.