> For the complete documentation index, see [llms.txt](https://docs.duplocloud.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.duplocloud.com/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-7-secure-the-load-balancer.md).

# Step 7: Enable Additional Load Balancer Options (Optional)

{% hint style="warning" %}
This step is optional and unneeded for the example application in this tutorial; however, production cloud apps require an elevated level of protection.

To set up a Web Application Firewall (WAF) for a production application, follow the steps in the [Web Application Firewall procedure](/docs/automation-platform/overview/aws-services/web-application-firewall-waf.md).
{% endhint %}

In this tutorial step, for the Application Load Balancer (ALB) you created in [Step 6](/docs/automation-platform/overview/quick-start/quick-start-duplocloud-docker-services/step-6-create-loadbalancer.md), you will:

* Enable access logging to monitor [HTTP message](https://en.wikipedia.org/wiki/HTTP_message_body) details and record incoming traffic data. Access logs are crucial for analyzing traffic patterns and identifying potential threats, but they are not enabled by default. You must manually activate them in the Load Balancer settings.
* Protect against requests that contain [invalid headers](https://en.wikipedia.org/wiki/List_of_HTTP_header_fields).

*Estimated time to complete Step 7: 5 minutes.*

## Prerequisites

Before securing a Load Balancer, verify that you accomplished the tasks in the previous tutorial steps. Using the DuploCloud Portal, confirm that:

* An [Infrastructure and Plan](/docs/automation-platform/overview/quick-start/step-1-infrastructure.md) exist, both named **NONPROD**.
* The **NONPROD** infrastructure has EKS[ **Enabled**](/docs/automation-platform/overview/quick-start/step-1-infrastructure.md#check-your-work).
* A Tenant named [**dev01** has been created](/docs/automation-platform/overview/quick-start/step-2-tenant.md).
* A Host named [**host01** has been created](/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-3-create-host.md).
* A Service named [**demo-service** has been created](/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-5-create-app-via-k8s.md).
* An [Load Balancer](/docs/automation-platform/overview/quick-start/quick-start-duplocloud-docker-services/step-6-create-loadbalancer.md) has been created.

## Securing the Load Balancer

1. In the **Tenant** list box, select the **dev01** Tenant.
2. In the DuploCloud Portal, navigate to **Kubernetes** -> **Services**.
3. From the **NAME** column, select the Service (**demo-service**).
4. Select the **Load Balancers** tab.
5. In the **Other Settings** card, click **Edit**. The **Other Load Balancer Settings** pane displays.<br>

   <figure><img src="/files/eIthQrBKqxzv8Tq35jzt" alt=""><figcaption><p>The <strong>Load Balancers</strong> tab with the <strong>Other Settings Edit</strong> option highlighted</p></figcaption></figure>
6. Select the **Enable Access Logs** and **Drop Invalid Headers** options.<br>

   <div align="left"><figure><img src="/files/Chrp8wBNgZbqjHv4p6K5" alt=""><figcaption><p>The <strong>Other Load Balancer Settings</strong> pane</p></figcaption></figure></div>
7. Accept the remaining default settings and click **Save**. The settings are updated.

## Checking Your Work

1. In the **Tenant** list box, select the **dev01** Tenant.
2. In the DuploCloud Portal, navigate to **Kubernetes** -> **Services**.
3. From the **NAME** column, select the Service (**demo-service**).
4. Select the **Load Balancers** tab.
5. Verify that the **Other Settings** card contains the selections you made above for:

* **Web ACL** - `None`
* **HTTP to HTTPS Redirect** - `False`
* **Enable Access Logs** - `True`
* **Drop Invalid Headers** - `True`

<div align="left"><figure><img src="/files/vOySALCbsPPsydRZpEaf" alt="" width="375"><figcaption><p>The <strong>Other Settings</strong> card</p></figcaption></figure></div>

Enabling access logs enhances the security and monitoring capabilities of your Load Balancer and provides insights into the traffic accessing your application, for a more robust security posture.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/overview/quick-start/quick-start-eks-services/step-7-secure-the-load-balancer.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.