Application Load Balancer (ALB) supports load balancing for Google Remote Procedure Call (gRPC) services. gRPC supports only frontend encryption and backend plaintext. This topic describes how to configure a gRPC server group on an ALB instance, configure an HTTPS listener, enable HTTP/2.0, and configure health checks for the ALB instance to forward gRPC requests to the gRPC server group.
Scenario
The following scenario is used as an example in this topic. A company deployed a gRPC
service in a virtual private cloud (VPC) that is deployed in the China (Hangzhou)
region. An ALB instance and a gRPC server group are deployed in the VPC. On the ALB instance, an
HTTPS listener is configured, HTTP/2.0 is enabled, and gRPC health checks are configured.
The company wants to use the ALB instance to forward gRPC requests from clients in the China (Hangzhou) region to
the gRPC service in the VPC. 

Prerequisites
- A VPC is created in the China (Hangzhou) region. A vSwitch is deployed in each of Zone H and Zone I. For more information, see Create a VPC and a vSwitch.
- Required certificates are deployed. If the certificates are purchased from a third-party service provider, you must upload them to Certificate Management Service. In addition, make sure that the certificates are associated with your domain name. For more information about how to apply for a certificate, see Submit a certificate application.
- An Elastic Compute Service (ECS) instance is deployed in the VPC. A gRPC service is
deployed on the ECS instance. Another ECS instance that serves as a client is deployed
in the region to send requests to the backend server. For more information, see Create an instance by using the wizard.
Note
- For more information about how to deploy a gRPC service on an ECS instance, see the gRPC documentation.
- Make sure that the ECS instances in the VPC and the ALB instance are deployed in the same region. In addition, make sure that the ALB instance and the ECS instances belong to the same VPC.
- Make sure that the zones of the ECS instances are included in the zones of the ALB instance.
Procedure

Step 1: Create an ALB instance
Step 2: Create a server group and add backend servers to the server group
Step 3: Configure a listener
Step 4: Test network connectivity
After you complete the preceding steps, the ALB instance allows the ECS instance that
serves as a client to access the ECS instance that serves as a backend server where
the gRPC service is deployed. The following procedure shows how to test the connectivity
between the client and the gRPC service:
- Remotely log on to the ECS instance that serves as a client. For more information, see Guidelines on ECS instance connection.
- Run the following command on the ECS instance to access the other ECS instance, which
is deployed in the VPC:
The following figure shows the echo reply packet, which indicates that the client can access the gRPC service through the ALB instance.grpcurl -insecure -v [ALB domain name]:[listening port] helloworld.Greeter/SayHello