Cloudflare → GCP → GKE Ingress Architecture
1. Purpose
2. End-to-End Traffic Flow Overview
3. Cloudflare Architecture
Responsibilities
Certificate Handling
4. GCP Network Load Balancer
Characteristics
Why NLB
5. GKE Cluster
Cluster Layout
Networking
6. nginx-ingress Controller
Responsibilities
Certificate Flow
Additional Features
7. TLS Architecture
7.1 Client → Cloudflare
7.2 Cloudflare → GKE (via NLB)
8. Ingress Routing Model
Typical Patterns
Example
How the routing happens
9. Security Model
Security Layers
10. Multi-Tenancy & Operational Structure
Cluster-Level Isolation
Namespace Structure
Operational Model
11. Out of Scope
See also
