← Knowledge base

Google Cloud

Google Cloud load balancer TLS behavior depends on the load balancer type and supported SSL-policy configuration. Google’s consumer services are not evidence for every customer deployment.

Evidence to collect

  1. Record the target proxy, frontend hostname, and SSL policy.
  2. Consult the policy’s supported features and the product’s current documentation.
  3. Check frontend negotiation and backend TLS independently; a minimum TLS version does not specify a post-quantum group.

Record the scope and result

Record the tested component, client, peer, protocol, selected algorithm, and date. Keep observed negotiation, documented capability, and unknown distinct. A failed check can reflect local tooling, certificate validation, network policy, or configuration; it does not prove that all PQC is unsupported.

Official references

Guidance reviewed 24 September 2026. Verify documentation for your deployed release; vendor capabilities and defaults change.