<p>I have a multi-tier app in Google Container Engine and I have a single ingress with single static IP address where I'll be forwarding multiple domains. Each domain will require its own ssl certificate(let's encrypt). The issue I am facing is that I do not see any option to use multiple certificates in the load balancer. It looks like each IP address has a single global forwarding rule that can forward to only one SSL(port 443) HTTPS proxy which can use only one SSL certificate.</p>

<p>I do not want to use multi-domain SSL certificate because it would be huge pita to manage.</p>

<p>This isn't some weird exotic use case but quite normal requirement. What is the proper solution here?</p>

<p>I was thinking of maybe setting up static IP for each domain and using routes to route to the single IP "front end", but each IP costs some money so having tens or hundreds of domains would be financially just crazy(100 domains would cost 1800 USD per month, data/traffic not included).</p>

<p>Update:
GCE now supports SNI by attaching at most 10 SSL certificates to a load balancer. You can specify the SSL certificates list with TargetHttpsProxy or TargetSslProxy.</p>

<p>Reference:
<a href="https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates#multiple_ssl_certificate_example" rel="nofollow noreferrer">https://cloud.google.com/compute/docs/load-balancing/http/ssl-certificates#multiple_ssl_certificate_example</a></p>

<p>=======================<br>
You can use network load balancer and terminate the ssl connection on your VM instances. Note that network load balancing cannot forward your traffic to different regions. If you want that, you'll need to set up them separately in different regions.</p>

<p>Reference: 
<a href="https://cloud.google.com/compute/docs/load-balancing/network/" rel="nofollow noreferrer">https://cloud.google.com/compute/docs/load-balancing/network/</a></p>
