Google Cloud
Google Cloud load balancer TLS behavior depends on the load balancer type and supported SSL-policy configuration. Google’s consumer services are not evidence for every customer deployment.
Evidence to collect
- Record the target proxy, frontend hostname, and SSL policy.
- Consult the policy’s supported features and the product’s current documentation.
- Check frontend negotiation and backend TLS independently; a minimum TLS version does not specify a post-quantum group.
Record the scope and result
Record the tested component, client, peer, protocol, selected algorithm, and date. Keep observed negotiation, documented capability, and unknown distinct. A failed check can reflect local tooling, certificate validation, network policy, or configuration; it does not prove that all PQC is unsupported.
Official references
Guidance reviewed 24 September 2026. Verify documentation for your deployed release; vendor capabilities and defaults change.