As a best practice, run SSL everywhere. With HTTPS and SSL proxy load balancing, you can use managed certs — Google takes care of the provisioning and managing of the SSL certificate life cycle.

• Cloud Load Balancing supports multiple SSL certificates, enabling you to serve multiple domains using the same load balancer IP address and port.
• It absorbs and dissipates Layer 3 and Layer 4 volumetric attacks across Google’s global load-balancing infrastructure.
• Additionally, with Cloud Armor, you can protect against Layer 3–Layer 7 application-level attacks.
• By using Identity-Aware Proxy and firewalls, you can authenticate and authorize access to backend services.