Model Armor 可透過服務擴充功能與 Google Kubernetes Engine (GKE) 整合。服務擴充功能可讓您在網路流量處理路徑中新增自訂邏輯。流量擴充功能是特定類型的服務擴充功能,可讓您整合外部服務來處理流量。這些擴充功能可附加至各種 Google Cloud 服務,包括負載平衡器。您可以在應用程式負載平衡器上設定服務擴充功能,包括 GKE 推論閘道,篩選進出 GKE 叢集的流量。這可確保所有與 AI 模型的互動都受到 Model Armor 保護。詳情請參閱「設定流量擴充功能來呼叫 Model Armor 服務」。
運作方式
您可以在負載平衡器上設定服務擴充功能,將流量轉送至 GKE 叢集中託管的 LLM。這項設定會指定使用 Model Armor 篩選提示和回覆。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間:2025-09-05 (世界標準時間)。"],[],[],null,["| **Preview**\n|\n|\n| This feature is subject to the \"Pre-GA Offerings Terms\" in the General Service Terms section\n| of the [Service Specific Terms](/terms/service-terms#1).\n|\n| Pre-GA features are available \"as is\" and might have limited support.\n|\n| For more information, see the\n| [launch stage descriptions](/products#product-launch-stages).\n\nModel Armor can be integrated with Google Kubernetes Engine (GKE) through\n[Service Extensions](/service-extensions/docs/integration-with-google-services).\nService Extensions allow you to add custom logic to network traffic\nprocessing paths. Traffic extensions are a specific type of service extensions\nthat let you integrate external services to process traffic. These extensions\ncan be attached to various Google Cloud services, including load balancers.\nYou can configure a service extension on application load balancers, including\n[GKE inference gateways](/kubernetes-engine/docs/concepts/about-gke-inference-gateway),\nto screen traffic to and from a GKE cluster. This ensures that\nall interactions with the AI models are protected by Model Armor. For\nmore information, see [Configure a traffic extension to call a Model Armor service](/service-extensions/docs/configure-extensions-to-google-services#configure-traffic-ma).\n\nHow it works\n\n1. You configure a service extension on a load balancer that routes traffic to an LLM hosted in your GKE cluster. This configuration specifies that Model Armor should be used to screen prompts and responses.\n2. When prompts and responses reach the load balancer, the service extension calls the Model Armor service.\n3. Model Armor then applies security policies to the prompts and responses, identifying and blocking any malicious or harmful content.\n4. Only prompts and responses that pass the Model Armor checks are allowed through to the GKE cluster or back to you."]]