[Yandex Cloud documentation](../../../index.md) > [Security in Yandex Cloud](../../index.md) > [Tutorials](../index.md) > Secure virtual environment configuration > Migrating services from an NLB with VMs as targets to an L7 ALB

# Migrating services from an NLB with VMs as targets to an L7 ALB


You can migrate the load from a [Yandex Network Load Balancer](../../../network-load-balancer/index.md) load balancer to a [Yandex Application Load Balancer](../../../application-load-balancer/index.md) L7 load balancer. In a network load balancer, incoming traffic is distributed among the VMs specified in this load balancer's target groups.

During the migration process, the L7 load balancer will have a [Yandex Smart Web Security](../../../smartwebsecurity/index.md) security profile connected to it. An L7 load balancer with a connected security profile operates as follows:

![image](../../../_assets/tutorials/security/nlb-with-target-resource-vm.svg)

You can create a service migration infrastructure using the following tools: