A SaaS application needs path-based routing, WebSocket support, and AWS WAF protection at the regional load balancer. Which design best fits?

1. Use a Gateway Load Balancer as the HTTP application reverse proxy.
2. Use an Application Load Balancer with listener rules and a regional web ACL.
3. Use Route 53 records to select different targets for /orders and /customers.
4. Use a Network Load Balancer and put HTTP path rules in its TCP listener.