A TCP application needs a proxy load balancer that terminates client connections and opens separate backend connections; preserving client source IP as the backend packet source is not required. Which approach best fits?

1. Allow the documented health-check probe sources to reach the backend health-check port.
2. Use a suitable proxy Network Load Balancer.
3. Enable and tune Cloud CDN cache behavior for eligible content.
4. Use a suitable internal Application Load Balancer.