anchor.diff:  <% end %>
   
   
  -## <a name='add-routers'></a> Step 4: Add Routers to Load Balancer
  +## <a name='add-routers'></a> Step 4: Add Gorouters to Load Balancer
   
   <% if vars.platform_code == 'CF' %>
  -For some IaaSes such as AWS and GCP, the BOSH cloud config and deployment manifest can be used to instruct BOSH to add routers to the IaaS load balancers automatically. For others, operators must assign static IPs to the routers in the manifest and assign these IPs to the load balancers out of band.
  -
  -To automatically add load balancers to routers, the `vm_extensions` property is available in BOSH manifests. For example:
  +For some IaaSes such as AWS and GCP, the BOSH cloud config and deployment manifest can be used to instruct BOSH to add Gorouters to the IaaS load balancers automatically. For others, operators must assign static IPs to the Gorouters in the manifest and assign these IPs to the load balancers out of band.
  +
  +To automatically add load balancers to Gorouters, the `vm_extensions` property is available in BOSH manifests. For example:
   
   ```
   instance_groups:
  
positive.code:     <strong>az: z2</strong>
      cloud_properties:
        security_groups:
        - <strong>sample-<%= vars. app_runtime_abbr_lc %>-is</strong>
        # with bbl, there will also be a cf internal security group
        subnet: <strong>sample-subnet-<%= vars. app_runtime_abbr_lc %>-az2</strong>
    - range: 10.0.200.0/28
      gateway: 10.0.200.1
      reserved:
  
negative.code: 
  ### <a name='port-reference'></a> Port Reference Table
  
  To understand which protocols and ports map to which processes and manifest properties for the `is1-to-<%= vars.app_runtime_abbr_lc %>` rule above, see the table below:
  
  <table>
  <tr>
  