A gaming company runs a stateful multiplayer backend on a managed instance group behind an external passthrough Network Load Balancer (regional). During autoscaling scale-in events and rolling updates, players frequently report abrupt disconnections mid-session because active TCP connections to backends being removed are terminated immediately. The team wants to allow existing TCP connections to complete gracefully (up to 5 minutes) while preventing new connections from reaching instances being removed. Which configuration should they apply?