Author Archives: anuj - Page 26
Next Gen Firewalls for Cloud Hosted Resources
Also read Azure Firewall versus NSGs and GCP Firewall Policies versus VPC Firewall Rules Traffic Filtering is what Next Gen Firewalls provide ( Palo Alto). Whether you need Next Gen…
Work Functions mapped to GCP Roles
GCP has over a few thousand built in (predefined) roles for a variety of activities. (Also Read AWS Work functions mapped to policies in AWS) Organizational Level Work Functions Organization…
Private Subnets in GCP
This content is password protected. To view it please enter your password below: Password:
Firewall Rules, Firewall Policies GCP
This content is password protected. To view it please enter your password below: Password:
Content Based Routing for Load Balancers
See also HTTPs load balancer in GCP and SSL Proxy in GCP To configure URL based content separation, you need to create multiple backend Services in the Load Balancer. multiple…
Read Replica versus Failover Replica in Cloud SQL
How do I create a failover replica? Read Replicas CAN be promoted to master nodes in the case of DR. However, there is downtime entailed. Failover Replicas are designed to…
VPN versus Cloud router
What if I add new VMs in new subnets inside my on premises data center? Will the GCP VPC pick it up (assuming I have a VPN tunnel established)? No.…
gCloud projects, gCloud compute, gCloud IAM
These are some useful gCloud commands that I like to keep separate (gCloud compute, gCloud projects, gCloud IAM) - Also read Best Practices around GCP Service Accounts gCloud projects -…
IAM Bindings on Service Accounts
Also read Best Practices around GCP Service Accounts gcloud <resourceType> add-iam-policy-binding <resourceName> --member=<accountToGrantOnTheResource> --role=<roleToGrantOnTheResource> gCloud IAM gcloud iam service-accounts add-iam-policy-binding \ \ \ --role='roles/editor' gCloud projects add-iam-policy-binding add IAM policy…
SSL Proxy Load Balancer
Also read HTTPs External Load Balancer in GCP What is External SSL Proxy Load Balancing? It is primarily for SSL initiated traffic from the internet to GCP VMs. It is…