Author Archives: anuj - Page 31
Picking the right region for your cloud workload
Why would your data not reside closest to the end user? Cost - Often, regional compute costs (international regions) outweigh other factors GDPR and Data Sovereignty Laws (Data cannot persist…
SAP Hana on GCP – Memory Optimized Instances
For applications that require terabytes of RAM, GCP's memory optimized machine types are suitable. SAP Hana is a good example of such an application. sap hana on gcpv Need…
Jenkins Certified by Bitnami and GCP Deployment Manager
From the Marketplace, search for --> Jenkins Certified by Bitnami This deployment happens via the Cloud Deployment Manager (shows up under deployments) Jenkins that can perform tasks such as running…
Multi Zone and Multi Region Deployments in GCP (and their Egress charges on GCP)
Also read IP Addressing in GCP and Firewall Rules in GCP Zones and Regions A subnet in GCP can span across multiple zones and multiple regions. When you deploy VMs…
SSL Proxy and HTTPs Load Balancer Health Checks on GCP
Also read HTTPs Load Balancer on GCP Public Facing Instances? Always put a load balancer for any public facing asset. And the backend for the load balancer can be SSL…
Why not have a single shared VPC for PROD and NON PROD
Shared VPC - Per Environment? The Shared VPC will contain part of your application resources within subnets. Say you use a PROD and a PREPROD subnet within the shared VPC…
Vulnerability Scanning in GCP
Some Tools that can be used within GCP for OS Level Security Scans Top Level Tool - Security Command Center (Premium Tier) This is where you will see any alerts…
Aqua Security – Vulnerability Management for Cloud Native Workloads
Aqua security product (agents) For deeper security scanning of cloud native (containerized) workloads, try this tool. Does it scan hosts as well? Yes - it has Docker Image Scans as…
VPC Endpoints in AWS and Private Google Access in GCP
Also read - Private Subnets in GCP and Azure Private Links versus Private Endpoints How does a compute instance access public PaaS services ( a storage bucket or a cloud…
Subnet to Subnet Routes and Routing Tables in GCP
(Also read, Routing across a peered VPC in GCP ) Routes belong to a project (actually, to a network that belongs to a project) The first thing to understand is…