Author Archives: anuj - Page 32
Subnet to Subnet Routes and Routing Tables in GCP
(Also read, Routing across a peered VPC in GCP ) Routes belong to a project (actually, to a network that belongs to a project) The first thing to understand is…
Peered VPCs in GCP and Exchanging of Routes (Automatic Routes Exchange)
How does GCP Routing work for a peered VPC? A router is part of the peering connection. A router gets spun up by default, which allows route exchange. Using a…
Why does a Second Network Interface get its own VPC in GCP
Why does a second network interface require a separate VPC (subnet in a separate VPC) to attach to? The reason has to do partly with the way routes are inherited…
Fewer Subnets with Larger Address Spaces – Best Practices for VPC Subnetting in GCP
Subnets and Routes work differently in GCP, partly due to the global nature of GCP VPCs. Group applications into fewer subnets with larger address ranges Unlike other networking environments in…
Native GCP Firewall and Firewall Rules
Firewalls in GCP vs AWS AWS SGs are only ALLOW rules. For DENY, you need to go to NACLs GCP full blown FW rules -allow and deny, just like on…
Egress Costs that come into play with a Transit VPC
Egress charges incur TWICE when traffic goes through a TRANSIT VPC (Regardless of AWS or GCP). This is true on both AWS and GCP. Adding additional filtering appliances introduces…
Patching versus Reloading Images
Today's Public Cloud Hosting introduces a slight twist on the data center 'patching' paradigm. Instead of patching an OS, one typically reloads the base image (AMI in AWS, base compute…
KMS Keys in a Single Project or Multiple Projects?
Also read KMS - Auditing Key Activity and KMS - Monitoring and Alerting Storing all KMS Keys in a single project has some advantages. One can tightly place IAM controls…
KMS Auditing Key Activity
Which KMS Activities are not LOGGED by default? (Also read KMS Monitoring and Alerting ) IMonitoring administrative activities vs. data access activities: All administrative KMS activities are logged by default. For…
GCP KMS Monitoring and Alerting
KMS Monitoring Example Use the gcloud logging metrics create command to create a counter metric that will monitor any occurrence of the scheduled destruction of a key version. gcloud logging…