Azure Firewall versus NSGs
Also read A Reusable Hub Spoke Network Design on Azure NSGs at instance level and at Subnet Level NSG rules can become difficult to manage in larger VNETs…
Insights
Blog
gcloud behind a corporate proxy
If you are using gcloud from behind a corporate firewall/proxy, you may encounter an SSL validation error. To disable SSL validation for google-cloud-sdk $ gcloud config set auth/disable_ssl_validation…
Incident Response in AWS
Also read Incident Response in GCP What constitutes an incident in AWS? A compromised account is an incident – as is a compromised VM. Each of these merits…
Azure Firewall versus NSGs
NSGs are layer 3 and layer 4 rules – that are also true ALLOW DENY rules, just like in any firewall appliance Azure Firewall – is Layer 3,…
Incident Response in GCP
Also read KMS specific alerting and response in GCP as an example to understand how alerts are set in GCP. What exactly constitutes an incident? In GCP, Cloud…
Agent Based Metrics
See also Custom Metrics and Log Metrics in GCP and Error Reporting in GCP What are Agent Based Metrics? These are metrics reported by the stackdriver agent installed…
Hub Spoke VPC versus Shared VPC in GCP
See also Shared VPCs – for Production and Non Production and A Reusable Hub Spoke Model in GCP. Why NOT use a Shared VPC as a HUB VPC…
At Rest Encryption GCP
Also read In Transit encryption GCP Cloud Storage? At rest encryption. Google Managed Keys (Native Google or CMEKs) or BYOK (CSEKs) Cloud SQL? Row Level Encryption What if…
Kubnernetes and GKE Basics
(This is work in progress…based on GKE docs and some quiklabs) Kubernetes only manages nodes – the nodes can be anything (VMs with Kubelet and Kube-Proxy installed) Kubernetes…
In Transit Encryption in GCP
Also read At Rest Encryption in GCP. Overview – Network Layer Automatic Encryption At the network layer, Google Cloud’s virtual network infrastructure automatically encrypts VM to VM traffic…