Multi Zone and Multi Region Deployments in GCP (and their Egress charges on GCP)
Also read IP Addressing in GCP and Firewall Rules in GCP Zones and Regions A subnet in GCP can span across multiple zones and multiple regions. When you…
Insights
Blog
SSL Proxy and HTTPs Load Balancer Health Checks on GCP
Also read HTTPs Load Balancer on GCP Public Facing Instances? Always put a load balancer for any public facing asset. And the backend for the load balancer can…
Why not have a single shared VPC for PROD and NON PROD
Shared VPC – Per Environment? The Shared VPC will contain part of your application resources within subnets. Say you use a PROD and a PREPROD subnet within the…
Vulnerability Scanning in GCP
Some Tools that can be used within GCP for OS Level Security Scans Top Level Tool – Security Command Center (Premium Tier) This is where you will see…
Aqua Security – Vulnerability Management for Cloud Native Workloads
Aqua security product (agents) For deeper security scanning of cloud native (containerized) workloads, try this tool. Does it scan hosts as well? Yes – it has Docker Image…
VPC Endpoints in AWS and Private Google Access in GCP
Also read – Private Subnets in GCP and Azure Private Links versus Private Endpoints How does a compute instance access public PaaS services (e.g. a storage bucket or…
Subnet to Subnet Routes and Routing Tables in GCP
(Also read, Routing across a peered VPC in GCP ) Routes belong to a project (actually, to a network that belongs to a project) The first thing to…
Peered VPCs in GCP and Exchanging of Routes (Automatic Routes Exchange)
How does GCP Routing work for a peered VPC? A router is part of the peering connection. A router gets spun up by default, which allows route exchange.…
Why does a Second Network Interface get its own VPC in GCP
Why does a second network interface require a separate VPC (subnet in a separate VPC) to attach to? The reason has to do partly with the way routes…
Fewer Subnets with Larger Address Spaces – Best Practices for VPC Subnetting in GCP
Subnets and Routes work differently in GCP, partly due to the global nature of GCP VPCs. Group applications into fewer subnets with larger address ranges Unlike other networking…