In this session we will look at various Networking Options. We also look at Google Cloud Monitoring and tools available in the Cloud Operations Suite.

1. We’ll be starting the session shortly!
Please keep yourself on MUTE.

2. Google Cloud Career Practitioners Session #3
Introduction to Google Cloud:
Networking, Monitoring and Operations

3. Google Cloud Career Practitioners
Campaign

4. In this session we will look at
various Networking Options. We
also look at Google Cloud
Monitoring and tools available in
the Cloud Operations Suite.
GCCP Camp Facilitator
Rupak Biswas
3rd Year, BTech
IIT Patna
Google Cloud Career Practitioner Campaign

5. Event
Agenda 10 min
1
2 GCP Networking
3 Cloud Operations
Google Network
15 min
25 min
4 Q&A
10 min

6. Your training schedule
Session 1
(1st Dec 2022)
In this session, we will
cover about Cloud
Technology in general,
GCP Overview and how
you can get started and
access GCP.
Session 4
Introduction to Docker and
Kubernetes. Overview of
Google Kubernetes Engine
(GKE).
You are here!
Session 2
(5th dec 2022)
In this session, we look at
the IaaS (Compute Engine) ,
PaaS (App Engine) , FaaS
(Cloud Functions) and CaaS
(GKE) compute offerings on
GCP. We also look at IAM
and Storage in General.
Session 3
(th Dec 2022)
Look at various Networking
Options.We also look at
Google Cloud Monitoring
and tools available in the
Cloud Operations Suite.

7. Google Network
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

8. A background to networking
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

9. Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Google Cloud
Network Edge point
of presence
Equiano
(PT, NG, ZA)
2021
Dunant
(US, FR)
2020
SJC
(JP, HK, SG)
2013
JGA-S
(GU, AU)
2019
Indigo
(SG, ID, AU)
2019
Havfrue
(US, IE, DK)
2019
Monet
(US, BR)
2017
Junior
(Rio, Santos)
2018
Tannat
(BR, UY, AR)
2018
Curie
(CL, US)
2019
Faster
(US, JP, TW)
2016
PLCN
(US, TW)
2020
Unity
(US, JP)
2010
Grace Hopper
(US, UK, ES)
2022
Network

10. Google Cloud
Networking
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

11. Allow the deployment of IaaS resources
No IP address ranges
Global
Contain subnets
VPCs are software defined network (SDN)
constructs
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

12. Internet
Region: us-west1
Zone: us-west1-a
subnet1: 10.240.0.0/24
Region: us-east1
Zone: us-east1-a
subnet2: 192.168.1.0/24
Internet Gateway
Zone: us-east1-b
subnet3: 10.2.0.0/16
VM
10.240.0.2
VM
10.240.0.3
VM
192.168.1.2
VM
192.168.1.3
VM
10.2.0.2
VM
10.2.0.3
VPC Routing
VPN Gateway
On Premises
A VPC network is a virtual version of a physical
network and is a global resource
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
VPC Network

13. Subnets are regional and extend across zones in the
same region
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Internet
Region: us-west1
Zone: us-west1-a
subnet1: 10.240.0.0/24
Region: us-east1
Zone: us-east1-a
subnet2: 192.168.1.0/24
Internet Gateway
Zone: us-east1-b
subnet3: 10.2.0.0/16
VM
10.240.0.2
VM
10.240.0.3
VM
192.168.1.2
VM
192.168.1.3
VM
10.2.0.2
VM
10.2.0.3
VPC Routing
VPN Gateway
On Premises
VPC Network

14. VPC
Network
1
VPC
Network
2
VPC
Network
3
VPC
Network
4
VPC
Network
5
us-east1
asia-east1
Google Cloud
Project
Internet
VM1
VM2 VM3 VM4
Private IP
Private IP
Public IP
Public IP
Network behavior within a project
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

15. Auto subnet mode
One subnet from each region is
automatically created
Set of predefined IP ranges
Comes with default firewall rules
Expandable up to /16 only
Good for isolated use cases (Proof of
concepts (PoCs), testing, etc.)
Custom subnet mode
No subnets are automatically created
Subnets and IP ranges are defined
No default firewalls rules
Expandable to any RFC 1918 size
Recommended for Production
environments
The differences between auto and custom networks
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

16. ● Subnets need to be configured with a private IP address range.
● IP addresses are used for internal network communication.
● Each octet is represented by 8 bits.
● The /## determines the number of address bits that are static.
10 . 0 . 0 . 0 /16
00001010 00000000 00000000 00000000
/16 freezes first two octets
A VPC is made up of subnets
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

17. Internet
Cloud External
IP Addresses
Internal IP
Allocated from subnet range to VMs
by DHCP.
DHCP lease is renewed every 24 hours.
VM name and IP is registered with
network-scoped DNS.
External IP
Can be assigned from pool (ephemeral) or
reserved (static).
Billed when not attached to a running VM.
VM doesn't know the external IP; it’s
mapped to the internal IP.
Public and Private IP address basics
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

18. Virtual Private
Cloud
Manage
networking for
resources
Cloud Load
Balancer
Worldwide
autoscaling and
load balancing
Cloud CDN
Content delivery
network
Cloud
Interconnect
Cloud DNS
Fast, high
availability
interconnect
Highly available
global DNS
network
The primary products included in Google networking
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

19. Firewalls protect virtual machine instances from
unapproved connections
● VPC network functions as a distributed
firewall.
● Firewall rules are applied to the network
as a whole.
● Connections are allowed or denied at
the instance level.
● Firewall rules are stateful.
● Implied deny all ingress and allow all
egress.
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

20. Express your desired firewall configuration as a set
of firewall rules
● Direction of the rule
● Source or destination of the
connection
● Protocol and port of the connection
● Action of the rule
● Priority of the rule
● Rule assignment
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

21. Conditions:
Destination CIDR ranges
Protocols
Ports
Action:
Allow: permit the matching egress
connection
Deny: block the matching egress
connection
External hosts
VM
Firewalls (egress)
Google Cloud Virtual
Network
Google Cloud Virtual
Network
Firewalls (egress)
VM VM
Google Cloud firewall use case: Egress
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

22. Cloud VPN securely connects an on-premises
network to a Google Cloud VPC network
● Useful for low-volume data
connections
● 99.9% SLA
● Supports:
○ Site-to-site VPN
○ Static routes
○ Dynamic routes (Cloud Router)
○ IKEv1 and IKEv2 ciphers
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

23. Cloud
Interconnect -
Dedicated
Cloud
Interconnect -
Partner
Cloud Interconnect offers two options to extend an on-
premises network to a Google Cloud VPC network
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

24. Connection Provides Capacity Requirements Access type
IPsec VPN tunnels Encrypted tunnel to
VPC networks
through the public
internet
1.5 - 3.0 Gbps per
tunnel
On-premises VPN
gateway
Internal IP addresses
Dedicated
Interconnect
Dedicated, direct
connection to VPC
networks
8 x 10 Gbps circuits,
or
2 x 100 Gbps circuits
per connection
Connection in a
colocation facility
Internal IP addresses
Partner Interconnect Dedicated
bandwidth,
connection to VPC
network through a
service provider
50 Mbps – 10 Gbps
per connection
Service provider Internal IP addresses
A comparison of interconnect options
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

25. Global
HTTP(S) load
balancing
Distributes HTTP(S) traffic among groups of instances based on:
● Proximity to the user
● Requested URL
● Both
External
SSL Proxy load
balancing
Distributes SSL traffic among groups of instances based on
proximity to the user.
TCP Proxy load
balancing
Distributes TCP traffic among groups of instances based on
proximity to the user.
Regional
Network load
balancing
● Distributes traffic among a pool of instances within a region.
● Can balance any kind of TCP/UDP traffic.
Internal load
balancing
Distributes traffic from Google Cloud virtual machine instances to
a group of instances in the same region.
Internal
Use load balancing to distribute user requests
among sets of instances
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

26. Users IAP
Identity
ERP
CRM
Using Identity-Aware Proxy (IAP)
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.

27. GCP Operations Suite
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program

28. Operations
suite
Cloud
Monitoring
Cloud
Logging
Error
Reporting
Cloud Trace
Cloud
Debugger
Cloud
Profiler
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Google Cloud's operations suite

29. Identify trends, prevent issues Reduce monitoring overhead
Improve signal-to-noise Fix problems faster
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Cloud Monitoring

30. Seamlessly resolve issues Scalable and fully managed
All cloud logs in one place Real-time insights
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Cloud Logging

31. Quickly understand errors Automatic and real-time
Instant error notification Popular languages
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Error Reporting

32. Find performance bottlenecks Fast, automatic issue detection
Broad platform support
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Cloud Trace

33. Debug in production Multiple source options
Collaborate while debugging Use your workflows
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Cloud Debugger

34. Low-impact production
profiling
Broad platform support
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Cloud Profiler

35. Thank You!