GCP Networkng Flashcards
How can I monitor the traffic on the VPC network to see where packets are coming from?
Enabling flow logs.
What is the largest network space you can have in a GC VPC?
/8
Will the CloudFirewall block traffic between instances in the same network?
Yes as the FW rules are applied at the instance level. and at the virtual network level.
Will the CloudFirewall block traffic coming into the network?
Yes as the firewall rules are applied at the virtual network and instance level.
When you create a GCP network (VPC), will this network (VPC) span more then a single region?
Yes, when you create a network (VPC), it spans every region.
Is a GCP network (VPC) able to span projects?
No
What is an external IP?
It is an IP address available externally and is assigned to the instances network interface.
By default the external IP address is ephemeral, what dose this mean?
It means the external IP address is given an public IP from the GCP global IP pool and this IP is put back in the pool once the instance is rebooted.
I have an external IP that is ephemeral when I stop and start my instance, is the external IP returned to the GCP global pool and do i get a new one on restart?
Yes, the address is returned to the pool and you get a new one once the VM is restarted.
What are the two different types of static IP you can reserve?
regional for assigning to a instance and global that can be assigned to a load balancer.
When I create firewall rule, can I apply the rule to the entire VPC (global network) ?
Yes, the rule will span the entire global VPC network.
When I create firewall rule, can I apply the rule to a group of instances?
Yes, you can match the rule based on tags
Is network load balancing regional or global?
The network load balancer is regional or multi-region.
What are the two types of IP addresses in GCP?
Static and ephemeral
An instance can only use a static IP that has been reserved in the same?
Region
What is cloud interconnect?
It refers to the 3 options to connect you on-prem to GC.
What options do you have to connect from on-prem to GCP.
Cloud VPN
Peering
Dedicated interconnect
What is Dedicated interconnect?
you connect with google’s network at a colocation, this is an expensive option but supports upto 80 GBper sec, a single link is 10GB at a cost of 1700 per month.
I need 50GB bandwidth to google, what is my best option?
Dedicated interconect, this is where you connect to a colocation, colocation has a CP peering edge.
With Dedicated interconnect, do you pay egress fees?
Yes, but at a discount, upto 50%
With Dedicated interconenct can I have it connect to my VPC or Google over all for say G-Suit?
Direct interconnect only supports connecting to a VPC.
What is Peering?
Peering connects you with google network so you can call the google API and services.
Will peering connect to the internet
No
What is the peering speed?
10GB
What speed is supported by cloud VPN?
1.5GB
When using CloudVPN, what options do I have to make it faster?
Use a second VPN
For CloudVPN what is the protocal?
IPSEC
For CloudVPN what key exchange is suported?
IKE1v1 and IKEv2
With CloudVPN, is client to site supported?
No
With CloudVPN is dynamic routs supported?
Yes use CloudRouter
For CloudVPN what is the SLA?
99.9%
Is a VPC a global or regional resource?
Global