π’ Traditional Corporate Datacenter (Analogy)
- Users access applications (like www.google.com) hosted in the datacenter via the internet.
- Direct server access is blocked (Web/App/DB servers stay private).
- Network/System Admins can access servers using the corporate private network from different office locations.
π In Google Cloud, the equivalent of this private corporate network is VPC (Virtual Private Cloud).
π Key Features of Google Cloud VPC
- Private Network in Google Cloud.
- Global resource β not tied to a specific region or zone.
- VPC resources like routes & firewalls are also global.
- Isolation & Security β You can logically isolate networks and control who can access.
- Resources (VMs, databases, etc.) created inside VPC are protected from unauthorized access.
π Google Cloud VPC β Subnets
- Subnets are regional resources (not global).
- A subnet can span multiple zones in one region (β‘ different from AWS where subnets are tied to a single zone).
- Each subnet has its own IP range (e.g., 10.128.0.0/20).
- A VPC needs at least one subnet before you can deploy resources.
βοΈ Google Cloud VPC β Modes
1οΈβ£ Auto-Mode VPC
- Google automatically creates one subnet per region.
- Every new project comes with a default auto-mode VPC.
- Subnets are predefined with IP ranges.
- As new regions are launched, new subnets get added automatically.
- Supports IPv4 only.
π Good for testing & learning, not recommended for production.
2οΈβ£ Custom-Mode VPC
- You manually create subnets.
- You define your own IP ranges.
- Supports IPv4 or dual-stack (IPv4 + IPv6).
- Recommended for all workloads (from Dev β Prod).
Top comments (0)