Google Cloud Certified Professional Cloud Network Engineer Guide: Design, implement, manage, and secure a network architecture in Google Cloud

✍ Scribed by Maurizio Ipsale, Mirko Gilioli

• Publisher: Packt Publishing
• Year: 2022
• Tongue: English
• Leaves: 406
• Category: Library

✦ Synopsis

Gain practical skills to design, deploy, and manage networks on Google Cloud and prepare to gain Professional Cloud Network Engineer certification

Key Features

• Gain hands-on experience in implementing VPCs, hybrid connectivity, network services, and security
• Establish a secure network architecture by learning security best practices
• Leverage this comprehensive guide to gain Professional Cloud Network Engineer certification

Book Description

Google Cloud, the public cloud platform from Google, has a variety of networking options, which are instrumental in managing a networking architecture. This book will give you hands-on experience of implementing and securing networks in Google Cloud Platform (GCP).

You will understand the basics of Google Cloud infrastructure and learn to design, plan, and prototype a network on GCP. After implementing a Virtual Private Cloud (VPC), you will configure network services and implement hybrid connectivity. Later, the book focuses on security, which forms an important aspect of a network. You will also get to grips with network security and learn to manage and monitor network operations in GCP. Finally, you will learn to optimize network resources and delve into advanced networking. The book also helps you to reinforce your knowledge with the help of mock tests featuring exam-like questions.

By the end of this book, you will have gained a complete understanding of networking in Google Cloud and learned everything you need to pass the certification exam.

What you will learn

• Understand the fundamentals of Google Cloud architecture
• Implement and manage network architectures in Google Cloud Platform
• Get up to speed with VPCs and configure VPC networks, subnets, and routers
• Understand the command line interface and GCP console for networking
• Get to grips with logging and monitoring to troubleshoot network and security
• Use the knowledge you gain to implement advanced networks on GCP

Who this book is for

This Google Cloud certification book is for cloud network engineers, cloud architects, cloud engineers, administrators, and anyone who is looking to design, implement, and manage network architectures in Google Cloud Platform. You can use this book as a guide for passing the Professional Cloud Network Engineer certification exam. You need to have at least a year of experience in Google Cloud, basic enterprise-level network design experience, and a fundamental understanding of Cloud Shell to get started with this book.

Table of Contents

1. Google Cloud Platform Infrastructure
2. Designing, Planning, and Prototyping a GCP Network
3. Implementing a GCP Virtual Private Cloud (VPC)
4. Configuring Network Services in GCP
5. Implementing Hybrid Connectivity in GCP
6. Implementing Network Security
7. Managing and Monitoring Network Operations
8. Advanced Networking in Google Cloud Platform
9. Professional Cloud Network Engineer Certification Preparation

✦ Table of Contents

Cover
Title Page
Copyright and credits
Dedication
Contributors
About the reviewer
Table of Contents
Preface
Section 1: Network Infrastructure
Chapter 1: Google Cloud Platform Infrastructure
Introducing cloud computing and virtualization
What is cloud computing?
What is virtualization?
Introducing GCP
GCP's global infrastructure – regions and zones
Projects, billing, and quotas
Getting started with GCP
GCP resource hierarchy
Interacting with GCP
Understanding virtual machines in the cloud
Google Compute Engine
VPC overview
Overview of Load Balancing, DNS, and CDN
Exploring containers in the cloud
DevOps concepts and microservice architectures
Containerization versus virtualization
Container orchestration with Google Kubernetes Engine
Summary
Further reading
Chapter 2: Designing, Planning, and Prototyping a GCP Network
Technical requirements
Designing the overall network architecture
Failover and DR strategy
Options for HA
DNS strategy in a hybrid cloud environment
Choosing an appropriate load-balancing option
Optimizing for latency (for example, maximum transmission unit (MTU) size; caches; content delivery network (CDN))
Network security design strategy
Designing a VPC
CIDR range for subnets
IP addressing
Routes
Shared VPC versus VPC Network Peering
Firewall rules
Designing a hybrid network
Cloud Interconnect design (for example, Dedicated versus Partner)
Peering options (Direct versus Carrier)
IPsec VPN
Cloud Router
Failover and DR strategy (for example, building HA with BGP using Cloud Router)
Designing a container IP addressing plan for GKE
Creating scalable GKE clusters
IP address planning in GKE
Network security design in GKE
Summary
Chapter 3: Implementing a GCP Virtual Private Cloud (VPC)
Technical requirements
Configuring VPC networks
Configuring VPC resources in GCP
SSH and ICMP protocols
Configuring static and dynamic routing with Cloud Router
Configuring VPC peering
Configuring Shared VPC
Configuring NAT in Google Cloud
Configuring and managing firewall rules
Section 2: Network Services and Security
Chapter 4: Configuring Network Services in GCP
Configuring load balancing
HTTP(S) Global Load Balancing
Internal load balancing
Configuring Cloud Content Delivery Network (CDN)
Summary
Chapter 5: Implementing Hybrid Connectivity in GCP
Technical requirements
Configuring Interconnect
Dedicated Interconnect connection option
Partner Interconnect connection option
Configuring a site-to-site IPsec VPN
Route-based VPN
HA VPN
Diving into Cloud Router
Cloud Router configuration
Static external IP address
MED
Summary
Chapter 6: Implementing Network Security
Configuring Identity and Access Management (IAM)
Configuring Cloud Armor security policies
Configuring a third-party software device (NGFW) insertion into VPC using multiple NICs
Configuring networking and security for a third-party virtual appliance
Implementing third-party virtual appliances (Compute Engine instances) in a shared VPC environment
Implementing routes and firewall rules in a multi-NIC environment
Summary
Section 3: Network Operations, Management, and Monitoring
Chapter 7: Managing and Monitoring Network Operations
Logging and monitoring with GCP operations
VPC Flow Logs
Firewall Rules Logging
VPC audit logs
Packet Mirroring
Summary
Chapter 8: Advanced Networking in Google Cloud Platform
Google Cloud Traffic Director
Understanding Istio and the service mesh
Understanding Traffic Director
Configuring Traffic Director
Configuring the Google Cloud Service Directory
Understanding Service Directory and features
Configuring Service Directory and DNS
Building hub and spoke networks with Network Connectivity Center
Understanding Network Connectivity Center in Google Cloud Platform
Configuring Network Connectivity Center as a transit hub
Summary
Chapter 9: Professional Cloud Network Engineer Certification Preparation
Other Books You May Enjoy
Index