Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

By : Konrad Cłapa, Brian Gerrard
5 (1)
Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

5 (1)
By: Konrad Cłapa, Brian Gerrard

Overview of this book

Google Cloud Platform (GCP) is one of the industry leaders thanks to its array of services that can be leveraged by organizations to bring the best out of their infrastructure. This book is a comprehensive guide for learning methods to effectively utilize GCP services and help you become acquainted with the topics required to pass Google's Professional Cloud Architect certification exam. Following the Professional Cloud Architect's official exam syllabus, you'll first be introduced to the GCP. The book then covers the core services that GCP offers, such as computing and storage, and takes you through effective methods of scaling and automating your cloud infrastructure. As you progress through the chapters, you'll get to grips with containers and services and discover best practices related to the design and process. This revised second edition features new topics such as Cloud Run, Anthos, Data Fusion, Composer, and Data Catalog. By the end of this book, you'll have gained the knowledge required to take and pass the Google Cloud Certification – Professional Cloud Architect exam and become an expert in GCP services.
Table of Contents (25 chapters)
1
Section 1: Introduction to GCP
5
Section 2: Manage, Design, and Plan a Cloud Solution Architecture
14
Chapter 12: Exploring Storage and Database Options in GCP – Part 2
17
Section 3: Secure, Manage and Monitor a Google Cloud Solution
21
Section 4: Exam Focus

NAT

NAT is a service that translates source and/or destination addresses when traffic passes through a routing device. In the case of GCP, NAT allows us to hide the original IP address of our VM when communicating with external networks. In the case of GCP, it allows VMs with internal addresses to access the internet.

There are currently two options for NAT, as follows:

  • NAT gateway
  • Cloud NAT

Google recommends using Cloud NAT over NAT gateway. If you are still using NAT gateway, Google recommends that you migrate it to Cloud NAT as it is a managed and self-scaling service.

NAT gateway

Google allows us to provision a VM that will act as a NAT gateway. This way, you are exposing only one VM to the internet. The gateway machine needs to be configured with the --can-ip-forward parameter, which allows traffic forwarding. You will also need to create default routes for the subnets that should be using the gateway. As you can see, this solution does not look scalable...