Book Image

Google Cloud Platform for Architects

By : Vitthal Srinivasan, Loonycorn , Judy Raj
Book Image

Google Cloud Platform for Architects

By: Vitthal Srinivasan, Loonycorn , Judy Raj

Overview of this book

Using a public cloud platform was considered risky a decade ago, and unconventional even just a few years ago. Today, however, use of the public cloud is completely mainstream - the norm, rather than the exception. Several leading technology firms, including Google, have built sophisticated cloud platforms, and are locked in a fierce competition for market share. The main goal of this book is to enable you to get the best out of the GCP, and to use it with confidence and competence. You will learn why cloud architectures take the forms that they do, and this will help you become a skilled high-level cloud architect. You will also learn how individual cloud services are configured and used, so that you are never intimidated at having to build it yourself. You will also learn the right way and the right situation in which to use the important GCP services. By the end of this book, you will be able to make the most out of Google Cloud Platform design.
Table of Contents (19 chapters)
13
Logging and Monitoring

Working with firewall rules

We have already discussed the idea that a VPC is effectively a distributed firewall; it enforces rules and monitors the flow of network traffic. These are the characteristics for the firewall rules:

  • The rules defined for one VPC don't apply to others
  • They only support IPv4 traffic, so addresses are also IPv4 only
  • The only possible actions for firewall rules are allow and deny for ingress or egress
  • Firewalls cannot allow traffic in one direction while denying it in the other
  • The number of tracked connections vary with machine type

Any firewall rule component will contain direction of traffic, action, protocol, and a numerical value for priority. Priority can range from 0 (the most important) to 65535 (the least important).

Let's see how to create and manage custom firewall rules:

  1. To create a firewall rule, you need to provide information...