GCP - Google Cloud Professional Cloud Network Engineer

Learn the basics of Google Cloud Platform, including regions, projects, and console navigation. Create a free trial account and start exploring networking resources with Google Cloud Shell.

Create a Google Cloud free trial account with a Google account, verify billing, and access $300 credit for 3 months to start your first project.

Explore the Google Cloud Console in a hands-on walkthrough, create and manage projects, monitor service status and logs, and navigate networking, Compute Engine, Dataflow, and Cloud Shell tools.

Explore how GCP regions and zones organize data centers for high availability and disaster recovery, and how multi region deployments reduce latency for global users.

Create a new GCP project, set it as the active project, and verify billing to enable resource creation within the Google Cloud Platform.

Open Google Cloud Shell to access a browser-based VM with pre-installed tools, free up to 50 hours per week, and edit code in a built-in editor.

Explore the basics of networking from home networks and routers to the public internet, and see how devices reach websites using IP addressing and carrier ranges.

Explain how IP addresses uniquely identify internet devices, compare IPv4’s 32-bit format with four numbers separated by dots to IPv6’s 128-bit space, and show how to find your own address.

Explore cidr notation to represent multiple ip addresses with a base address and a slash prefix, fixing bits while varying others, using examples like 24, 28, 31, and 32.

Explore how RFC 1918 private IP addresses behind firewalls use classic class b and class c ranges, guiding subnet creation in Google Cloud VPC.

Explore how a global VPC forms a software-defined cloud network with regional subnets for IP assignment and resource segregation, including firewalls and default VPC implications for compute engine resources.

Explore the default VPC in Google Cloud, including how enabling the Compute Engine API auto-creates a default VPC with regional subnets, IP ranges, and firewall rules for Compute Engine resources.

Learn how to skip the default VPC creation in Google Cloud by disabling the default network via organization-level policies, preventing automatic VPC creation when you enable Compute Engine.

Create a virtual machine using the default VPC, where subnets are available in every region, and follow a quick CLI walkthrough of network interfaces and IP ranges.

Explore why the default VPC is risky for organizations, and learn to build a custom VPC with selective regional subnets, precise firewall rules, and private IP ranges starting at 10.

Explain how a /24 subnet reserves four IP addresses for network, gateway, and broadcast, leaving usable addresses for hosts, and how Google Cloud assigns the next IP to new VMs.

Explore default VPC, auto mode VPC, and custom VPC types in Google Cloud, comparing automatic subnet creation with manual subnet design across selected regions.

Create a default VPC in auto mode by enabling automatic subnet creation across all regions, then review the default auto network and its firewall settings.

Create a custom VPC with two subnets in Mumbai and Singapore, using 192.168.0.0/24. Compare it with the default VPC.

Create a virtual machine in a custom VPC by selecting a region with an available subnet, such as Mumbai or Singapore, instead of the default network.

Add multiple subnets to an existing VPC by selecting regions and non-overlapping IP ranges, enabling deployment of VMs in Singapore, Mumbai, and Iowa.

Demonstrates creating a custom GCP subnet with a /29 range, reserving IP addresses, and assigning internal IPs to multiple VMs while observing the subnet's IP limit.

Explore vm-to-vm communication across projects and regions with firewall rules. Learn core protocols such as icmp for diagnostics and http on port 80, and port 22 for secure access.

Explore how firewall rules control ingress and egress traffic between the public internet and your GCP VPC, including default allow egress and deny ingress, priority, and basic rule creation.

Create a firewall rule in Google Cloud for a custom VPC, configuring priority, direction, and allow actions. Test the rule using the gcloud command line across default and custom networks.

Deploy a simple apache web server on a compute engine instance and test a firewall rule, including port 80 and ssh 22, to understand ip whitelisting and connectivity propagation.

Practice establishing Veeam-to-VM communication in the same zone and same VPC by pinging internal IPs, adjusting firewall rules to allow ICMP and SSH, and verifying connectivity.

Verify vm-to-vm connectivity within a single vpc across zones in the same region using icmp ping. Configure a custom vpc subnet and firewall rules to establish and test communication.

Explore cross-region communication within a single Google Cloud VPC by connecting two VMs in different subnets, using internal IP addresses to simulate a single LAN across Singapore and US.

Test connectivity between two VMs in different VPCs and observe that cross-VPC communication fails by default, then note that VPC peering will enable it.

Explore how VPC network peering enables cross-VPC communication between virtual machines in different VPCs and projects, with teams controlling ingress and egress traffic.

Configure and test VPC peering in GCP by creating a custom VPC, launching VMs with internal IPs, and enabling private communication between two VPC networks.

Demonstrates hands-on VPC network peering in Google Cloud, establishing cross-project connections between two VPCs, verifying with ping, converting from inactive to active, and cleaning up resources.

Discover how a host project centralizes shared VPC management and lets other projects use the same VPC across organization, with 100 host projects and 100 service projects and domain attachment.

Learn to set up a shared VPC: create a host project with a custom VPC and subnets, a service project, and share the VPC with IAM permissions.

Learn to implement a shared VPC by configuring a host project to share selected subnets with service projects, assign compute network user roles, and manage networking centrally.

Define source and destination filters in firewall rules, including IP ranges, source tags, and service accounts, applying rules to specific targets with direction (ingress or egress) and protocols.

Demonstrates defining source and destination builders, and configuring firewall rules by IP ranges to control ICMP connectivity between four virtual machines in a custom VPC, using cloud shell and gcloud.

Learn to configure firewall rules using IP address ranges within a VPC, filtering by source and destination, and enabling access from cloud shell, a local machine, or the internet.

Practice configuring firewall rules for default and custom VPC networks, enabling vm connectivity across specific IP ranges and ports, and troubleshooting connectivity with ICMP and port 22.

Implement firewall rules that filter by destination tags instead of an entire network, using specific source IPs and VM tagging, and verify access to targeted virtual machines.

Configure firewall rules with source and destination tagging to control traffic between VMs, test connectivity, and note that destination filtering cannot use IP ranges, prompting service account based filtration.

Learn to configure firewall rules using service account filtering, create and assign a new service account to VMs, and test connectivity across instances within a network in Google Cloud.

Implement the second lap of service account based filtering with tag-based firewall rules between VMs, switching between default and custom service accounts, and verify connectivity using ping.

This hands-on video explains the default routing rules created when you add a subnet in a VPC, including the default internet gateway and per-subnet routes.

Expand the subnet range in a Google Cloud VPC by changing from /26 to /22. Increase available addresses from 64 to 1024 for that subnet.

Learn to configure private Google access to reach Google Cloud Storage and apps with internal IP addresses only, using a VM in a custom VPC and no external IP.

Enable Private Google Access at the subnet level to let a VM in a custom VPC access Google Cloud Storage via internal IP, without an external IP, with on/off propagation.

Learn to use private service access to connect a virtual machine to private IPs of Google-owned and third-party services within a VPC, enabling access to Cloud SQL and memory store.

Explore private service access and service networking for connecting a cloud sequel instance to a custom VPC via private IP, with ranges in Singapore and US East, and test connectivity.

Practice privately accessing cloud resources by linking virtual private clouds with private IPs, using private service access across subnets, without external IPs, in GCP.

Learn how to connect serverless environments like Cloud Function to Cloud SQL using a private internal IP with a VPC connector, enabling secure access.

Deploy and troubleshoot a serverless cloud function, debug could not handle the request errors, and use a VPC access connector to privately access an internal IP in GCP.

Explore identity aware proxy (iap) as a point of control for user access to Google Cloud resources, including App Engine and Compute Engine, with private IP address and role-based access.

Demonstrates connecting to a virtual machine with and without a public IP using IAP, showing how the IP tunnel enables SSH access to private IPs via cloud tools.

Demonstrates securing a private Compute Engine with IAP and IAM, granting a user access via Compute Engine admin and service account user roles and IP security for private IP addresses.

Deploy a simple Node.js app on Google App Engine and configure regional deployment, then prepare to secure it with Identity-Aware Proxy for authenticated access.

Demonstrates configuring identity aware proxy (IAP) access, setting up a consent screen, choosing internal or external users, and granting access with the IAP secured web app role.

This hands-on demo shows securing a private IP VM with IAP by creating a custom VPC firewall rule that restricts access to a source IP range via the IAP tunnel.