Základní info
This training course builds on the networking concepts covered in the Networking Fundamentals in Google Cloud course. Through presentations, demonstrations, and labs, participants explore and deploy Google Cloud networking technologies. These technologies include: Virtual Private Cloud (VPC) networks, subnets, and firewalls; Interconnection among networks; Load balancing ;Cloud DNS; Cloud CDN; Cloud NAT. The course will also cover common network design patterns.
What you'll learn
- Configure VPC networks, subnets, and routers.
- Control administrative access to VPC objects.
- Control network access to endpoints in VPCs.
- Interconnect networks among Google Cloud projects.
- Implement network connectivity between Google Cloud projects.
- Implement load balancing.
- Configure traffic management among load balancer backend services.
- Use Cloud CDN to reduce latency.
- Optimize network spend using Network Service Tiers.
- Configure private connection options to provide access to external resources and services from internal networks.
Target Audience
- Network engineers and administrators who use the Google Cloud console or are planning to do so.
- Individuals who want to be exposed to software-defined networking solutions in the cloud.
Prerequisites
- Having completed the Google Cloud Fundamentals: Core Infrastructure course or having equivalent experience.
- Prior understanding of the 7 layer OSI model.
- Prior understanding of IPv4 addressing.
- Prior experience with managing IPv4 routes.
Course Modules
VPC Networking Fundamentals
- VPC networks
- Multiple Network Interfaces
- Network Service Tiers
Sharing VPC Networks
- Shared VPC
- VPC Network Peering
- Migrating a VM between networks
Network Monitoring and Logging
Network Routing and Addressing in Google Cloud
- VPC Routing
- IPv6
- BYOIP
- Cloud DNS
Private Connection Options
- Private Connection Options
- Private Google Access
- Private Services Access
- Private Service Connect
- Cloud NAT
Introduction to Network Architecture
- Cloud network architecture overview
- Key considerations
Network Topologies
- Hub and spoke topology
- Other topologies
- Getting topology data
- Best practices
Distributed Denial of Service (DDoS) Protection
- How DDoS attacks work
- Google Cloud mitigations
- Types of complementary partner products
Controlling Access to VPC Networks
- IAM
- Cloud Firewall
- Cloud IDS
- Secure Web Proxy
Advanced Security Monitoring and Analysis
- Packet Mirroring for network traffic inspection
- Network security best practices
Hybrid Load Balancing and Traffic Management
- Hybrid load balancing
- Traffic management
Caching and Optimizing Load Balancing
- Internal network load balancers as next hops
- Cloud CDN
- Cloud Armor
- Load balancer optimization strategies
Connectivity options
- Google Cloud connectivity options
- Dedicated Interconnect
- Partner Interconnect
- Cross-Cloud Interconnect
Cloud VPN
- Use case for Cloud VPN
- HA VPN topologies
- HA VPN over Cloud Interconnect
- Influence best path selection
