Cloud Network Engineer

Professional Cloud Network Engineer

https://cloud.google.com/certification/guides/cloud-network-engineer/

Designing, planning, and prototyping a GCP network

Designing the overall network architecture
Designing a Virtual Private Cloud (VPC)
Designing a hybrid network
Designing a container IP addressing plan for Google Kubernetes Engine

Implementing a GCP Virtual Private Cloud (VPC)

Configuring VPCs
Configuring routing
Configuring and maintaining Google Kubernetes Engine clusters
Configuring and managing firewall rules

Configuring network services

Configuring load balancing
Configuring Cloud CDN
Configuring and maintaining Cloud DNS
Enabling other network services

Implementing hybrid interconnectivity

Configuring interconnect
Configuring a site-to-site IPsec VPN
Configuring Cloud Router for reliability

Implementing network security

Configuring identity and access management (IAM)
Configuring Cloud Armor policies
Configuring third-party device insertion into VPC using multi-nic (NGFW)
Managing keys for SSH access

Managing and monitoring network operations

Logging and monitoring with Stackdriver or GCP Console
Managing and maintaining security
Maintaining and troubleshooting connectivity issues
Monitoring, maintaining, and troubleshooting latency and traffic flow

Optimizing network resources

Optimizing traffic flow
Optimizing for cost and efficiency

Courses

A Cloud Guru - Google Certified Professional Cloud Network Engineer

https://acloud.guru/learn/gcp-certified-professional-cloud-network-engineer

Coursera - Networking in Google Cloud Platform Specialization

https://www.coursera.org/specializations/networking-google-cloud-platform

Google Cloud Platform Fundamentals: Core Infrastructure https://www.coursera.org/learn/gcp-fundamentals
Networking in GCP: Defining and Implementing Networks https://www.coursera.org/learn/networking-gcp-defining-implementing-networks
Networking in GCP: Hybrid Connectivity and Network Management https://www.coursera.org/learn/networking-gcp-hybrid-connectivity-network-management

Edge Network

https://peering.google.com/#/

Our Edge Network is how we connect with ISPs to get traffic to and from users.

https://peering.google.com/#/infrastructure

Data centers, Google Cloud Platform regions

NETWORK SERVICE TIERS

https://cloud.google.com/network-tiers/

Cloud OnAir: Google Cloud Networking 101

https://youtu.be/0hN-dyOV10c

Networking is a fundamental construct for any application, however it is also a very complex concept. Join us as we discuss Google Cloud Platform Networking 101 and learn how to build scalable and secure application environments using Cloud Networking technology. Specifically we will be discussing how Google takes the foundations of application development to the next level using both legacy and new Networking technologies and concepts.

VPC https://youtu.be/0hN-dyOV10c?t=202

Private Google Access https://youtu.be/0hN-dyOV10c?t=685

Shared VPC

Interconnecting to Google Cloud

https://youtu.be/jQc9P7xA_wU

Networking is a fundamental construct for any application, however it is also a very complex concept. Join us for our Networking 102 session as we discuss the ins and outs of traffic routing within the cloud, VPC Network Peering, and the best practices therein.

VPC Peering https://youtu.be/jQc9P7xA_wU?t=1021

Reference Architecture https://youtu.be/jQc9P7xA_wU?t=1340

Links

IP Addresses

https://cloud.google.com/compute/docs/ip-addresses/

Many Google Cloud resources can have internal IP addresses and external IP addresses. Instances use these addresses to communicate with other Google Cloud resources and external systems.

Each VM instance can have one primary internal IP address, one or more secondary IP addresses, and one external IP address.

Alias IP ranges overview https://cloud.google.com/vpc/docs/alias-ip

Cloud DNS

https://cloud.google.com/dns/docs

Publish your domain names by using Google's infrastructure for production-quality, high-volume DNS services. Google's global network of anycast name servers provide reliable, low-latency, authoritative name lookups for your domains from anywhere in the world.

Cloud DNS Overview https://cloud.google.com/dns/docs/overview

DNS Overview https://cloud.google.com/dns/docs/dns-overview

Cloud Router

Routes overview https://cloud.google.com/vpc/docs/routes

Firewall

Firewall Rules Overview https://cloud.google.com/vpc/docs/firewalls

Filtering by service account versus network tag https://cloud.google.com/vpc/docs/firewalls#service-accounts-vs-tags

Firewall Rules Logging overview https://cloud.google.com/vpc/docs/firewall-rules-logging

Using firewall rules https://cloud.google.com/vpc/docs/using-firewalls

VPC

Network Overview https://cloud.google.com/vpc/docs/vpc

Network Peering

VPC Network Peering overview https://cloud.google.com/vpc/docs/vpc-peering

Using VPC Network Peering https://cloud.google.com/vpc/docs/using-vpc-peering

Private Access

Configuring Private Google Access for on-premises hosts https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid

Configuring Private Google Access https://cloud.google.com/vpc/docs/configure-private-google-access

Can I reach Google APIs through Cloud Interconnect from on premises? Which services or APIs are available?

VPN

Cloud VPN overview https://cloud.google.com/vpn/docs/concepts/overview

Terminology https://cloud.google.com/vpn/docs/concepts/overview#terms

Cloud VPN and other hybrid connectivity solutions https://cloud.google.com/vpn/docs/concepts/choosing-a-hybrid-solution

Cloud VPN only supports site-to-site IPsec VPN connectivity, subject to certain requirements. It does not support client-to-gateway (road warrior) scenarios.

Choose an interconnect type https://cloud.google.com/interconnect/docs/how-to/choose-type

Peering

Direct Peering https://cloud.google.com/interconnect/docs/how-to/direct-peering

Direct Peering allows you to establish a direct peering connection between your business network and Google's edge network and exchange high-throughput cloud traffic.

When established, Direct Peering provides a direct path from your on-premises network to Google services, including the full suite of Google Cloud products. Traffic from Google's network to your on-premises network also takes that direct path, including traffic from VPC networks in your projects.

Unless you need to access G Suite applications, using Dedicated Interconnect is recommended.

Direct Peering exists outside of Google Cloud. Instead of Direct Peering, the recommended methods of access to Google Cloud are Dedicated Interconnect or Partner Interconnect.

How to choose