Professional Cloud Security EngineerConfiguring network securityHard
A company is deploying a highly sensitive application in Google Cloud that requires extremely low latency and high throughput for communication between its microservices, which are deployed across different VPC networks within the same Google Cloud region. Direct peering is not sufficient due to the need for granular traffic control and service-level access management. The solution must also support private IP connectivity without traversing the public internet. Which Google Cloud networking service should be used?
- ACloud VPN
- BPrivate Service Connect (for published services)
- CShared VPC
- DVPC Network Peering
Show answer & explanationAnswer & explanation
Correct answer: B. Private Service Connect (for published services)
Private Service Connect allows service producers to publish services to consumers in different VPC networks using private IP addresses. It provides granular access control at the service level, enabling consumers to connect privately to published services with high throughput and low latency, without using VPC Network Peering or traversing the public internet.
Why the other options are wrong
- A. Cloud VPN is for hybrid connectivity or connecting VPCs over the public internet (VPN over public internet) or between regions, not for high-throughput, low-latency private IP communication within the same region between separate VPCs for service consumption.
- C. Shared VPC allows multiple projects to share a single host VPC, which doesn't address communication between entirely separate VPC networks with granular service control.
- D. VPC Network Peering provides connectivity but lacks granular service-level access control and can lead to transitive peering issues in complex environments.
Private Service Connect (Published Services)
Google Cloud service enabling service producers to publish services to consumers in different VPC networks using private IP addresses.
- Provides private connectivity between VPC networks for service consumption
- Offers granular control over service access (consumer projects/networks)
- Supports high throughput and low latency, without traversing the public internet
Memory trick: Connect services privately, fast, and controlled.