Professional Cloud ArchitectManage and provision solution infrastructureHard
A large enterprise with a complex on-premises network is migrating a critical application to Google Cloud. The application needs to communicate with several existing services in different VPC networks within the same Google Cloud project, and also with on-premises resources via a Cloud VPN tunnel. All traffic between these networks must be routed efficiently without requiring individual VPN tunnels or peering connections for each service. Which networking feature should you implement to simplify routing?
- AShared VPC
- BCloud Router
- CVPC Service Controls
- DVPC Network Peering
Show answer & explanationAnswer & explanation
Correct answer: A. Shared VPC
Shared VPC allows multiple service projects to use a common host project's VPC network, enabling centralized network management and simplified connectivity between services within different projects and to on-premises networks via a single VPN/Interconnect attached to the host project.
Why the other options are wrong
- B. Cloud Router manages dynamic routing for VPNs and Interconnects, but Shared VPC provides the underlying network structure to simplify inter-project communication.
- C. VPC Service Controls protect data exfiltration and are not a networking feature for routing between VPCs or on-premises.
- D. VPC Network Peering connects two VPCs directly but requires many-to-many connections for multiple VPCs, which is not simplified for complex scenarios.
Shared VPC
A networking feature that allows multiple projects (service projects) to connect to a common Virtual Private Cloud (VPC) network in a host project.
- Centralizes network administration and control.
- Enables communication between service projects using internal IP addresses.
- Consolidates network resources like VPNs, Interconnects, and firewalls.
- Improves security and simplifies network topology.
Memory trick: Share your VPC to simplify your network's journey.