-
Cloud VPN
- Securely connects on-premises network to Google Cloud VPC network through an IPsec VPN tunnel. Traffic is encrypted by one VPN gateway , then decrypted by the other VPN gateway
-
Key features
- Useful for low-volume data connections
- 99.9% SLA
-
Supports
- Site-to-site VPN
- Static routes
- Dynamic routes (Cloud Router)
- IKEv1 and IKEv2 ciphers
-
HA VPN
- Is a high availability Cloud VPN solution that securely connects on-premises network to VPC network through an IPsec VPN connection in a single region
-
Key features
- Provides 99.99% service availability
-
Google Cloud automatically chooses two external IP addresses
- Supports multiple tunnels
- VPN tunnels connected to HA VPN gateways must use dynamic (BGP) routing
-
Supports site-to-site VPN for different topologies/configuration scenarios
- An HA VPN gateway to peer VPN devices
- An HA VPN gateway to an AWS virtual private gateway
- Two HA VPN gateways connected to each other
-
Cloud Interconnect
-
Dedicated Interconnect
- Provides direct physical connections between on-premises network and Google's network
- Connection in colocation facilities
- Layer 2 connection (VLANs)
- BGP sessions between the Cloud Router and the on-premises router
- 99.9% or 99.99% uptime SLA
- Capacity of 10 Gbps or 100 Gbps per link
-
Partner Interconnect
- Provides connectivity between on-premises network and VPC network through a supported service provider
- Layer 2 connection (VLANs)
- Layer 3 connection
- BGP sessions between the Cloud Router and the on-premises router
- 99.9% or 99.99% uptime SLA
- Capacity of 50 Mbps to 10 Gbps per connection
-
Cross-Cloud Interconnect
- Establishes high-bandwidth dedicated connectivity between Google Cloud and another cloud service provider
-
Supported Cloud service provider
- AWS
- Microsoft Azure
- Oracle Cloud Infrastructure (OCI)
- Alibaba Cloud
- Capacity of 10 Gbps or 100 Gbps
- 99.9% or 99.99% uptime SLA
-
Cloud Peering
-
Direct Peering
- Provides a direct connection between business network and Google's through Edge network locations
- Edge Points of Presence (PoPs) are where Google's network connects to the rest of the internet via peering
- No SLA
- Exchange BGP routes
- Reach all of Google's services
- Peering requirements
- Capacity of 10 Gbps per link
-
Direct Peering
- Provides connectivity through a supported partner
- Reach all of Google's services
- Partner requirements
- No SLA
-
Shared VPC
- Allows an Organization to connect resources from multiple projects to a common VPC network
- Resources communicates with each other using internal IPs
-
Use
- Within the same organization
- Across projects
-
VPC Peering
- Allows private RFC 1918 connectivity across two VCP networks, regardless of whether they belong to the same project or the same organization
-
Use
- Across organizations
- Within projects