-
Overview
- Google Cloud resources are hosted in multiple locations worldwide
- These locations are composed of regions with zones within those regions
- Putting resources in different zones in a region provides isolation from many types of infrastructure, hardware, and software failures
- Putting resources in different regions provides an even higher degree of failure independence.
- Design robust systems by spreading resources across different failure domains
- All Compute Engine resources are either global, regional, or zonal
- Images are a global resource, but persistent disks are either regional or zonal resources
- The scope of the resource determines how accessible the resource is to other resources
- Global resources are accessible by resources in any region or zone, so virtual machine (VM) instances from different zones can use the same global image
- Regional resources are accessible only to resources within the same region
- A regional static external IP address is accessible only by resources within the same region
- For a VM instance to use a specific static external IP, the instance must be in a zone that is in the same region as the address
- The scope of the resources indicate how accessible they are for other resources
- All resources, whether global, zonal, or regional, must be unique within the project
- Every resource in Compute Engine must be uniquely named across the project
-
Global
- Global resources are accessible by any resource in any zone within the same project
- Global resources do not need a scope specification
- Global static external IP addresses are a global resource and are used for global load balancers: HTTP(S), SSL proxy, and TCP proxy
- Images are used by any instance or disk resource in the same project as the image
- Google provides preconfigured images that can be used to boot instances
- Users can customize preconfigured images, or build their own image
- Optionally, users can share images across projects
- Persistent disk snapshots are available to all disks within the same project as the snapshot
- Optionally, users can share snapshots across projects
- An instance template can be used to create VM instances and managed instance groups
- An instance template is a global resource
- Zonal resources can be specified in an instance template, which restricts the use of that template to the location of the specified zonal resource
- A Cloud Interconnect is a highly available connection from an on-premises network to Google's network
- Interconnect attachments which run inside of this connection, are regional resources
- A Cloud Interconnect location is a physical connection point for Cloud Interconnect near the on premise network
- There is one Cloud Interconnect location for every available colocation facility and edge availability domain
- Cloud Interconnect locations are read-only, global resources
- A VPC network is a global resource, but individual subnets are regional resources
- Firewalls apply to a single VPC network and are considered a global resource because packets can reach them from other networks
- Routes are used to create complex networking scenarios
- Routes can be used to manage how traffic is routed for a specific IP range
- Routes are similar to how a router directs traffic within a local area network
- Routes apply to VPC networks within a Google Cloud project and are considered global resources
- Operations are a per-zone resource, a per-region resource, and a global resource
- If an operation is performed on a global resource, the operation is considered a global operation
- Operations are unique in that they span all three scopes: global resources, regional operations, and zonal operations
- A request to list operations returns operations across all three scopes
-
Regional
- Regional resources are accessible by any resources within the same region
- A static external IP address reserved in a specific region can only be assigned to instances within that region
- Each region also has one or more zones
- Addresses collection contains any regional static external IP addresses reserved for projects
- Static external IP addresses are a regional resource that are used by instances that are in the same region as the address, by regional forwarding rules for network load balancers, and for protocol forwarding
- An interconnect attachment allocates a VLAN on Cloud Interconnect and connects that VLAN to a VPC network
- An attachment is a regional resource, but a Cloud Interconnect connection is a global resource
- Subnets regionally segment the network IP space into prefixes (subnets) and control which prefix an instance's internal IP address is allocated from
- Regional managed instance groups are collections of identical instances that span multiple zones
- Regional managed instance groups spread app load across multiple zones, rather than confining app to a single zone or having to manage multiple instance groups across different zones
- Regional persistent disks provide durable storage and replication of data between two zones within the same region
- In a failover situation, force-attach a regional persistent disk to another instance within the same region
- Optionally, share disk resources across projects, to enable other projects make images and snapshots from these disks but doesn't let instances in other projects attach the disks
- Regional operations Operations are a per-zone resource, a per-region resource, and a global resource
- An operation on a regional resource is considered a per-region operation
- Reserving an address is considered a regional operation because addresses are a region-specific resource
-
Zonal
- Resources that are hosted in a zone are called per-zone resources
- Zone-specific resources, or per-zone resources, are unique to that zone and are only usable by other resources in the same zone
- An instance is a per-zone resource
- When an instance is created, the zone where the instance is located is provided
- Instances can access other resources within the same zone, and can access global resources, but can't access other per-zone resources in a different zone, such as a disk resource
- Instances in one zone can communicate with instances in another zone if both instances belong to the same VPC network
- A virtual machine (VM) instance is located within a zone and can access global resources or resources within the same zone
- Persistent disks are accessed by other instances within the same zone
- Users can attach a disk only to instances in the same zone as the disk
- Users can't attach a disk to an instance in another zone
- Optionally, users can share disk resources across projects, which lets other projects make images and snapshots from these disks but doesn't let instances in other projects attach the disks
- Machine types are per-zone resources
- Instances and disks can only use machine types that are in the same zone
- A zonal managed instance group uses an instance template to create a group of identical instances within a single zone
- VM instances are managed in a managed instance group as a single entity, rather than managing individual instances
- Operations are a per-zone resource, a per-region resource, and a global resource
- If you are performing an operation on a zone-specific resource, the operation is considered a per-zone operation
- Creating an instance is considered a per-zone operation because the operation is being performed on a zone-specific resource, an instance