Planning for Bare Metal Solution

Bare Metal Solution provides a secure environment in which you can run your specialized workloads on high-performance, bare-metal machines.

Use Bare Metal Solution to run:

  • Third-party virtualization software.
  • Applications that require direct, low-level access to the server.

What Bare Metal Solution provides

Bare Metal Solution is a managed solution that provides purpose-built HPE or Atos bare-metal machines in regional extensions that are connected to Google Cloud by a managed, high-performance connection with a low-latency network fabric.

Bare-metal machines are shown in a regional extension that is colocated
with a Google Cloud data center

With Bare Metal Solution, Google Cloud provides and manages the core infrastructure, the network, the physical and network security, and hardware monitoring capabilities in an environment from which you can access all of the Google Cloud services. The core infrastructure includes secure, controlled-environment facilities, and power.

The Bare Metal Solution also includes the provisioning and maintenance of the custom, sole-tenancy hardware with local SAN, and smart hands support.

The network, which is managed by Google Cloud includes a low-latency Cloud Interconnect connection into the customer Bare Metal Solution environment.

The available Google Cloud services include private API access, management tools, support, and billing.

The elements in the preceding text are shown in the diagram

Your responsibilities in a Bare Metal Solution environment

You are responsible for the software, applications, and data that you use and store in the Bare Metal Solution environment. Your responsibility for the software, applications, and data includes:

  • Licensing
  • Security, including:
    • Application security
    • OS patching and security updates
    • Network transport encryption, if needed between your Google Cloud environment and your Bare Metal Solution environment
  • Application and OS logging and monitoring
  • Application or workload maintenance
  • Backups, including backup security encryption
  • Support for your applications, as per your ISV agreements

You are responsible for the licensing of all of your software. Bare Metal Solution uses a bring-your-own-license (BYOL) model.

The operating system and any hypervisor software are included in the software that you are responsible for. The operating system or hypervisor is installed for you, but as soon as you receive control of the machines in your Bare Metal Solution environment, you assume all responsibility for them.

As a part of your responsibility for the security of your software and applications, you are responsible for applying the latest available security patches and software updates.

Finally, you need to design and implement your solutions for backup and recovery, high-availability, and disaster recovery.

Regional availability

Bare Metal Solution is currently available in the following Google Cloud regions:

Region Location
asia-northeast1 Tokyo, Japan
asia-southeast1 Jurong West, Singapore
australia-southeast1 Sydney, Australia
europe-west2 London, England, UK
europe-west3 Frankfurt, Germany
europe-west4 Eemshaven, Netherlands
southamerica-east1 Osasco (São Paulo), Brazil
us-east4 Ashburn, Northern Virginia, USA
us-west2 Los Angeles, California, USA

If you do not see the region that you need in the preceding table, contact Google Cloud Sales.

Machine configurations

The Bare Metal Solution offers machines in pre-configured sizes, as shown in the following table, or you can order custom sizes.

Each bare-metal machine comes with 200 GB of network attached storage for the boot disk.

By default, CPU hyper-threading is disabled in Bare Metal Solution machines. If you need hyper-threading, let your sales representative know or, if you already have Bare Metal Solution, open a service request.

CPU cores Sockets RAM CPU platform family Ethernet ports
16 2 384 GB Intel Xeon Gold, 6200 series, 3.2 GHz 4 port 25GbE NIC
24 2 768 GB Intel Xeon Gold, 6200 series, 3.0 GHz 4 port 25GbE NIC
56 2 1,536 GB Intel Xeon Platinum, 8200 series, 2.2 GHz 4 port 25GbE NIC
112 4 3,072 GB Intel Xeon Platinum, 8200 series, 2.7 GHz 4 port 25GbE NIC

Storage

Storage is provided by a Fibre Channel storage area network (FC SAN).

You can choose between the following storage options, which you order in 1 TB increments.

Storage type Snapshot support Common Workloads
All flash Yes Mission-critical production workloads
Standard disk Yes Local backups or archival workloads

Operating systems

When you place an order for Bare Metal Solution, you can specify the operating system (OS) that you need installed on your machines.

Linux

You can request the installation of any of the following Linux OS vendor versions on your Bare Metal Solution machines:

  • Oracle Enterprise Linux (OEL)
    • 7 (latest update)
  • Red Hat Enterprise Linux (RHEL)
    • 7 (latest release)
    • 8 (latest release)
  • SUSE Linux Enterprise Server (SLES)
    • Coming soon: 15 (latest service pack release)

Windows

You can request the installation of any of the following versions of Microsoft Windows Server on your Bare Metal Solution machines:

  • Coming soon: Windows Server 2016 Enterprise
  • Coming soon: Windows Server 2019 Enterprise

Hypervisors

When you place an order for Bare Metal Solution, you can request that a hypervisor be installed on your machines. If you request a hypervisor, you must install any operating system yourself.

You can request the following hypervisor:

  • Oracle VM
    • 3.4 (latest release)

Networking

Each Bare Metal Solution environment resides in a secure region extension that is connected to the corresponding Google Cloud region by a Cloud Interconnect connection that is provided and managed by Google Cloud.

Google Cloud monitors round-trip latencies between VM instances in Compute Engine zones and the Bare Metal Solution environment in the same region. For Google Cloud locations in Los Angeles, Ashburn, and London, median round-trip latencies are regularly measured at 0.6 ms to 1 ms.

Cloud Interconnect for Bare Metal Solution

The connection between your Google Cloud environment and your Bare Metal Solution environment uses the Partner Interconnect framework.

For more information about the Partner Interconnect framework, see the Partner Interconnect documentation, but keep in mind the following differences applicable in the context of Bare Metal Solution:

  • Because Google Cloud manages the network connection, you provide pairing keys for the VLAN attachments to Google Cloud instead of a third-party service provider.
  • This connection to the Bare Metal Solution environment is not subject to the pricing model that the Partner Interconnect product uses. For more information about the pricing model, talk to your Google Cloud Sales representative.

Defining your own IP address spaces

Bare Metal Solution enables you to bring your own IP subnets for use in the bare-metal environment. This enables you to fit your Bare Metal Solution into any existing IP address schema that your enterprise might have.

When you place an order for Bare Metal Solution, you provide two internal IP address ranges: an internal IP range for communication between your Google Cloud and Bare Metal Solution environments and an internal IP range to use to configure back-end routing within the Bare Metal Solution environment.

You can also select the specific IP addresses to use with each machine.

Make sure that no existing IP addresses in your VPC network or your extended on-premises network conflict with the IP ranges that you use for Bare Metal Solution environment.

Multi-region networking considerations

For any outside communication, including communication with services or your on-premises environments, the communication from your Bare Metal Solution environment must pass through the VPC network that you are using to connect to your Bare Metal Solution environment.

Consider using a single VPC network with global_dynamic routing enabled if your Bare Metal Solution environment will require access to other Google Cloud regions to connect to any of the following resources:

  • Other Bare Metal Solution environments
  • VMs in other regions
  • Other Google Cloud services
  • Your on-premises sites in other geographical locations

Using a VPC network with global dynamic routing enabled and custom route advertisements, you can set up a routed environment to connect your Bare Metal Solution instances directly to your Google Cloud and extended on-premises environments in other regions, without any additional configuration in Google Cloud.

Our recommendation is to advertise a default route on the BGP sessions to Bare Metal Solution. This enables you to:

  • Avoid having to make change to routes to the Bare Metal Solution environment even if things change in your VPC subnets or your on-premises environments.
  • Keep the routing table to Bare Metal Solution small and allow it to contain only one prefix.

Network services and your Bare Metal Solution environment

As described earlier, Google Cloud recommends that you advertise a single default route to your Bare Metal Solution environment to keep the routing table simple. However, if your circumstances don't allow that, the routes that you need to expose to your Bare Metal Solution environment are determined by networks and services in your Google Cloud or on-premises environments that need access to the devices or applications in your Bare Metal Solution environment and vice-versa.

Some services that might require routes include NTP servers, DNS servers, LDAP servers, logging services, monitoring services, and so forth, as well as any other workloads and applications that need to communicate with the Bare Metal Solution environment.

Bare Metal Solution does not come with internet access. If you need to, you can setup routing to access the internet through any existing internet gateways that you have, either on Google Cloud or on premises.

Keeping routing simple

Outside of the other machines in the same Bare Metal Solution region, your machines likely need to communicate with one or more of the following:

  • Your endpoints in your Google Cloud environment
  • Your extended on-premises environment through your Google Cloud environment
  • Your machines in Bare Metal Solution environments in other regions through your Google Cloud environment
  • The internet through your Google Cloud environment

Because all of your communication from the Bare Metal Solution environment is routed through your Google Cloud environment, to keep routing simple, consider advertising either a default route or all RFC 1918 private addresses, based on your IP schemes toward your Bare Metal Solution. You can do this by using custom route advertisements at the BGP-session level to your Bare Metal Solution environment.

Firewalls and the Bare Metal Solution environment

When planning your firewall implementation for the Bare Metal Solution environment, there are a couple things to consider.

If you need to control traffic between the servers or applications within the Bare Metal Solution environment (east-west traffic), ask your Google Cloud sales representative for the available options.

In your VPC network on Google Cloud, you need to create firewall rules that allow incoming connections from the Bare Metal Solution environment.

Required networking information for your Bare Metal Solution order

When you submit a Bare Metal Solution order, include the following networking information:

  • The Google Cloud project ID that you are using with your Bare Metal Solution environment.
  • The IP ranges that you intend to use in your Bare Metal Solution environment. For example, an internal IP range for communication with you Google Cloud environment and an internal IP range for use only within the Bare Metal Solution environment.
  • The number of VLANs you need in your Bare Metal Solution environment.
  • The bandwidth, in 1 Gb increments, that you need between your Google Cloud environment and your Bare Metal Solution environment.