How-to Guides

Using core VPC functionality

• Using Virtual Private Cloud (VPC) networks

  Create VPC networks and subnets, and modify existing ones.

• Using firewall rules

  Create and modify firewall rules. View firewall rule examples.

• Using routes

  Create, modify, and work with VPC network routes.

• Adding and removing network tags

  Add and remove instance tags used by firewall rules and routes.

• Using legacy networks

  Create and use legacy (non-VPC) GCP networks.

VPC network sharing and peering

• Provisioning Shared VPC

  Set up a shared VPC host project, assign service projects, and set up permissions for sharing a VPC network with other projects.

• Deprovisioning Shared VPC

  Disassociate shared VPC service projects from a host project. Disable a project as a host project.

• Using VPC Network Peering

  Configure two VPC networks as peers or disconnect existing peers.

Configuring VM IP addresses and interfaces

• Reserving static internal IP addresses

  Reserve a static internal IP address. Assign a particular internal IP address to a GCP resource. (Docs hosted in the Compute Engine documentation.)

• Reserving external IP addresses

  Reserve a static external IP address. Assign a particular external IP address to a GCP resource. (Docs hosted in the Compute Engine documentation.)

• Configuring alias IP ranges

  Assign a range of IP addresses to a Compute Engine VM instance for use by containers or other services running on the VM.

• Creating instances with multiple network interfaces

  Configure a Compute Engine VM instance with more than one network interface so that it can be used as a virtual appliance linking VPC networks.

Logging and monitoring

• Using VPC Flow Logs

  View traffic flow logs and metrics.

• Using Firewall Rules Logging

  See which firewall rules affected your traffic.

• Serverless VPC Access audit logging information

  View the audit logs created by Serverless VPC Access as part of Cloud Audit Logs.

Special configurations

• Configuring Private Google Access

  Allow VM instances in your VPC network subnet to reach Google APIs even if the VMs don't have external IP addresses.

• Configuring private services access

  Establish a private connection to services made available to your VPC network on internal IP addresses.

• Special configurations for VM instances

  Set up a Compute Engine VM instance as a NAT or VPN gateway. Configure reusable static internal IP addresses.