Dedicated Interconnect Direct and Carrier Peering We saw earlier that there are three ways to interconnect your on premise network with a VPC on the Google Cloud platform. The first of these was the VPN, which can be used with or without cloud routers. The second is the dedicated interconnect, as opposed to a VPN. A dedicated interconnect does not use a tunnel over the Internet. Instead, it is a direct physical connection between Google’s network and your on premise network. The two networks that have been connected using a…

Cloud Router In order to avoid static routes, where you have to update the routing tables on your VPN in order to learn new networks, you will often use VPNs with cloud routers. The cloud router can be used to dynamically exchange route information between VPCs that you have on the Google Cloud platform and your on premise network. In addition to VPCs, Google also has a legacy network setup, which we’ll see briefly at the end of this section. Cloud routers work with both legacy networks as well as…

Lab: Bastion Host In this demo we will first create an application web server which will represent a service supplied to employees of a company. We will then prevent access from this web server out to the Internet by placing a firewall in between. Finally, we will create a maintenance server, also called a bastion host, which will be able to access this web server and we would test the connectivity to that server. We start off by provisioning a virtual machine which will represent our web server. So we…

Lab: Working with Firewalls In this demo we will be studying Firewalls and we will see how their configuration can affect communication between instances in a network. Let us start off by creating a new virtual network. So we navigate to the Vpc network section and click to create a new Vpc network which we call Learn Vpc. We choose to create our subnets manually in custom mode. Our first subnet is for our web server which we create in the US East region. We enter a cider block. Our…

Routes We’ve spoken about traffic moving through a network and how it requires routes to be configured on the network before packets can go from source to destination. We’ll now talk about routes. A route is nothing but a mapping. It’s a mapping of an IP range to a destination. Routes are what tell the Vpc network where to send packets which are designed for particular IP address. Routes basically allow a packet from its source to get to its destination. Let’s say traffic emanates from a particular virtual machine…

IP Addresses We’ll now talk about IP addresses, how they work, and their specific characteristics on the Gcp. IP addresses can be assigned to specific resources such as virtual machines. Every virtual machine has an internal IP address. This is automatically assigned to the VM. You can also specifically pick an internal IP address for your VM, but typically you just take the one that is automatically assigned. Now this internal IP address depends on the subnet to that which that VM belongs and has to be drawn from that…

VPCs And Subnets In this section, we learn about virtual private clouds in the Google Cloud Platform and how we can connect different VPCs together. VPCs are just another name for networks that we create on cloud platforms. Just as AWS and Azure, the Google Cloud Platform also has its own Vpc set up with its own quirks. The Google Google Cloud Platform’s Virtual Private Cloud provides networking functionality to compute engine virtual machine instances, the Kubernetes engine, containers and App engine flexible Environment just like everything else on the…

Introducing Machine Learning Here’s a question I’d like us all to think about as we go through the contents of this video. How would you recognize a machine learning based system if you saw one? So let’s say you were shown a piece of software or a system. How would you know whether it makes use of machine learning or not? What are the defining characteristics of a machine learning based system? Hello and welcome to this module on understanding the foundations of TensorFlow. In this module, we are going…

Lab: Cloud IAM In this lab, we will be using enduser and service accounts to see how modifying their privileges affects what they’re able to do within Gcp. To start with, let’s take a look at a couple of the end user accounts. The first one is of the user Vitaskrinivasan, who is a project owner. The second one is that of Judy Raj, whose permissions we will be modifying and then seeing how that affects her access. So once we log in as Judy, we will see that she…

Cloud Endpoints Here is a question which I’d like us to ponder over while we go through the contents of this video. The extensible service Proxy this is an important part of exposing APIs via cloud Endpoints. The question is, does the extensible service proxy always sit on the same Vpc, on the same virtual private cloud as the code that you are exposing as an endpoint? Think about about it and we’ll get back to it. Let’s wrap up this section on ops in the Google Cloud environment with…