This training course builds on the networking concepts covered in the Networking Fundamentals in Google Cloud course. Through presentations, demonstrations, and labs, participants explore and deploy Google Cloud networking technologies. These technologies include: Virtual Private Cloud (VPC) networks, subnets, and firewalls; Interconnection among networks; Load balancing ;Cloud DNS; Cloud CDN; Cloud NAT. The course will also cover common network design patterns.

What you'll learn

• Configure VPC networks, subnets, and routers.
• Control administrative access to VPC objects.
• Control network access to endpoints in VPCs.
• Interconnect networks among Google Cloud projects. 
• Implement network connectivity between Google Cloud projects.
• Implement load balancing.
• Configure traffic management among load balancer backend services.
• Use Cloud CDN to reduce latency.
• Optimize network spend using Network Service Tiers.
• Configure private connection options to provide access to external resources and services from internal networks.

Target Audience

• Network engineers and administrators who use the Google Cloud console or are planning to do so.
• Individuals who want to be exposed to software-defined networking solutions in the cloud.

Prerequisites

• Having completed the Google Cloud Fundamentals: Core Infrastructure course or having equivalent experience.
• Prior understanding of the 7 layer OSI model.
• Prior understanding of IPv4 addressing.
• Prior experience with managing IPv4 routes.

Course Modules

VPC Networking Fundamentals

• VPC networks
• Multiple Network Interfaces
• Network Service Tiers

Sharing VPC Networks

• Shared VPC
• VPC Network Peering
• Migrating a VM between networks

Network Monitoring and Logging 

• Monitoring
• Logging

Network Routing and Addressing in Google Cloud

• VPC Routing
• IPv6
• BYOIP
• Cloud DNS

Private Connection Options

• Private Connection Options
• Private Google Access
• Private Services Access
• Private Service Connect
• Cloud NAT

Introduction to Network Architecture

• Cloud network architecture overview
• Key considerations

Network Topologies

• Hub and spoke topology
• Other topologies
• Getting topology data
• Best practices

Distributed Denial of Service (DDoS) Protection

• How DDoS attacks work
• Google Cloud mitigations
• Types of complementary partner products

Controlling Access to VPC Networks

• IAM
• Cloud Firewall
• Cloud IDS
• Secure Web Proxy

Advanced Security Monitoring and Analysis

• Packet Mirroring for network traffic inspection
• Network security best practices

Hybrid Load Balancing and Traffic Management

• Hybrid load balancing
• Traffic management

Caching and Optimizing Load Balancing

• Internal network load balancers as next hops
• Cloud CDN
• Cloud Armor
• Load balancer optimization strategies

Connectivity options

• Google Cloud connectivity options
• Dedicated Interconnect 
• Partner Interconnect
• Cross-Cloud Interconnect

Cloud VPN

• Use case for Cloud VPN
• HA VPN topologies
• HA VPN over Cloud Interconnect 
• Influence best path selection