Virtual Private Cloud (VPC)

VPC can automatically set up your virtual topology, configuring prefix ranges for your subnets and network policies, or you can configure your own. You can also expand CIDR ranges without downtime.

VPC Flow Logs capture information about the IP traffic going to and from network interfaces on Compute Engine. These VPC flow logs help with network monitoring, forensics, real-time security analysis, and expense optimization. VPC Flow Logs are updated every five seconds, providing immediate visibility, and can be quickly and easily visualized with Flow Analyzer.

Bring your own IP addresses to Google’s network across all regions to minimize downtime during migration and reduce your networking infrastructure cost. After you bring your own IPs, Google Cloud will advertise them globally to all peers. Your prefixes can be broken into blocks as small as 16 addresses (/28), creating more flexibility with your resources.

Configure private communication across the same or different organizations without bandwidth bottlenecks or single points of failure.

Segment your networks with a globally distributed firewall to restrict access to instances. VPC Firewall Rules Logging lets you audit, verify, and analyze the effects of your firewall rules. It logs firewall access and denies events with the same responsiveness of VPC flow logs.

Forward traffic from one instance to another instance within the same network, even across subnets, without requiring external IP addresses.

Configure a VPC network to be shared across several projects in your organization. Connectivity routes and firewalls associated are managed centrally. Your developers have their own projects with separate billing and quota, while they simply connect to a shared private network, where they can communicate.

Troubleshoot your existing VPCs by collecting and inspecting network traffic at scale, providing intrusion detection, application performance monitoring, and compliance controls with Packet Mirroring.

Securely connect your existing network to a VPC network over IPsec.

Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address. Configure your application’s front end to receive internet requests and shield your backend services from public endpoints, all while being able to access Google Cloud services.

Mitigate data exfiltration risks by enforcing a security perimeter to isolate resources of multi-tenant Google Cloud services.  Configure private communications between cloud resources from VPC networks spanning cloud and on-premise deployments.  Keep sensitive data private and take advantage of the fully managed storage and data processing capabilities.