Google Cloud certified professional cloud network engineer guide: design, implement, manage, and secure a network architecture in Google Cloud
Gespeichert in:
| 1. Verfasser: | |
|---|---|
| Format: | Buch |
| Sprache: | English |
| Veröffentlicht: |
Birmingham
Packt Publishing
2022
|
| Schlagworte: | |
| Online-Zugang: | Inhaltsverzeichnis |
| Beschreibung: | Print on demand edition |
| Beschreibung: | xv, 389 Seiten Illustrationen, Diagramme 10 cm |
Internformat
MARC
| LEADER | 00000nam a2200000 c 4500 | ||
|---|---|---|---|
| 001 | BV048629248 | ||
| 003 | DE-604 | ||
| 005 | 20230505 | ||
| 007 | t| | ||
| 008 | 230103s2022 xx a||| |||| 00||| eng d | ||
| 015 | |a GBC1I9910 |2 dnb | ||
| 020 | |z 9781801072694 |9 978-1-80107-269-4 | ||
| 020 | |z 1801072698 |9 1-80107-269-8 | ||
| 035 | |a (OCoLC)1378499006 | ||
| 035 | |a (DE-599)BVBBV048629248 | ||
| 040 | |a DE-604 |b ger |e rda | ||
| 041 | 0 | |a eng | |
| 049 | |a DE-739 | ||
| 100 | 1 | |a Ipsale, Maurizio |d ca. 20./21. Jh. |e Verfasser |0 (DE-588)1288230095 |4 aut | |
| 245 | 1 | 0 | |a Google Cloud certified professional cloud network engineer guide |b design, implement, manage, and secure a network architecture in Google Cloud |c Maurizio Ipsale, Mirko Gilioli |
| 264 | 1 | |a Birmingham |b Packt Publishing |c 2022 | |
| 300 | |a xv, 389 Seiten |b Illustrationen, Diagramme |c 10 cm | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b n |2 rdamedia | ||
| 338 | |b nc |2 rdacarrier | ||
| 500 | |a Print on demand edition | ||
| 650 | 4 | |a Cloud computing | |
| 650 | 4 | |a Computer networks | |
| 650 | 4 | |a Computer network architectures | |
| 650 | 4 | |a Computer engineers / Certification | |
| 650 | 4 | |a Infonuagique | |
| 650 | 4 | |a Réseaux d'ordinateurs | |
| 650 | 4 | |a Réseaux d'ordinateurs / Architectures | |
| 650 | 7 | |a Cloud computing |2 fast | |
| 650 | 7 | |a Computer network architectures |2 fast | |
| 650 | 7 | |a Computer networks |2 fast | |
| 650 | 0 | 7 | |a Google Cloud Platform |0 (DE-588)1163407496 |2 gnd |9 rswk-swf |
| 689 | 0 | 0 | |a Google Cloud Platform |0 (DE-588)1163407496 |D s |
| 689 | 0 | |5 DE-604 | |
| 700 | 1 | |a Gilioli, Mirko |d ca. 20./21. Jh. |e Sonstige |0 (DE-588)1288232063 |4 oth | |
| 776 | 0 | 8 | |i ebook version |
| 856 | 4 | 2 | |m Digitalisierung UB Passau - ADAM Catalogue Enrichment |q application/pdf |u http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=034004319&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |3 Inhaltsverzeichnis |
| 943 | 1 | |a oai:aleph.bib-bvb.de:BVB01-034004319 | |
Datensatz im Suchindex
| _version_ | 1820882393327730688 |
|---|---|
| adam_text |
Table of Contents Preface Section 1: Network Infrastructure Google Cloud Platform Infrastructure Introducing cloud computing and virtualization 4 What is cloud computing? What is virtualization? 4 7 Introducing GCP 8 GCP's global infrastructure - regions and zones Projects, billing, and quotas 8 13 Getting started with GCP 18 GCP resource hierarchy Interacting with GCP 19 20 Understanding virtual machines in the cloud 23 Google Compute Engine VPC overview Overview of Load Balancing, DNS, and CDN 28 Exploring containers in the cloud 31 23 26 DevOps concepts and microservice architectures Containerization versus virtualization Container orchestration with Google Kübemetes Engine 35 Summary Further reading 39 40 31 32 Designing, Planning, and Prototyping a GCP Network Technical requirements Designing the overall network architecture 42 Failover and DR strategy 42 42 Options for HA DNS strategy in a hybrid cloud environment Choosing an appropriate load-balancing option 43 46 48
viii Table of Contents Optimizing for latency (for example, maximum transmission unit (MTU) size; caches; content delivery network (CDN)) Network security design strategy 50 52 Designing a VPC 53 CIDR range for subnets IP addressing Routes Shared VPC versus VPC Network Peering Firewall rules 55 60 61 Designing a hybrid network 71 65 69 Cloud Interconnect design (for example, Dedicated versus Partner) Peering options (Direct versus Carrier) IPsecVPN Cloud Router Failover and DR strategy (for example, building HA with BGP using Cloud Router) 71 77 78 80 82 Designing a container IP addressing plan for GKE 88 Creating scalable GKE clusters IP address planning in GKE Network security design in GKE 89 91 93 Summary 96 3 Implementing a GCP Virtual Private Cloud (VPC) Technical requirements Configuring VPC networks 98 98 Configuring VPC resources in GCP 98 SSH and ICMP protocols 106 Configuring static and dynamic routing with Cloud Router 113 Configuring VPC peering Configuring Shared VPC Configuring NAT in Google Cloud 120 126 131 Configuring and managing firewall rules 139 Section 2: Network Services and Security 4 Configuring Network Services in GCP Configuring load balancing HTTP(S) Global Load Balancing Internal load balancing 162 162 173 Configuring Cloud Content Delivery Network (CDN) Summary 188 194
Table of Contents ix 5 Implementing Hybrid Connectivity in GCP Technical requirements Configuring Interconnect Dedicated Interconnect connection option Partner Interconnect connection option Configuring a site-to-site IPsec VPN 196 196 198 201 202 Route-based VPN HA VPN Diving into Cloud Router Cloud Router configuration Static external IP address MED Summary 204 212 222 223 226 234 235 6 ImplementingNetwork Security Configuring Identity and Access Management (IAM) 238 Configuring Cloud Armor security policies 246 Configuring a third-party software device (NGFW) insertion into VPC using multiple NICs 256 Configuring networking and security 257 for a third-party virtual appliance Implementing third-party virtual appliances {Compute Engine instances) in a shared VPC environment 261 Implementing routes and firewall rules in a multi-NIC environment 261 Summary 262 Section 3: Network Operations, Management, and Monitoring 7 Managing and Monitoring Network Operations Logging and monitoring with GCP operations VPC Flow Logs Firewall Rules Logging 266 266 277 VPC audit logs Packet Mirroring Summary 286 287 293
x Table of Contents 8 Advanced Networking in Google Cloud Platform Google Cloud Traffic Director Understanding Istio and the service mesh Understanding Traffic Director Configuring Traffic Director Configuring the Google Cloud Service Directory Understanding Service Directory and features 296 296 298 300 309 309 Configuring Service Directory and DNS Building hub and spoke networks with Network Connectivity Center Understanding Network Connectivity Center in Google Cloud Platform Configuring Network Connectivity Center as a transit hub Summary 9 Professional Cloud Network Engineer Certification Preparation_ Other Books You May Enjoy Index 311 321 322 324 352 |
| adam_txt |
Table of Contents Preface Section 1: Network Infrastructure Google Cloud Platform Infrastructure Introducing cloud computing and virtualization 4 What is cloud computing? What is virtualization? 4 7 Introducing GCP 8 GCP's global infrastructure - regions and zones Projects, billing, and quotas 8 13 Getting started with GCP 18 GCP resource hierarchy Interacting with GCP 19 20 Understanding virtual machines in the cloud 23 Google Compute Engine VPC overview Overview of Load Balancing, DNS, and CDN 28 Exploring containers in the cloud 31 23 26 DevOps concepts and microservice architectures Containerization versus virtualization Container orchestration with Google Kübemetes Engine 35 Summary Further reading 39 40 31 32 Designing, Planning, and Prototyping a GCP Network Technical requirements Designing the overall network architecture 42 Failover and DR strategy 42 42 Options for HA DNS strategy in a hybrid cloud environment Choosing an appropriate load-balancing option 43 46 48
viii Table of Contents Optimizing for latency (for example, maximum transmission unit (MTU) size; caches; content delivery network (CDN)) Network security design strategy 50 52 Designing a VPC 53 CIDR range for subnets IP addressing Routes Shared VPC versus VPC Network Peering Firewall rules 55 60 61 Designing a hybrid network 71 65 69 Cloud Interconnect design (for example, Dedicated versus Partner) Peering options (Direct versus Carrier) IPsecVPN Cloud Router Failover and DR strategy (for example, building HA with BGP using Cloud Router) 71 77 78 80 82 Designing a container IP addressing plan for GKE 88 Creating scalable GKE clusters IP address planning in GKE Network security design in GKE 89 91 93 Summary 96 3 Implementing a GCP Virtual Private Cloud (VPC) Technical requirements Configuring VPC networks 98 98 Configuring VPC resources in GCP 98 SSH and ICMP protocols 106 Configuring static and dynamic routing with Cloud Router 113 Configuring VPC peering Configuring Shared VPC Configuring NAT in Google Cloud 120 126 131 Configuring and managing firewall rules 139 Section 2: Network Services and Security 4 Configuring Network Services in GCP Configuring load balancing HTTP(S) Global Load Balancing Internal load balancing 162 162 173 Configuring Cloud Content Delivery Network (CDN) Summary 188 194
Table of Contents ix 5 Implementing Hybrid Connectivity in GCP Technical requirements Configuring Interconnect Dedicated Interconnect connection option Partner Interconnect connection option Configuring a site-to-site IPsec VPN 196 196 198 201 202 Route-based VPN HA VPN Diving into Cloud Router Cloud Router configuration Static external IP address MED Summary 204 212 222 223 226 234 235 6 ImplementingNetwork Security Configuring Identity and Access Management (IAM) 238 Configuring Cloud Armor security policies 246 Configuring a third-party software device (NGFW) insertion into VPC using multiple NICs 256 Configuring networking and security 257 for a third-party virtual appliance Implementing third-party virtual appliances {Compute Engine instances) in a shared VPC environment 261 Implementing routes and firewall rules in a multi-NIC environment 261 Summary 262 Section 3: Network Operations, Management, and Monitoring 7 Managing and Monitoring Network Operations Logging and monitoring with GCP operations VPC Flow Logs Firewall Rules Logging 266 266 277 VPC audit logs Packet Mirroring Summary 286 287 293
x Table of Contents 8 Advanced Networking in Google Cloud Platform Google Cloud Traffic Director Understanding Istio and the service mesh Understanding Traffic Director Configuring Traffic Director Configuring the Google Cloud Service Directory Understanding Service Directory and features 296 296 298 300 309 309 Configuring Service Directory and DNS Building hub and spoke networks with Network Connectivity Center Understanding Network Connectivity Center in Google Cloud Platform Configuring Network Connectivity Center as a transit hub Summary 9 Professional Cloud Network Engineer Certification Preparation_ Other Books You May Enjoy Index 311 321 322 324 352 |
| any_adam_object | 1 |
| any_adam_object_boolean | 1 |
| author | Ipsale, Maurizio ca. 20./21. Jh |
| author_GND | (DE-588)1288230095 (DE-588)1288232063 |
| author_facet | Ipsale, Maurizio ca. 20./21. Jh |
| author_role | aut |
| author_sort | Ipsale, Maurizio ca. 20./21. Jh |
| author_variant | m i mi |
| building | Verbundindex |
| bvnumber | BV048629248 |
| classification_rvk | SR 770 |
| ctrlnum | (OCoLC)1378499006 (DE-599)BVBBV048629248 |
| discipline | Informatik |
| discipline_str_mv | Informatik |
| format | Book |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>00000nam a2200000 c 4500</leader><controlfield tag="001">BV048629248</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">20230505</controlfield><controlfield tag="007">t|</controlfield><controlfield tag="008">230103s2022 xx a||| |||| 00||| eng d</controlfield><datafield tag="015" ind1=" " ind2=" "><subfield code="a">GBC1I9910</subfield><subfield code="2">dnb</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="z">9781801072694</subfield><subfield code="9">978-1-80107-269-4</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="z">1801072698</subfield><subfield code="9">1-80107-269-8</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)1378499006</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV048629248</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rda</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-739</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Ipsale, Maurizio</subfield><subfield code="d">ca. 20./21. Jh.</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1288230095</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Google Cloud certified professional cloud network engineer guide</subfield><subfield code="b">design, implement, manage, and secure a network architecture in Google Cloud</subfield><subfield code="c">Maurizio Ipsale, Mirko Gilioli</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Birmingham</subfield><subfield code="b">Packt Publishing</subfield><subfield code="c">2022</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">xv, 389 Seiten</subfield><subfield code="b">Illustrationen, Diagramme</subfield><subfield code="c">10 cm</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">n</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">nc</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Print on demand edition</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Cloud computing</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer networks</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer network architectures</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Computer engineers / Certification</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Infonuagique</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Réseaux d'ordinateurs</subfield></datafield><datafield tag="650" ind1=" " ind2="4"><subfield code="a">Réseaux d'ordinateurs / Architectures</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Cloud computing</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer network architectures</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1=" " ind2="7"><subfield code="a">Computer networks</subfield><subfield code="2">fast</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Google Cloud Platform</subfield><subfield code="0">(DE-588)1163407496</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Google Cloud Platform</subfield><subfield code="0">(DE-588)1163407496</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="5">DE-604</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Gilioli, Mirko</subfield><subfield code="d">ca. 20./21. Jh.</subfield><subfield code="e">Sonstige</subfield><subfield code="0">(DE-588)1288232063</subfield><subfield code="4">oth</subfield></datafield><datafield tag="776" ind1="0" ind2="8"><subfield code="i">ebook version</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">Digitalisierung UB Passau - ADAM Catalogue Enrichment</subfield><subfield code="q">application/pdf</subfield><subfield code="u">http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=034004319&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="943" ind1="1" ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-034004319</subfield></datafield></record></collection> |
| id | DE-604.BV048629248 |
| illustrated | Illustrated |
| index_date | 2024-07-03T21:15:44Z |
| indexdate | 2025-01-10T17:06:10Z |
| institution | BVB |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-034004319 |
| oclc_num | 1378499006 |
| open_access_boolean | |
| owner | DE-739 |
| owner_facet | DE-739 |
| physical | xv, 389 Seiten Illustrationen, Diagramme 10 cm |
| publishDate | 2022 |
| publishDateSearch | 2022 |
| publishDateSort | 2022 |
| publisher | Packt Publishing |
| record_format | marc |
| spelling | Ipsale, Maurizio ca. 20./21. Jh. Verfasser (DE-588)1288230095 aut Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud Maurizio Ipsale, Mirko Gilioli Birmingham Packt Publishing 2022 xv, 389 Seiten Illustrationen, Diagramme 10 cm txt rdacontent n rdamedia nc rdacarrier Print on demand edition Cloud computing Computer networks Computer network architectures Computer engineers / Certification Infonuagique Réseaux d'ordinateurs Réseaux d'ordinateurs / Architectures Cloud computing fast Computer network architectures fast Computer networks fast Google Cloud Platform (DE-588)1163407496 gnd rswk-swf Google Cloud Platform (DE-588)1163407496 s DE-604 Gilioli, Mirko ca. 20./21. Jh. Sonstige (DE-588)1288232063 oth ebook version Digitalisierung UB Passau - ADAM Catalogue Enrichment application/pdf http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=034004319&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA Inhaltsverzeichnis |
| spellingShingle | Ipsale, Maurizio ca. 20./21. Jh Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud Cloud computing Computer networks Computer network architectures Computer engineers / Certification Infonuagique Réseaux d'ordinateurs Réseaux d'ordinateurs / Architectures Cloud computing fast Computer network architectures fast Computer networks fast Google Cloud Platform (DE-588)1163407496 gnd |
| subject_GND | (DE-588)1163407496 |
| title | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud |
| title_auth | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud |
| title_exact_search | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud |
| title_exact_search_txtP | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud |
| title_full | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud Maurizio Ipsale, Mirko Gilioli |
| title_fullStr | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud Maurizio Ipsale, Mirko Gilioli |
| title_full_unstemmed | Google Cloud certified professional cloud network engineer guide design, implement, manage, and secure a network architecture in Google Cloud Maurizio Ipsale, Mirko Gilioli |
| title_short | Google Cloud certified professional cloud network engineer guide |
| title_sort | google cloud certified professional cloud network engineer guide design implement manage and secure a network architecture in google cloud |
| title_sub | design, implement, manage, and secure a network architecture in Google Cloud |
| topic | Cloud computing Computer networks Computer network architectures Computer engineers / Certification Infonuagique Réseaux d'ordinateurs Réseaux d'ordinateurs / Architectures Cloud computing fast Computer network architectures fast Computer networks fast Google Cloud Platform (DE-588)1163407496 gnd |
| topic_facet | Cloud computing Computer networks Computer network architectures Computer engineers / Certification Infonuagique Réseaux d'ordinateurs Réseaux d'ordinateurs / Architectures Google Cloud Platform |
| url | http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=034004319&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |
| work_keys_str_mv | AT ipsalemaurizio googlecloudcertifiedprofessionalcloudnetworkengineerguidedesignimplementmanageandsecureanetworkarchitectureingooglecloud AT giliolimirko googlecloudcertifiedprofessionalcloudnetworkengineerguidedesignimplementmanageandsecureanetworkarchitectureingooglecloud |