Soru

Zorluk: ZorPlanning Virtual Private Cloud (VPC) Networks and Subnets

An enterprise is planning a multi-region Google Cloud deployment that connects to an on-premises data center using Cloud Interconnect. The environment must host Google Kubernetes Engine (GKE) clusters using alias IPs and prevent IP address collisions. Sequence the following steps in the correct order to properly plan and implement the Virtual Private Cloud (VPC) network architecture from initial network assessment to hybrid connectivity configuration.

  1. 1Audit existing on-premises IP space (10.0.0.0/1610.0.0.0/16) and catalog reserved address blocks to identify available, contiguous IPv4 ranges for GCP allocation.
  2. 2Create a custom-mode VPC network in the Google Cloud project to prevent automatic allocation of default regional subnets.
  3. 3Provision custom subnets in target regions with non-overlapping primary IPv4 CIDR blocks selected from the unallocated address space.
  4. 4Configure secondary IPv4 CIDR ranges on the regional subnets specifically designated for GKE Pods and Services.
  5. 5Configure Cloud Router BGP sessions over Cloud Interconnect to advertise the newly provisioned VPC primary and secondary subnet ranges to the on-premises network.

Cevap

The correct sequence begins with auditing existing on-premises IP space, followed by creating a custom-mode VPC network, provisioning custom subnets with non-overlapping primary CIDR ranges, configuring secondary CIDR ranges for GKE alias IPs, and finally setting up Cloud Router BGP advertising to the on-premises network.
Proper VPC network planning for enterprise hybrid environments follows a logical sequence: identifying unallocated IP ranges on-premises first, creating a custom-mode VPC network to maintain full subnet control, establishing regional subnets with primary CIDRs, provisioning secondary ranges for GKE cluster alias IPs, and finally advertising the completed CIDRs across BGP over Cloud Interconnect.

Adım Adım Çözüm

1
Audit existing on-premises IP space and identify unallocated ranges.
Establishes clear boundaries for GCP IP assignment, avoiding IP address collisions with existing on-premises networks.
VPC planning must begin by identifying available unallocated space prior to defining cloud ranges.
2
Create a custom-mode VPC network.
Disables automatic creation of subnets in every region, providing total control over subnet CIDR block selection.
Auto-mode VPC networks automatically create subnets using fixed 10.128.0.0/910.128.0.0/9 ranges which often overlap with enterprise networks.
3
Define primary IPv4 CIDR blocks for subnets in selected regions.
Subnets are created with tailored, non-overlapping primary IP ranges.
Subnet primary ranges must exist before secondary ranges can be attached.
4
Configure secondary IPv4 CIDR ranges on the subnets for GKE cluster Pods and Services.
Reserves distinct IP ranges attached to the subnets for container networking.
GKE native VPC clusters rely on secondary IP ranges configured on the subnets for pod and service alias IPs.
5
Configure Cloud Router BGP routes to advertise the VPC subnet ranges to on-premises.
Enables two-way dynamic routing between on-premises and GCP workloads.
Dynamic routing propagation must reflect fully configured subnet primary and secondary ranges.

Anahtar Kavram

Planning Enterprise Hybrid VPC Networks and Subnets
Tahmini Süre:2m 0s
Bu soruyu puanla