This 2-day instructor-led course gives participants a broad study of networking options on Google Cloud Platform. Through presentations, demonstrations, and hands-on labs, learners explore and deploy GCP networking technologies, such as Google Virtual Private Cloud (VPC) networks, subnets, firewalls, interconnection among networks, load balancing, Cloud DNS, and Cloud CDN. The course also covers common network design patterns and automated deployment using Cloud Deployment Manager.
To get the most out of this course, participants should have:
- Completed Google Cloud Platform Fundamentals: Core Infrastructure or have equivalent experience
- Clear understanding of the 7-layer OSI model
- Clear understanding of IPv4 addressing
- Prior experience with managing IPv4 routes
This course is intended for the following participants:
- Network Engineers and Network Admins who are either using Google Cloud Platform or planning to do so
- Individuals who want to be exposed to software-defined networking solutions in the cloud.
- Configure Google VPC networks, subnets, and routers
- Control administrative access to VPC objects
- Control network access to endpoints in VPCs
- Interconnect networks among GCP projects
- Interconnect networks among GCP VPC networks and on-premises or other-cloud networks
- Choose among GCP load balancer and proxy options and configure them
- Use Cloud CDN to reduce latency and save money
- Optimize network spend using Network Tiers
- Deploy networks declaratively using Cloud Deployment Manager
- Design networks to meet common customer requirements
- Configure monitoring and logging to troubleshoot networks problems
Module 1: Google Cloud VPC Networking Fundamentals
- Recall that networks belong to projects.
- Explain the differences among default, auto, and custom networks.
- Create networks and subnets.
- Explain how IPv4 addresses are assigned to Compute Engine instances.
- Publish domain names using Google Cloud DNS.
- Create Compute Engine instances with IP aliases.
- Create Compute Engine instances with multiple virtual network.
Module 2: Controlling Access to VPC Networks
- Outline how IAM policies affect VPC networks.
- Control access to network resources using service accounts.
- Control access to Compute Engine instances with tag-based firewall rules.
Module 3: Sharing Networks across Projects
- Outline the overall workflow for configuring Shared VPC.
- Differentiate between the IAM roles that allow network resources to be managed.
- Configure peering between unrelated VPC Networks.
- Recall when to use Shared VPC and when to use VPC Network Peering.
Module 4: Load Balancing
- Recall the various load balancing services.
- Configure Layer 7 HTTP(S) load balancing.
- Whitelist and blacklist IP traffic with Cloud Armor.
- Cache content with Cloud CDN.
- Explain Layer 4 TCP or SSL proxy load balancing.
- Explain regional network load balancing.
- Configure internal load balancing.
- Recall the choices for enabling IPv6 Internet connectivity for Google Cloud load balancers.
- Determine which Google Cloud load balancer to use when.
Module 5: Hybrid Connectivity
- Recall the Google Cloud interconnect and peering services available to connect your infrastructure to Google Cloud.
- Explain Dedicated Interconnect and Partner Interconnect.
- Describe the workflow for configuring a Dedicated Interconnect.
- Build a connection over a VPN with Cloud Router.
- Determine which Google Cloud interconnect service to use when.
- Explain Direct Peering and Partner Peering.
- Determine which Google Cloud peering service to use when.
Module 6: Networking Pricing and Billing
- Recognize how networking features are charged for.
- Use Network Service Tiers to optimize spend.
- Determine which Network Service Tier to use when.
- Recall that labels can be used to understand networking spend.
Module 7: Network Design and Deployment
- Explain common network design patterns.
- Configure Private Google Access to allow access to certain Google Cloud services from VM instances with only internal IP addresses.
- Configure Cloud NAT to provide your instances without public IP addresses access to the internet.
- Automate the deployment of networks using Deployment Manager or Terraform.
- Launch networking solutions using Cloud Marketplace.
Module 8: Network Monitoring and Troubleshooting
- Configure uptime checks, alerting policies and charts for your network services.
- Use VPC Flow Logs to log and analyze network traffic behavior.
Google Cloud learning paths
Want to boost your career in Google Cloud? Click on the roles below to see QA‘s learning pathways, specially designed to give you the skills to succeed.
Frequently asked questionsSee all of our FAQs
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting (more details in the link below) to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
Learn more about our Virtual Classrooms.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
Learn more about QA’s online courses.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.