Lecture 5
A private cloud on Google Cloud Platform (GCP) is a dedicated
environment within G C P that provides you with a level of control
and security like a traditional on-premises data center.
This environment is isolated from other customers, offering
enhanced security and compliance.
VPC
Network
Identity and s
Access
Management VM
(IAM): Instances
Cloud Key Firewall
Load
Balancin Componen Rules
g
ts
Cloud
Cloud
Storag
DNS e
Cloud
SQL
VPC Network: This is the fundamental building block of your private
cloud, providing a logical network for your resources.
VM Instances: These are virtual machines that run your applications
and
workloads within the V P C network.
Firewall Rules: These control network traffic in and out of your V P C network,
ensuring security and isolation.
Cloud Storage: This provides persistent storage for your data, including files,
images, and other content.
Cloud SQ L: This offers a fully managed relational database service for
your applications.
Cloud DNS: This provides a scalable and reliable D N S service for
your
domain names.
Cloud Load Balancing: This distributes traffic across multiple VM instances,
improving performance and availability.
Cloud Identity and Access Management (IAM): This provides fine-
grained control over access to your resources.
1. Create a VPC Network
Go to the V P C Networks page in the G C P console.
Click "Create V P C Network."
Provide a name and description for your V P C network.
Choose the region and subnet configuration.
Set up firewall rules to control network traffic.
Default Allow: Allow all internal traffic within the V P C network.
Ingress rules: Specify rules to allow incoming traffic from external networks,
such as S S H for remote access or HTTP for web servers.
Egress rules: Specify rules to allow outgoing traffic from your V P C network,
such as outbound internet access or connections to other G C P resources.
2. Create VM Instances
Go to the VM Instances page in the G C P console.
Click "Create Instance."
Provide a name and description for your VM instance.
Choose the machine type, zone, and boot disk.
Configure network interfaces and assign them to your V P C network.
Set up boot disk and network configuration.
Boot disk: Choose a boot disk image (e.g., Ubuntu, CentOS) or
create a custom image.
Network configuration: Specify the network interface, IP address,
and other
network settings.
3. Configure Firewall Rules (Detailed)
Create firewall rules to allow necessary traffic in and out of your V P C network.
Specify source and destination IP ranges, protocols, ports, and actions.
Example rules:
S S H access: Allow inbound TCP traffic on port 22 from specific IP addresses.
HTTP/HTTPS access: Allow inbound TCP traffic on ports 80 and 443
from the internet.
Database access: Allow inbound TCP traffic on specific ports (e.g.,
3306 for MySQL) from specific IP addresses.
4. Set Up Cloud Storage, Cloud S Q L , and Cloud DNS
Create Cloud Storage buckets to store your data.
Set up Cloud S Q L instances for your databases.
Choose a database engine (e.g., My SQ L, PostgreSQL) and instance type.
Configure database settings and user permissions.
Configure Cloud D N S zones for your domain names.
Create D N S zones for your domain names and add D N S records.
5. Set Up Cloud Load Balancing (Optional)
Create a load balancer to distribute traffic across multiple VM instances.
Choose a load balancer type (e.g., HTTP(S), TCP) and configuration.
Configure health checks to monitor the health of your VM instances.
6. Configure Cloud Identity and Access Management (IAM)
Create IAM roles and assign them to users or groups.
Grant or deny permissions to specific resources based on roles.
Implement strong authentication and authorization practices.
7. Connect to Your Private Cloud
Use S S H or other methods to connect to your VM instances and
manage your resources within the private cloud.
