Instructor: Welcome back, in this chapter,
let's talk about the Hybrid Cloud options in Google Cloud.
How do you connect an on-premise network to a cloud network?
Let's start with Cloud VPN.
Cloud VPN is implemented using IPSec VPN tunnel.
The traffic goes through internet
so the traffic is public.
However, the traffic is encrypted
using internet key exchange protocol.
There are two types of Cloud VPN solutions
which are supported.
One is high availability VPN.
This provides an SLA of 99.99%
with two external IP addresses.
However, a high availability VPN
only supports dynamic routing.
It does not support static routing.
The other option is classic VPN.
This provides you an SLA of 99.9%.
It provides you with a single external IP address
and it supports both static and dynamic routing.
So you go for Cloud VPN
if you want to connect on-premise network
to the GCP network, or internet using a IPSec VPN tunnel.
What other options are present?
The other option you have is Cloud Interconnect.
This is high speed physical
direct connection between on-premise and VPC networks.
This provides you with high availability
and high throughput.
Two types of connections are possible.
One is dedicated interconnect.
This is available in 10 Gbps
or a hundred Gbps configurations.
The other option is partner interconnect.
This is shared connection, and this is available
in 50 Mbps to 10 Gbps configurations.
You'd want to have a really high speed physical connection
then you would need to go for dedicated interconnect.
Otherwise, you can go for a partner interconnect.
The data exchange in the case of Cloud Interconnect
happens through a private network.
In the case of cloud VPN, it happens to a public network.
It happens through internet.
However, with Cloud Interconnect
the data exchange happens through a private network.
If you want to communicate from on-premise network
to the resources which are present inside the VPC
you can use the VPC networks internal IP addresses.
This would reduce the egress cost
because the traffic goes through a private network
as the public internet is not used.
Cloud Interconnect also allows you to access
supported Google APIs and services
privately from on-premise applications.
So if you want to talk privately to Google APIs and services
from your on-premise, you can go for Cloud Interconnect.
Cloud Interconnect is recommended for high bandwidth needs.
If you have low bandwidth needs,
then Cloud VPN is recommended.
The third option that you can establish
a hybrid cloud with is direct peering.
This is used to connect customer network to Google network
using something called network peering.
This is a direct path from on-premise network
to Google services.
Remember that direct peering is not a GCP service.
This is a lower level network connection outside of GCP
and therefore direct peering is typically not recommended.
The recommended options typically are Cloud Interconnect
and Cloud VPN.
In this chapter we looked at
some of the ways you can establish a Hybrid Cloud.