GCP (Basic: Part 2)

Step 1: Create two VPC using Google Cloud

VPC 1:

VPC 2:

Step 2: Create Instances With Private and Public Subnet Network

User -> IAP -> VM

Identity-Aware Proxy (IAP) is a security feature offered by various cloud platforms, including Google Cloud Platform (GCP). It provides an additional layer of security for web applications and services by controlling access based on user identities and context.

IAP helps protect against unauthorized access and ensures that only authorized users can access your web applications and services. It's particularly useful for cloud-based applications that need to be accessible to users from various locations while maintaining strong security measures.

SNAT stands for "Source Network Address Translation." It's a networking technique used in computer networks to modify the source IP address of packets as they pass through a router or firewall. SNAT is commonly used to enable multiple devices on a local network to share a single public IP address when communicating with external networks, such as the internet.

Step 3: Create Cloud NAT with Router

Step 4: Enable Identity Aware Proxy, Create App and Give Access

Ip is matching

Day 2:

Step 5: Create Firewall Rule and telnet to VM with public subnet

The command nc -l -p 80 uses the nc (netcat) utility to listen on port 80 for incoming connections. It's a simple way to create a network server that listens for connections on a specific port.

Step 6: Create New Instance with Private Subnet with External Ip

What we will trying to figure out

nslookup, traceroute m

GCP Private network will need NAT, Cloud Router but Public network just need External IP