GCP

GCP Design

Introduction

GCP: Compute + Storage + Networking + BigData + Machine Learning
Cloud Computing: On-Demand + Broad Network Access + Resource Pooling + Elasticity + Measured Services (Pay per use)
History <-> Future: On Perm -> Virtual -> Serverless
Compute: (Managed Infra) <- Compute Engine (IaaS) - Kubernetes Engine (Hybrid) - App Engine (PaaS) - Cloud Functions (Serverless) - Managed Services (Automated Elastic Resource) -> (Dynamic Infra)
Environmental Concerns - 0 Carbon Emission and 100% Renewable Energy
Encryption at Rest, In Transition, DDoS, Google Frontend Test for Vulnerablilities
Built on OpenAPIs like kubernetes, Hadoop, Apache HBase which are opensource

Physical Infrastructure

Global System (Internet) -> Points of Presence (Edge Locations and CDNs) -> Global (Private Global Network) -> Multi Region -> Region (Each region separated by 160KM/100Miles) -> Zones (Think of them as separate facilities) -> Datacenters -> Rack -> Physical Server -> vCPU (2vCPU = 1 core)

Cloud Platform Hierarchy

Organization Nodes -> Folders (It is must to have org node to create folders) -> Projects -> GCP Resources
- Policies are inherited from top (eg. Org node), with more generous of them taking precedence (consider it binary OR of access level)
- Org node can be create by using Cloud Identity
- Billing is per project basis
Compute Resources, IAM, least privilige, raw compute to managed services, access using web console/cli-tools/iOS/Android/APIs
Resources are allocated based on PROJECTS which can be grouped under FOLDERS

Network Ingress and Egress

Normal Network: Routes via internet to edge location closets to destination, available at lower price
Google: Routes so traffic enters from @edge closest to source
- Single global IP address and loadbalance worldwide
- AWS only supports Normal network

Pricing

Network Traffic: Ingress Free, Egress charged per GB
- egress to a gcp service in a region is sometimes free
Services: Usage, Provisioned
Discounts: Pay by second, Sustained Use discount, Cutomize compute resources or use out of box

Security

Seperation of duties
Encryption at rest, in transition even within gcp network, DDoS, Google Frontend Test for Vulnerablilities
Recommends: Distrust the network

Useful commands

# Project Quota
gcloud compute project-info describe --project <project-id>

Resources

Script to fetch Resources list from acg

[...document.getElementsByClassName('course-viewer--sidebar-course'), ...document.getElementsByClassName('course-viewer--resource-list')]
  .map((n) => {
        return [...n.querySelectorAll('h3'), ...n.querySelectorAll('a')].map((n) => {
          return (n.text ? '- [' : '### ') + (n.text||n.innerText || '').replace(/\s+/gm, ' ').trim() + (n.text ? '](' + n.href +')' : '')
        })
  })
  .reduce((acc, n) => acc.concat(n), [])
  .join("\n")

cdtiwari-ebi / gcp Goto Github PK

gcp's Introduction

GCP

GCP Design

Introduction

Physical Infrastructure

Cloud Platform Hierarchy

Network Ingress and Egress

Pricing

Security

Useful commands

Resources

Script to fetch Resources list from acg

gcp's People

Contributors

Watchers

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent