In this article you’ll learn how to use some basic features introduced by the new GCP firewall (aka Firewall 3.0), in particular secure tags. If you just landed on this page and you know little to nothing about these topics, I strongly recommend reading the previous article and some documentation first…

It’s been some time since Firewall 3.0 and secure tags are out but I still often see some confusion when it comes to understanding how they work. …

“I perfectly understand how GCP routing works!”. This is what I keep repeating myself every time I start a new network design. …

Today I decided to play a bit with GKE and see how to expose a simple demo application through the default GKE ingress. To me, what exposing an application in a production environment means is (at the very minimum…): Exposing my application on HTTPS only Redirect any HTTP connection to…

TL:DR The article provides an overview of Google Cloud VPC network peerings, their anatomy, major misconceptions, and some watchpoints, so that users can learn how to use them wisely, while designing their infrastructures. Context Virtual Private Cloud (VPC) peerings allow to connect multiple VPC networks at high speed, low latency and no…

TL;DR The article shows how to connect to the control plane of a GKE private cluster, leveraging a proxy and an IAP tunnel. Related Work and Motivations While writing this article, I’ve found some interesting work, which I’d like you to consider as complementary to this one, and which is definitely worth to review, before…

TL;DR: Migrating applications gradually between Kubernetes deployments so that intra-cluster traffic is not affected, can be challenging. This article proposes an approach that makes use of standard but powerful tools. Raise the hand who has never had to migrate applications between two Kubernetes clusters! Easy, right? Well, not really. …