DevOps-Security-Agent-Skills/infrastructure/cloud-gcp/gcp-networking/SKILL.md

name, description, license, metadata

name	description	license	metadata
gcp-networking	Configure VPCs, firewall rules, and Cloud NAT. Implement shared VPC and private service connect. Use when designing GCP network infrastructure.	MIT	author version devops-skills 1.0

GCP Networking

Design and implement GCP network infrastructure.

Create VPC

gcloud compute networks create my-vpc --subnet-mode=custom

gcloud compute networks subnets create my-subnet \
  --network=my-vpc \
  --region=us-central1 \
  --range=10.0.0.0/24

Firewall Rules

gcloud compute firewall-rules create allow-http \
  --network=my-vpc \
  --allow=tcp:80,tcp:443 \
  --source-ranges=0.0.0.0/0 \
  --target-tags=http-server

gcloud compute firewall-rules create allow-internal \
  --network=my-vpc \
  --allow=tcp,udp,icmp \
  --source-ranges=10.0.0.0/8

Cloud NAT

gcloud compute routers create my-router \
  --network=my-vpc \
  --region=us-central1

gcloud compute routers nats create my-nat \
  --router=my-router \
  --region=us-central1 \
  --nat-all-subnet-ip-ranges \
  --auto-allocate-nat-external-ips

Best Practices

• Use Shared VPC for multi-project
• Implement Cloud Armor for DDoS
• Use Private Google Access
• Enable VPC Flow Logs