One of your most important decisions when creating a GKE cluster is deciding whether it will be public or private. Public Clusters are assigned with public and private IP addresses both and they can be accessed anywhere on the internet. However, on the other hand, Private clusters are assigned with…

In this tutorial, I will be explaining the AWS transit gateway with a quick demo. We will deploy two VPCs and establish connections between them using the TGW. The Transit gateway acts like a hub and spoke model where each spoke VPC connects to the single gateway from where the…

In this tutorial, we will see the 3 most important terraform commands that use very frequently in organizations. terraform state rm: As the name tells to remove something from the state file. The terraform state file is used to track the bindings between resource instance addresses in your configuration and…

HTTP(S) load balancer: Google pushed the load balancing to the edge of their global network and they came up with a single global anycast virtual IP that front-ends worldwide capacity. In load balancing, you have something called the front end and you have something called the back end. In the front end, you…

Jenkins is an open-source automation tool for Continuous Integration (CI) and Continuous Deployment (CD). It is a server-based system that runs in servlet containers like Apache Tomcat. …

Google Cloud Armor is a network security service that provides defense against DDoS and application attacks. It offers a rich set of WAF rules. WAF is Web Application Firewall. …

VPC peering allows two networks(VPC) to connect with each other so that resources in the networks can communicate internally without having to go over to the internet. …

Welcome to my blog. In this tutorial, we will deploy and test VPC service controls using terraform ways to protect storage APIs with a very simple example. Basically, we will create a service/defense perimeter around the cloud storage so that no one can access it from the internet. Access from…

Network Address Translation: Imagine you have a multi-tiered application set up in the cloud and an updated server in Private Subnet.You want to allow your instances outbound access to the Internet for updates, patching, config management, and more without having an external IP address. As a result, you can keep your instances entirely…