🔵 Networking & Load Balancing

VPC, Firewall Rules, Load Balancers, Cloud CDN, Cloud DNS

Google Cloud ACE · ACE · ⏱️ 20 min · ❓ 5 savol

🌐 VPC (Virtual Private Cloud)

GCP VPC — global resource (AWS da regional). Subnet — regional. Auto mode vs Custom mode VPC. Shared VPC — bir VPC ni bir nechta project ishlatishi. VPC Peering — ikki VPC ni ulash. Cloud VPN / Cloud Interconnect — on-premises ulash.

🔥 Firewall Rules

VPC darajasida, ingress/egress. Priority 0-65535 (past = yuqori priority). Default: ingress deny, egress allow. Tags va Service Account asosida target belgilash. Implied rules: default-allow-internal, default-allow-ssh, default-allow-rdp.

⚖️ Load Balancers

HTTP(S) LB — global, Layer 7, URL-based routing, Cloud CDN integration
TCP/SSL Proxy LB — global, Layer 4
Network LB — regional, Layer 4, non-proxied
Internal LB — internal traffic, TCP/UDP yoki HTTP(S)

📊 GCP Load Balancer Turlari

LB Turi	Scope	Layer	Protokol	CDN
HTTP(S) LB	Global	Layer 7	HTTP/HTTPS	✅ Ha
SSL Proxy LB	Global	Layer 4	SSL/TCP	❌ Yo'q
TCP Proxy LB	Global	Layer 4	TCP	❌ Yo'q
Network LB	Regional	Layer 4	UDP/TCP	❌ Yo'q
Internal LB	Regional	Layer 4/7	TCP/UDP/HTTP	❌ Yo'q

💡 Asosiy nuqtalar

GCP VPC global, Subnet regional
Firewall: ingress default deny, egress default allow
HTTP(S) LB: global, Layer 7, CDN
Network LB: regional, Layer 4
Cloud CDN: HTTP(S) LB bilan integratsiya
Shared VPC: cross-project networking

🎯 Imtihon maslahatlari

"Global, Layer 7, CDN" → HTTP(S) Load Balancer. "Regional, Layer 4" → Network LB
Shared VPC: bir project VPC host, boshqalar service project — centralized networking
VPC Peering: ikki VPC ulash, lekin transitif emas (A↔B, B↔C ≠ A↔C)
Cloud Armor — HTTP(S) LB bilan birga DDoS protection va WAF
Private Google Access — subnet dagi VM lar public IP siz GCP APIlarga murojaat qilish

⚠️ Ko'p adashadigan

GCP VPC = Regional deb o'ylash — GCP VPC GLOBAL, faqat subnets regional
Network LB CDN qo'llash mumkin deb o'ylash — faqat HTTP(S) LB CDN qo'llab-quvvatlaydi
VPC Peering transitif deb hisoblash — A↔B va B↔C bo'lsa ham A↔C yo'q

🧠 Eslab qolish: "GCP VPC = Global Village, AWS VPC = Regional Ranch" — GCP VPC global, AWS VPC regional. "HTTP=High Traffic Performance" — HTTP(S) LB global Layer 7