Cloud VPN securely connects a peer network to a Google Cloud VPC through an IPsec VPN tunnel over the public internet. One VPN gateway encrypts traffic, and the other decrypts it, extending network connectivity across infrastructure environments. section 10.3.2 section 10.5
Use Cloud VPN as one option for connecting multi-cloud or hybrid environments:
- Connect Anthos environments to GCP when the environments require network-level connectivity between infrastructure networks. section 10.1.2
- Choose Cloud VPN for low-volume data connections that need encryption across the public internet. section 10.5
- Prefer Dedicated Interconnect when the design requires a direct, highly available, low-latency connection or large data transfers. section 10.1.2 section 10.5
- Distinguish network-level VPN connectivity from public-internet service connectivity, where TLS or mTLS secures service-to-service traffic through Anthos Service Mesh. section 10.3.2
Hybrid Anthos connectivity
An Anthos deployment spanning GCP and an on-premises or non-GCP environment can use Cloud VPN to connect the peer network with the GCP VPC. After network reachability is established, services in multiple Anthos clusters can communicate when the target cluster's Kubernetes API server and external public load balancer are reachable. section 10.3.2 section 10.5
