A flat network places all resources using one VPC on the same network. In a small GCP environment, this simplifies administration and lets resources communicate without additional connection configuration, subject to security rules. section 10.1.1
Control connectivity at multiple layers:
- Use VPC firewalls at the network layer. section 10.1.1
- Use Kubernetes NetworkPolicies inside the Kubernetes dataplane. section 10.1.1
- Use Anthos Service Mesh authentication and authorization policies at the service-mesh layer. section 10.1.1
Small GCP environment
A company keeps several teams and Anthos resources in one GCP project and one VPC. The shared flat network reduces network administration, but growth can expose VPC limits and prevent a multiproject design. section 10.1.1
Shows the single-VPC architecture that produces a flat network in GCP. section 10.1.1
