VPC

As explained in Google Anthos in Action

A virtual private cloud (VPC) is an isolated virtual network that provides address ranges, routing, and connectivity for cloud resources.

A virtual private cloud (VPC) provides the network environment in which cloud resources are placed. For Anthos on GCP, the VPC design determines how resources connect, how teams share infrastructure, and how the platform scales operationally. section 10.1.1

Choose the VPC topology according to organizational structure, project boundaries, and expected scale:

• Use a single VPC for a small environment contained in one GCP project. It creates a flat network, simplifies administration, and permits communication subject to security rules. section 10.1.1
• Use shared VPC or multiple VPCs when separate projects, teams, or larger organizational requirements make one flat network insufficient. section 10.1.1 section 10.5
• Treat the initial choice as an operational decision: a simple design may later encounter VPC limits, creating scalability and management consequences. section 10.1.1

Layer connectivity controls rather than relying on network placement alone:

• Apply VPC firewalls at the network layer, Kubernetes NetworkPolicies inside the Kubernetes dataplane, and Anthos Service Mesh authentication and authorization policies at the service-mesh layer. section 10.1.1
• Connect networks through Dedicated Interconnect for large data transfers, Cloud VPN for lower-volume encrypted connections, or the public internet with TLS/mTLS service-to-service protection. section 10.5

Figure 10.2 Single VPC architecture in GCP

Inspect the single-VPC architecture to see the flat-network arrangement for resources in one GCP project. section 10.1.1

Figure 10.3 Shared VPC architecture in GCP

Compare the shared-VPC architecture when network resources and organizational projects require a shared design. section 10.1.1

Figure 10.4 Multiple VPC architecture in GCP

Compare the multiple-VPC architecture for environments that separate networks according to organizational or functional requirements. section 10.1.1

How Google Anthos in Action covers it

How deep it goes

Explains topology choices, layered controls, and hybrid connectivity, but stops short of detailed VPC configuration procedures.

Examples

Uses single, shared, and multiple VPC architectures plus Interconnect, VPN, and public-internet connectivity scenarios.

What you can do after

Operate/configure a VPC topology and select layered security and hybrid-connectivity mechanisms for an Anthos deployment.

How it connects

Connects VPCs with shared VPC, Kubernetes networking, VPC firewalls, NetworkPolicies, service mesh, Cloud VPN, and Dedicated Interconnect.

liveBookmanning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Amazon Web Services in Action, Third Edition: An in-depth guide to AWSAmazon VPC is a logically isolated virtual network for resources in AWS.
• 

  liveBookmanning.com
  Effective Platform EngineeringA virtual private cloud is an isolated logical network within a public cloud that contains configurable address space, subnets, routing, and connectivity controls.
• 

  liveBookmanning.com
  Secure APIsA virtual private cloud is an isolated virtual network environment provided within a cloud platform.

Compare how 4 books explain VPC →

Related concepts

• subnetworkhas part · A subnetwork is a logical subdivision of an IP network with its own address range, routing scope, and network configuration.
• vpc-native clusterused by · A VPC-native cluster is a Kubernetes cluster whose pod and service networking is integrated with a cloud provider's virtual private cloud routing.
• private endpointused by · A private endpoint is a network interface that provides private connectivity to a cloud service through a private network address without exposing traffic to the public internet.
• role-based network structureused by · A role-based network structure organizes clusters and their networks according to operational roles such as production, nonproduction, and preview.
• VPC peeringused by · VPC peering is a cloud networking capability that privately connects separate virtual private clouds by enabling traffic routing between them.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.