VPC firewall rules in Google Cloud Platform

Does adding tons of firewalls rules with many parameters over a large global network, can slow down traffic by some milisecs ?
You mentioned something over stateful nature of firewall, does it play a part in reducing the calc time for every ingres, egress transfer ?

For a REST API request from GCP compute to internet do we need to enable both egress and Ingress ?

1. Firewall Policy vs Firewall Rule (Where to use which one and why)

2. Create Firewall Policy and Implement it for Hybrid use case (Typically customer has dev and prod projects, hence a implement it considering both project)
3. Rules, Policy and Association (Understand use case in detail)
4. Automation of this using terraform (Hierarchical Firewall Policy Automation with Terraform | Google Cloud Blog)


can you make a documentation on these ? Need help in understanding clearly kindly look into it, if you can answer all of them.

Super useful as always. Thanks for sharing.

Super insightful, thank you!

So firewall rules can target the entire VPC or specific tags. But how would I create a firewall rule that targets only a specific subnet?

Hi GK
I am currently working as a database administrator(Progress DBA..its a RDBMS). I want to shift to a cloud career and I am interested in GCP but I am confused about how to proceed. Can you suggest me a cloud course ?

Thanks for the lesson.

I am looking for GCP training. are you provide gcp training.

could u explain more about ssh, icmp and rdp? :)

Thanks for wonderful video and explanation. Can I get more complex examples as you said it is stateful.

Totaly confused

Superb Stuff @GK :) I always like the way you explain the things :)

deny will take precedence i guess

Deny rule give the most priority. I need a suggestion from you actually I am preparing for Associate cloud engineer certification. On which part I work the most means like deep divd about the apps or resources, or focusing on installation and IAM rules and many more that, I am little confuse about that.

Well explained..... Thank you Bro.

This is so helpful.

Well explained... brilliant!

Nice architecture GK.. thanks a lot for explanation.. It is easy to understand how the firewall rules can configure and work.

We need geoip in firewall rules, define ranges is exhaustive.

Thanks very much, this is very helpful

I love your videos and channel, please do more stuff about GCP!

Do you need app devlopment knowledge to get into cloud ..? Plz reply

By default deny rules take precedence over allow rules of the same priority.

Deny rule has a priority over allow rule

I currently work as a network engineer, I am interested to shift to cloud, any tips please?

1. If you have 2 firewall rules with the same priority one allow and another deny and then firewall rule with the action deny will take precedence

The effort you put in delivering knowledge is lit 🤩

Amazing architecture diagrams✒...very helpful👌👌

Explanation is in detail GK bro.thanks for sharing the information.

Nice explanation 👍