VPC firewall rules in Google Cloud Platform

[@9819960437]

By default deny rules take precedence over allow rules of the same priority.

[@croppycoo1668]

So firewall rules can target the entire VPC or specific tags. But how would I create a firewall rule that targets only a specific subnet?

[@RajaArvapalli]

In Google Cloud Platform (GCP), firewall rules are evaluated based on their priority and the action they take (allow or deny). When two firewall rules have the same priority, the deny rule takes precedence over the allow rule. This means that if there is a conflict between an allow and a deny rule with the same priority, the traffic will be denied.

[@diogenesesanto]

When you have allow and deny firewall rules with the same priority, the deny rules take precedence over the allow rules.

[@rachpalsingh3498]

Super useful as always. Thanks for sharing.

[@akshayeonline]

For a REST API request from GCP compute to internet do we need to enable both egress and Ingress ?

[@readersclub93]

Does adding tons of firewalls rules with many parameters over a large global network, can slow down traffic by some milisecs ? You mentioned something over stateful nature of firewall, does it play a part in reducing the calc time for every ingres, egress transfer ?

[@samgarvis4509]

Super insightful, thank you!

[@sumanthanumula8048]

DENY TAKES PRIORITY

[@vamsikrishnag1417]

Nice architecture GK.. thanks a lot for explanation.. It is easy to understand how the firewall rules can configure and work.

[@CloudAdvocate]

Thanks Vamsi.

[@srikanthjangamgari7316]

Well explained..... Thank you Bro.

[@ilarums]

1. If you have 2 firewall rules with the same priority one allow and another deny and then firewall rule with the action deny will take precedence

[@CloudAdvocate]

Nailed it!!

[@ilarums]

@@CloudAdvocate Like your videos simple and easy to understand

[@CloudAdvocate]

Thank you, I love to keep it simple.

[@FirasALTAIE]

Deny rule has a priority over allow rule

[@CloudAdvocate]

Yesss!!

[@nyshashinde8926]

Deny rule give the most priority. I need a suggestion from you actually I am preparing for Associate cloud engineer certification. On which part I work the most means like deep divd about the apps or resources, or focusing on installation and IAM rules and many more that, I am little confuse about that.

[@albyjd2393]

Thanks for the lesson.

[@ShauryaShresht]

1. Firewall Policy vs Firewall Rule (Where to use which one and why) 2. Create Firewall Policy and Implement it for Hybrid use case (Typically customer has dev and prod projects, hence a implement it considering both project) 3. Rules, Policy and Association (Understand use case in detail) 4. Automation of this using terraform (Hierarchical Firewall Policy Automation with Terraform | Google Cloud Blog) can you make a documentation on these ? Need help in understanding clearly kindly look into it, if you can answer all of them.

[@singarareddybathula2434]

I am looking for GCP training. are you provide gcp training.

[@christianibiri]

I love your videos and channel, please do more stuff about GCP!

[@CloudAdvocate]

Thank you! Will do!

[@oldguywholifts]

Well explained... brilliant!

[@CloudAdvocate]

Glad you liked it!

[@enugurthisahithi2350]

This is so helpful.

[@EshwarNorthEast]

The effort you put in delivering knowledge is lit 🤩

[@CloudAdvocate]

Thank you!!

[@nila_g]

Hi GK I am currently working as a database administrator(Progress DBA..its a RDBMS). I want to shift to a cloud career and I am interested in GCP but I am confused about how to proceed. Can you suggest me a cloud course ?

[@MaheshVelicheti]

Explanation is in detail GK bro.thanks for sharing the information.

[@CloudAdvocate]

Thanks Mahesh.

[@pxiao1]

could u explain more about ssh, icmp and rdp? :)

[@mayurnarkhede8839]

Thanks for wonderful video and explanation. Can I get more complex examples as you said it is stateful.

[@mohammedmustafaali1049]

Thanks very much, this is very helpful

[@CloudAdvocate]

You're welcome!

[@sivasankar8560]

Nice explanation 👍

[@CloudAdvocate]

Thank you!

[@Mohit-gb9dv]

Do you need app devlopment knowledge to get into cloud ..? Plz reply

[@CloudAdvocate]

No

[@arnab022]

I currently work as a network engineer, I am interested to shift to cloud, any tips please?

[@CloudAdvocate]

Arnab try to look into the content of network engineer certification for cloud.

[@andersonmora769]

We need geoip in firewall rules, define ranges is exhaustive.

[@sachinmengade9589]

Superb Stuff @GK :) I always like the way you explain the things :)

[@shashank2509]

deny will take precedence i guess

[@rajaarvapalli7536]

Totaly confused