Welcome to the Networking in Google Cloud: Routing and Addressing course.

Course Introduction

Welcome to Networking in Google Cloud

Distributed Denial of Service (DDoS) Protection. Distributed Denial of Service Attacks are a major concern today and can have a huge impact on businesses if the business is not adequately prepared. In this module we will begin with a quick discussion on how DDoS attacks work and then review some DDoS mitigation techniques that are provided by Google Cloud.  We will finish up with a review of complementary partner products and a lab where you will get a chance to see some DDoS mitigations in action.

Module Introduction

How DDoS attacks work

Google Cloud mitigations

Types of complementary partner products

Lab Intro Configuring Traffic Blocklisting with Google Cloud Armor

Configuring Traffic Blocklisting with Google Cloud Armor

Debrief

Quiz — Question 1

Quiz — Question 2

Distributed Denial of Service (DDoS) Protection

This module covers protecting your Google Cloud network infrastructure with Cloud Firewall, Cloud IDS, and Secure Web Proxy.

IAM roles

Firewall rules

Lab Intro Configuring VPC Firewalls

Configuring VPC Firewalls

Cloud IDS

Lab Intro Getting Started with Cloud IDS

Implement Advanced Threat Protection

Secure Web Proxy

Controlling Access to VPC Networks

This module provides an overview of packet mirroring for enhanced network security. Learn how to leverage this tool for traffic inspection, threat detection, and troubleshooting. We'll also cover essential network security best practices and test your knowledge with a quiz.

Packet Mirroring for network traffic inspection

Network security best practices

Advanced Security Monitoring and Analysis

Networking in Google Cloud: Network Security Course Resources

Course Resources

Welcome to the fourth course of the "Networking in Google Cloud" series: Network Security! In this course, you'll dive into the services for safeguarding your Google Cloud network infrastructure. The first module, Distributed Denial of Service (DDoS) Protection, covers how to fortify your network against Distributed Denial of Service (DDoS) attacks, ensuring uninterrupted availability of your services. In the second module, Controlling Access to VPC Networks, you'll learn the network access control, enabling you to define permissions for who can access your resources and how. Finally, in the third module, Advanced Security Monitoring and Analysis, we'll explore how to proactively detect and respond to potential threats, keeping your Google Cloud environment secure and resilient. By the end of this course, you'll have a comprehensive understanding of Google Cloud network security.

<h2>Secure Your Google Cloud Network</h2>A well-designed network still needs strong defenses. This fourth course in the Networking in Google Cloud series focuses on the services Google Cloud provides to protect your network infrastructure from attacks and misuse.<br><br><h2>Defend Against DDoS Attacks and Control Access</h2>You’ll start with distributed denial-of-service (DDoS) protection, learning how Google Cloud mitigates these attacks and how to use Google Cloud Armor to block unwanted traffic. You’ll then configure VPC firewall rules to control exactly which traffic can reach your resources.<br><br><h2>Detect Threats and Inspect Traffic</h2>The course moves on to proactive monitoring. You’ll deploy Cloud IDS and tune it to your security requirements, use Packet Mirroring to inspect and analyze network traffic, and review network security best practices. By the end, you’ll have a solid understanding of Google Cloud network security and be able to detect and respond to threats before they cause damage.

Networking in Google Cloud: Network Architecture

Protect Google Cloud networks with DDoS defenses, Cloud Armor, firewall rules, Cloud IDS, and Packet Mirroring.

Networking in Google Cloud: Network Security

Networking in Google Cloud

Configuring Traffic Blocklisting with Google Cloud Armor

Networking in Google Cloud: Network Security

Exercise instructions