Cloud VPN
Securely connect your on-premises or remote networks to Google Cloud using encrypted IPsec VPN tunnels.
What is Cloud VPN?
Cloud VPN is a fully managed service from Google Cloud that enables you to securely connect your on-premises network, branch offices, or other cloud environments to your Google Virtual Private Cloud (VPC) network. It uses industry-standard IPsec (Internet Protocol Security) VPN tunnels to encrypt traffic as it traverses the public internet, ensuring data privacy and integrity between connected sites.
With Cloud VPN, organizations can extend their private network into Google Cloud, enabling hybrid cloud architectures, secure data migration, and seamless connectivity for distributed applications. The service supports both Classic VPN and High Availability (HA) VPN, offering flexibility, redundancy, and scalability for a wide range of enterprise networking needs.
Architecture
Key Components
Cloud VPN Gateway
A managed gateway resource in Google Cloud that terminates IPsec tunnels and handles encrypted traffic between your VPC and external networks.
IPsec Tunnel
A secure, encrypted tunnel established between the Cloud VPN gateway and a peer gateway (on-premises or another cloud), ensuring privacy and integrity of data in transit.
Peer Gateway
The remote VPN device or service (such as a physical firewall, router, or another cloud VPN) that connects to the Cloud VPN gateway to form the tunnel.
Key Capabilities
High Availability
Supports HA VPN with automatic failover and redundancy for mission-critical workloads.
Strong Encryption
Uses industry-standard IPsec protocols and robust encryption algorithms to protect data in transit.
Global Reach
Connects distributed sites, branch offices, and multi-cloud environments to Google Cloud from anywhere in the world.
Managed Service
Fully managed by Google Cloud, reducing operational overhead and simplifying setup and maintenance.
Common Use Cases
Related Topics
Test Your Knowledge
Score 8/10 or higher to pass
You need to be logged in to take this quiz.
Login to Continue