Google Cloud

Networking Commands

Design and manage Google Cloud networking. Create VPC networks, subnets, firewall rules, Cloud NAT, DNS zones, and load balancers.

10 commands

Pro Tips

Use custom-mode VPCs for production to control subnet CIDR ranges precisely.

Cloud NAT lets private VMs access the internet without public IPs.

Use Shared VPC to connect resources across projects while centralizing network management.

Common Mistakes

Default network has permissive firewall rules. Delete default network in production projects.

Deleting a VPC requires removing all resources (VMs, GKE clusters) using it first.

Commands

Add DNS Record

$ gcloud dns record-sets create <domain>. --zone=<zone> --type=A --ttl=300 --rrdatas=<ip>

Create a DNS record in a managed zone

Create DNS Zone

$ gcloud dns managed-zones create <name> --dns-name=<domain>. --description=<desc>

Create a Cloud DNS managed zone

List Static IPs

$ gcloud compute addresses list

List all reserved static IP addresses

Reserve Static IP

$ gcloud compute addresses create <name> --region=<region>

Reserve an external static IP address

Create HTTP Load Balancer

$ gcloud compute url-maps create <name> --default-service=<backend-service>

Create a URL map for HTTP(S) load balancing

Create Cloud NAT

$ gcloud compute routers nats create <name> --router=<router> --region=<region> --auto-allocate-nat-external-ips --nat-all-subnet-ip-ranges

Create Cloud NAT for outbound internet access from private VMs

Create Subnet

$ gcloud compute networks subnets create <name> --network=<vpc> --region=<region> --range=10.0.0.0/24

Create a subnet in a VPC network

List Subnets

$ gcloud compute networks subnets list

List all subnets across all VPC networks

Create VPC Network

$ gcloud compute networks create <name> --subnet-mode=custom

Create a custom VPC network

List VPC Networks

$ gcloud compute networks list

List all VPC networks in the project