Cloud Interconnect & VPN

Connecting your on-premises network to GCP is a fundamental requirement for hybrid cloud architectures. GCP offers several connectivity options: Cloud VPN for encrypted tunnels over the internet, Dedicated Interconnect for private, high-bandwidth connections, and Partner Interconnect for private connections through a service provider. Choosing the right option depends on bandwidth needs, latency requirements, cost, and how quickly you need the connection.

---

Cloud VPN

Cloud VPN provides encrypted IPsec tunnels between your on-premises network and your GCP VPC over the public internet. It is the quickest and most cost-effective way to establish hybrid connectivity.

HA VPN (Recommended)

HA VPN provides a 99.99% SLA with two interfaces and automatic failover:

• Two VPN interfaces on the GCP side, each with its own external IP.
• You create tunnels from each interface to your on-premises VPN device.
• If one tunnel goes down, traffic fails over to the other.

# Create an HA VPN gateway
gcloud compute vpn-gateways create my-ha-vpn \
  --network=my-vpc \
  --region=europe-west2

# Create a Cloud Router for BGP
gcloud compute routers create my-router \
  --network=my-vpc \
  --region=europe-west2 \
  --asn=65001