Google Professional Cloud Network Engineer Question 196
Single answerGoogle Cloud PlatformYou are designing a network for a hybrid cloud architecture where your Google Cloud environment needs to communicate securely with your on-premises data center. The on-premises environment uses RFC 1918 IP addresses, and the network team has informed you that there is an overlap with one of the Google Cloud subnets you plan to use. To resolve this issue, what is the most appropriate IP addressing strategy for your Google Cloud network?
- A
Use non-RFC 1918 IP addresses in Google Cloud to avoid overlap with on-premises RFC 1918 ranges.
- B
Configure privately used public IP (PUPI) addresses in Google Cloud for internal communication.
- C
Use a different RFC 1918 range in Google Cloud that does not overlap with the on-premises network.
- D
Implement Cloud NAT to translate overlapping RFC 1918 addresses in Google Cloud to unique external IPs.
Show answer and explanation
Correct answer: C
Explanation
When designing a hybrid network, it is critical to ensure that IP ranges in Google Cloud and on-premises environments do not overlap to avoid routing conflicts. The best practice is to select a different RFC 1918 range in Google Cloud that does not overlap with the on-premises network, as RFC 1918 ranges are reserved for private use and are widely supported in hybrid and multi-cloud architectures. This approach avoids unnecessary complexity while maintaining secure, internal communication.
- A. Incorrect.
Non-RFC 1918 IP addresses are public IPs and are not intended for private internal communication. Using public IPs internally could lead to security and cost concerns.
- B. Incorrect.
Privately used public IP (PUPI) addresses are typically used in rare edge cases where public IPs are needed for internal communication, but they are not ideal for resolving overlapping RFC 1918 ranges. Additionally, they are not explicitly supported by Google Cloud as a primary addressing strategy.
- C. Correct.
Using a different RFC 1918 range in Google Cloud that does not overlap with the on-premises network is the most straightforward and scalable solution to avoid conflicts in a hybrid architecture.
- D. Incorrect.
Cloud NAT helps in translating internal IPs to external IPs for outbound internet traffic, but it does not resolve issues related to overlapping RFC 1918 addresses within a private network.