This picture is in the https://cloud.google.com/architecture/blueprints/security-foundations/networking
I think first NAVs should do deep package inspection and other purposes, if no problem, after that, Cloud Load Balancing just can distrubute request.
Solved! Go to Solution.
Hi @anlex_N,
I want to ask: one Cloud Router service support only one VLAN attachment?
No, a single Cloud Router service in Google Cloud can support multiple VLAN attachments.
A single Cloud Router can manage BGP sessions for multiple VLAN attachments, as long as they are in the same region and VPC network. This allows the Cloud Router to advertise routes and learn routes from multiple VLAN attachments. While a Cloud Router can support multiple VLAN attachments, all VLAN attachments associated with a single Cloud Router must belong to the same VPC network and region.
multiple Cloud Router service in one region can share one subnet?
Yes, multiple Cloud Router services in the same region can share a subnet, but with important considerations, BGP Configuration, Route Priority and Resource Isolation.
I think the original phrase is all good for me since it is also stated that “This diagram shows only the production environment, but the same pattern is repeated for each environment.”
Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.