Micro-segmentation
In this section, we will look at some micro-segmentation techniques. We will cover topics such as how to create subnets, define custom routing, and use firewall rules that can help in creating segmentation in your network.
Subnets
Creating subnets for different types of workloads is a key micro-segmentation strategy. In this section, we will look at what types of subnets you can create and how to apply those subnets to your network design. Irrespective of what type of subnet you create, whether using auto mode or custom mode, on Google Cloud there are two types of Classless Inter-Domain Routing (CIDR) ranges: primary and secondary. Let us look at Figure 7.16 to better understand the difference between the two and when to use one over the other.
Figure 7.16 – Subnet CIDR ranges
The primary CIDR range is mandatory in a subnet; the secondary range is optional. The VMs, load balancers, and so on get IP addresses from the primary...
