GCP Cloud Fundamentals: Core Infrastructure

By Bhushan Nikhar

GCP cloud infrastructure concept

Here's a guide to learning fundamental concepts of core infrastructure related to Google Cloud Platform (GCP). This is ideal for someone new to the GCP ecosystem and a good first starting point.

Core Infrastructure Concepts

  • What is cloud computing?
  • What is IaaS, PaaS, SaaS?
  • Google Cloud Network (regions, zones, edge locations)
  • Security layers in GCP

What is Cloud Computing?

  • Anyone can demand resources without manual interaction.
  • Resources can be pooled to pass savings on to users.
  • Resources can scale up or down based on demand.
  • Resource allocation abstracts physical location concerns.
  • Resources are billed based on usage or allocation.

What is IaaS, PaaS, and SaaS?

IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service) are service models in cloud computing.

Google Cloud Network

GCP's global network includes:

  • Regions: Geographical locations containing multiple zones.
  • Zones: Isolated data centers within a region.
  • Edge locations: Locations closer to users for lower latency.

Security Layers in GCP

GCP uses a multi-layered approach to security:

  1. Hardware & Peripheral Level: Custom hardware, secure boot stack, and premises security.
  2. Service Deployment Layer: Encrypted RPC calls between services; intra-data center communication secure.
  3. User Identity Layer: Identity management and support for multi-factor authentication (2FA).
  4. Storage Level: Encryption of data at rest and in transit.
  5. Internet Communication Layer: Google Front End with public-private key pairs and X.509 certificates. Protects against DoS attacks.
  6. Operational Security Layer: Intrusion detection, insider risk reduction, U2F enforcement for employees, and secure software development practices.