Please enable JavaScript.

Coggle requires JavaScript to display documents.

GCP Architecture Concept (2-Busniess Logic layer of design (12 Factor in…

- - - - Error Budget
      - Unplanned Downtime
      - Risk Tolerance
      - Target Level of availabilty
      - Types of failures
  - - - definiton:An SLI is a quantitative measure of an attribute of
        the service—one that the users care about
      - some SLI Examples
        
        Throughput
        
        Latency
        
        Availabilty
        
        Correctness
    - - 4 golden Monitoring Signals
        
        Traffic
        
        Latency
        
        Saturation
        
        Errors
  - - - Why
      - How
      - Who
      - When
    - - Resources
        
        Time
        
        People
        
        Finance
      - Constrains
        
        Time
        
        Data
        
        users
    - - Scaling
      - Limiting Factors
- - - - Cloud Functions
      - App engine
      - GKE
      - Compute Engine
  - - - Cloud Shell for building and deploying
      - Cloud Source Repositories
    - - Build App Engine app in Cloudshell, upload to App
        Engine
    - - Deployment Manager Templates
    - - custom images
    - - Metadata server, GCS
    - - Instance templates, Managed instance
        groups, and autoscaling
- - - - Tool for testing Bandwidth performance
        
        Iperf
    - - provides
        
        Network Speed
        
        Parallelsim
      - Types
        
        Global
        
        HTTPs
        
        SSL proxy
        
        TCP proxy
        
        Regional
        
        Network
        
        Internal
  - - - On Premise
      - Multi Cloud
    - - Dedicated Interconnect
      - Cloud VPN
- - - - Single points of failure (SPOFs)
      - Correlated failures
    - - Cascading failure
      - Fan-in (incast) overload failure
      - Queries of death overload failure
      - Positive feedback cycle overload failure
- - - - Types of Isolation in GCP
        
        IP address isolation and VPN tunneling
        
        Virtual Private Cloud (VPC) isolation through public IPs
        
        Cross-project VPC network peering
        
        Cross-organization VPC network peering
        
        Shared VPC
        
        Isolation through multiple network interfaces
        
        Access GCP services over internal IP
      - Data encryption and key management
        
        GCP provides server-side encryption
        
        Customer Managed Encryption Keys (CMEK)
        
        Customer Supplied Encryption Keys (CSEK)
        
        Persistent Disk Encryption with CSEK
      - Identity access and auditing
        
        Identity Access
        
        Service accounts
        
        IAM
        
        Audit
        
        Cloud Audit Logging
        
        GCP security auditing with Forseti-security
    - - Properties of Distributed Denial of Service Attack
        
        Consume bandwidth
        
        Exploit application limitations
        
        Exhaust connection
    - - Edge protections against DDoS
      - Network protections against DDoS
      - Infrastructure protections against DDoS
  - - - Firewall configuration is the first line of defense for access
      - Designs for securely accessing VMs
        
        VMs with external IP addresses
        
        VMs without external IP addresses
      - API access control using Cloud Endpoints
      - Virtual Private Cloud (VPC) isolation through public IPs
      - IP address isolation and VPN tunneling
- - - - Check for Dependencies
      - Plan for Capacity
      - SPOF
      - Security and acess control
      - Rollout plan
  - - - 1- Monitoring
        
        Type 1
        
        Black Box Monitoring
        
        White box Monitoring
        
        Type 2
        
        Push-based metrics
        
        Pull Based metrics
      - 2-incident Response
      - 3-Postemrtum/Root Analysis
      - 4-Testing and Realease Procedure
      - 5-Capacity Planning
      - 6-Development
      - 7-Product
    - - Alert
      - Ticket
      - Log
    - - Monitoring
        
        Uptime check
        
        Create Alert
        
        Specify Condition
        
        Notification
        
        Documentation
        
        Dashboards and graphs
      - Logging
      - Error Reporting
      - Tracing
      - Profile
      - Debugger
    - - 1-Severity and Impact
      - 2-Verify the problem
      - 3-Diagnose
      - 4-Fix the Problem
      - 5- Post-Fix
- - - - Atomicity
      - Consistency
      - Isolation
      - Durability
    - - Basically Available
      - Soft State
      - Eventually Consistent
        
        Cloud Storage Eventually consistent
        
        Revoking access (~1m)
        
        Enabling object versioning in a bucket wait ~30 sec before write/overwrite
    - - Consistency
      - Availability
      - Partition Tolerance
  - - - Cloud Storage Migration Tools from on premise
        
        Console
        
        gsutil
        
        JSON API
      - Cloud Storage service to import online Data
        
        Backup data to Cloud Storage
        
        Move from Multi-Regional to Nearline
        
        Import online data to Cloud Storage
        
        Transfer data between Cloud Storage
        buckets
        
        HTTP/HTTPS Location
        
        Amazon S3
        
        Synchronize
      - Google Transfer Appliance
        
        Def :Rackable device up to 1PB ship to Google.
  - - - Presisetnt HDD Disk
      - Presisten SSD Disk
      - Local SSD Disk
      - RAM Disk
    - - Cloud Storage for Firebase
      - FireBase Real Time DB
      - FireBase Hosting
    - - Cloud Storage
        
        Options
        
        Regional
        
        Multi-Regioanl
        
        Nearline
        
        ColdeLine
      - Cloud Datastore
      - Cloud SQL
      - Cloud Spanner
      - Cloud Bigtable
      - Cloud Bigquery
      - MemoryStore
      - FileStore
- - - - Capacity Planning Cycle
        
        1-Forcast
        
        Instance overhead estimation
        
        Persistent Disk estimation
        
        Network capacity estimation
        
        Workload estimation
        
        2-Allocate
        
        3-Approve
        
        4-Deploy
      - tools
        
        Perfkit Benchmarker
    - - type of Cost Optimization
        
        VM Cost Optimization
        
        VM Dimensioning
        
        Sustained use Discount
        
        Committed use Discount
        
        Preemptible VMs
        
        Optimizing Disk Cost
        
        Optimize Network Cost