{"id":14985,"date":"2023-09-05T11:23:00","date_gmt":"2023-09-05T05:53:00","guid":{"rendered":"https:\/\/opstree.com\/blog\/\/?p=14985"},"modified":"2023-09-05T11:23:00","modified_gmt":"2023-09-05T05:53:00","slug":"gcp-to-azure-vpn-tunneling-with-multiple-networks","status":"publish","type":"post","link":"https:\/\/opstree.com\/blog\/2023\/09\/05\/gcp-to-azure-vpn-tunneling-with-multiple-networks\/","title":{"rendered":"GCP to Azure VPN Tunneling with Multiple Networks"},"content":{"rendered":"\n

In this comprehensive guide, we will delve into the step-by-step process of establishing a secure VPN connection between Google Cloud Platform (GCP) and Azure. By following these instructions, you will gain the ability to seamlessly migrate workloads from Azure to GCP or run multi-cloud workloads across both platforms, ensuring a flexible and efficient infrastructure for your applications.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Prerequisites:<\/strong><\/h3>\n\n\n\n

Ensure you have an active Azure subscription and a project set up on GCP.
Make sure you have the required administrative roles on both platforms. You can create the new VPC Network (Virtual Network on Azure) and subnets in both GCP and Azure or you can use the existing one.<\/p>\n\n\n\n\n\n\n\n

Key Components and Terminology:<\/strong><\/h3>\n\n\n\n

Google Cloud VPC network:<\/strong> It represents a virtual network within a Google Cloud project, enabling secure communication between resources in the network.<\/p>\n\n\n\n

External IP address or Google Cloud peer address:<\/strong> These are automatically allocated external IP addresses used by peer VPN devices to establish High Availability (HA) VPN connections with Google Cloud. Each gateway interface in a Google Cloud project is assigned an external IP address.<\/p>\n\n\n\n

Dynamic Routing:<\/strong> Google Cloud’s dynamic routing feature uses the Border Gateway Protocol (BGP) to enable automatic routing updates and efficient communication between VPN devices. Note that HA VPN only supports dynamic routing.<\/p>\n\n\n\n

HA VPN:<\/strong> High Availability (HA) VPN is a secure solution provided by Google Cloud that allows the establishment of IP sec VPN connections between on-premises networks and private networks on GCP. It ensures high availability and reliability of the VPN connection.<\/p>\n\n\n\n

Virtual Network Gateway:<\/strong> In Azure, the Virtual Network Gateway provides cross-premises connectivity between customer premises and Azure. Deploying a Virtual Network Gateway creates a VPN tunnel to connect with the Google environment. It is typically deployed in the “GatewaySubnet” within Azure.<\/p>\n\n\n\n

Site-to-Site (IPsec)<\/strong>: It is a VPN connection type composed of a VPN Gateway, Local Gateway, and a Connection. Site-to-Site VPN allows encrypted traffic to be sent between an Azure Virtual Network (VNet) and an on-premises location over the public internet.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Azure Virtual Network Gateway Setup Steps:<\/strong><\/h3>\n\n\n\n

1 –<\/strong> Create a virtual network gateway – Choose the resource group, select the gateway type, and then choose the SKU according to your need but for multiple networks choose the gateway type higher then VpnGw1, Select the virtual network and public ip address. Put two Azure Apipa BGP Ip address.<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

GCP VPN Gateway Setup Steps:<\/strong><\/p>\n\n\n\n

Go to Hybrid Connectivity then select VPN Setup Wizard and chosse High-availability (HA) VPN in VPN Options<\/p>\n\n\n\n

1-<\/strong> Create Cloud HA VPN gateway- Enter the name, Choose vpc name and region.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

2-<\/strong> Add VPN tunnels and Choose the option peer VPN gateway as on-prem or non-google cloud and put the public ip of Azure VPN.<\/p>\n\n\n\n