Back to Networking

Virtual Private Cloud (VPC)

gcp

Global, software-defined private virtual network connecting your GCP compute resources securely.

NETWORKING
Google Cloud Platform

Global, software-defined private virtual network connecting your GCP compute resources securely.

Click any section above to jump directly to it

What is Virtual Private Cloud (VPC)?

Google Cloud VPC is fundamentally unique in the cloud industry because it is GLOBAL by default, not tied to a single region or datacenter. A single VPC network spans every Google Cloud region worldwide, allowing resources in different continents (e.g. VMs in us-central1 and europe-west1) to communicate privately over Google's global fiber backbone without public IP addresses or VPN tunnels.

Decision Guide: When to Choose This Service

When to Use Virtual Private Cloud (VPC)

Use VPC to define the private network topology, subnets, firewall rules, routing, and interconnects for all Compute Engine, GKE, Cloud SQL, and serverless resources within your Google Cloud organization.

When NOT to Use (Recommended Alternatives)

Do NOT create dozens of isolated VPCs for every small microservice (use Shared VPC across projects instead).

Core Architectural Pillars

Global VPC Architecture

A single VPC contains subnets in different regions worldwide that communicate on private RFC 1918 IPs with zero VPN gateway overhead.

Shared VPC

Centralize network administration in a host project while attaching service projects where development teams deploy VMs and clusters.

VPC Network Peering

Interconnect two distinct VPC networks with ultra-low latency and zero gateway bottlenecks.

Private Google Access

Allows internal-only VMs with private IPs to securely reach Google APIs (BigQuery, GCS, Pub/Sub) without public IPs or NAT.

Cloud NAT

Managed, software-defined outbound Network Address Translation letting private VMs download internet updates without exposing inbound public IPs.