4 ms·

Another odd limitation: No support for internal load balancers; all LBs must be public. They have it as an alpha release available on request, so it's coming, b

Another odd limitation: No support for internal load balancers; all LBs must be public. They have it as an alpha release available on request, so it's coming, but it's a serious deficiency right now. The lack of a hosted VPN solution is also weird.

boulos 10y ago
You don't have to tell us, internal LB was a long time coming. As for hosted VPN, do you mean something different than our Cloud VPN offering? ( https://cloud.google.com/compute/docs/vpn/overview https://cloud.google.com/compute/docs/vpn/overview)
- lobster_johnson 10y ago
  By VPN I mean something that can be used individually by developers from their own machine (is there a proper technical term for this type?), not static point to point from a site such as an office (which is what CloudVPN seems made for). We ended up setting up OpenVPN, which shouldn't be necessary. SSH is great and all, but when you add Kubernetes and other sensitive things like dashboards, you really want to virtualize everything and hide every internal service behind a proper, solid VPN gateway.
  - boulos 10y ago
    I think you're saying you want something like our BeyondCorp setup: moving from the office to a coffee shop doesn't change that you're still the authenticated user that we trust, you're just on a sketchy network now. That's feasible but only things that do certificate exchange (https etc is easy enough). For what it's worth, part of the reason for Cloud Shell (the little shell within the web console) is so that you can interact with your infrastructure from inside the GCP network. That doesn't solve all your needs (like dashboards or deploying code from your laptop) but is often quite handy.
  - MustardTiger 10y ago
    >is there a proper technical term for this type? Generally individual users connecting to a VPN are called road warriors, even if they're not on the road and always connect from the same place.
    - lobster_johnson 10y ago
      Not type of developer, I mean type of VPN. :-)
      - MustardTiger 10y ago
        Yes, that's what I mean. It is called a roadwarrior VPN. As opposed to a point to point VPN.
        lobster_johnson 10y ago
        Ah, okay. I've never heard that term before, except about people.
user5994461 10y ago
AWS ELB limitations: No static IP. Only accessible through a domain name like "elb-role-12345.eu-west.aws.amazon.com" and the underlying IPs can change every 60 seconds. The feature has been missing for years, it doesn't have any workaround, it's not being worked on anytime soon. AWS vs GCE: Pick your limitations ;)

boulos 10y ago

You don't have to tell us, internal LB was a long time coming. As for hosted VPN, do you mean something different than our Cloud VPN offering? ( https://cloud.google.com/compute/docs/vpn/overview https://cloud.google.com/compute/docs/vpn/overview)

lobster_johnson 10y ago
By VPN I mean something that can be used individually by developers from their own machine (is there a proper technical term for this type?), not static point to point from a site such as an office (which is what CloudVPN seems made for). We ended up setting up OpenVPN, which shouldn't be necessary. SSH is great and all, but when you add Kubernetes and other sensitive things like dashboards, you really want to virtualize everything and hide every internal service behind a proper, solid VPN gateway.
- boulos 10y ago
  I think you're saying you want something like our BeyondCorp setup: moving from the office to a coffee shop doesn't change that you're still the authenticated user that we trust, you're just on a sketchy network now. That's feasible but only things that do certificate exchange (https etc is easy enough). For what it's worth, part of the reason for Cloud Shell (the little shell within the web console) is so that you can interact with your infrastructure from inside the GCP network. That doesn't solve all your needs (like dashboards or deploying code from your laptop) but is often quite handy.
- MustardTiger 10y ago
  >is there a proper technical term for this type? Generally individual users connecting to a VPN are called road warriors, even if they're not on the road and always connect from the same place.
  - lobster_johnson 10y ago
    Not type of developer, I mean type of VPN. :-)
    - MustardTiger 10y ago
      Yes, that's what I mean. It is called a roadwarrior VPN. As opposed to a point to point VPN.
      - lobster_johnson 10y ago
        Ah, okay. I've never heard that term before, except about people.

user5994461 10y ago

AWS ELB limitations: No static IP. Only accessible through a domain name like "elb-role-12345.eu-west.aws.amazon.com" and the underlying IPs can change every 60 seconds. The feature has been missing for years, it doesn't have any workaround, it's not being worked on anytime soon. AWS vs GCE: Pick your limitations ;)