Background

This article will go through the best practice configuration for a GCP project when deploying the Virtru gateway via GCP marketplace listing.

Minimum Resources to provision

• 1 VPC with 1 subnet

• 1 Cluster on the new VPC above

• 1 Cloud NAT Gateway

• 1 Cloud Router

Deployment Steps

Provision VPC

1. Navigate to the VPC networks section of GCP by searching “VPC networks”

2. Click “+ Create VPC Network”

3. Give your VPC a name, and create a custom subnet using the details below as an example

   
4. Click “Create”

Provision Cluster

1. Navigate to the Kubernetes clusters section of GCP by searching “Kubernetes clusters”

2. Click “+ Create”

3. Configure a GKE Standard cluster

4. When configuring the zone, choose the same region as your subnet you created and using the details below as an example

   
5. Navigate to the Networking section of the cluster deployment and choose the Network and Subnet you configured above

6. Click “Create” at the bottom of the page

Provision Cloud NAT

1. Navigate to the Cloud NAT section of GCP by searching “Cloud NAT”

2. Click “+ Create NAT Gateway”

3. Configure your NAT Gateway to use the VPC configured earlier

4. Choose the region you previously created the subnet and cluster in

5. Create a new Cloud Router

   1. Keep default values

6. Under NAT mapping, select “Primary and secondary ranges for all subnets” for “Source (internal)”

7. Select a manual NAT IP address, and add a static IP you will use specifically for the Virtru gateway

8. Click “Create”

Deploy Virtru Gateway

Follow the instructions found here to deploy the Virtru gateway according to your needs, and be sure to use the cluster created in the steps above for any gateway instances deployed.