GoogleCloudPlatform / pubsec-declarative-toolkit

The GCP PubSec Declarative Toolkit is a collection of declarative solutions to help you on your Journey to Google Cloud. Solutions are designed using Config Connector and deployed using Config Controller.
Apache License 2.0
30 stars 27 forks source link

Prototype Site-to-Site Data Transfer (via NCC or VMs) via Dual Dedicated Interconnect with POP on/off-ramp for sustained 10gbps+ throughput at the lowest latency within CA and CA to EU #756

Open obriensystems opened 7 months ago

obriensystems commented 7 months ago

This is an extension of #298 Site to Site Data Transfer

Purpose:

Screenshot 2023-12-12 at 12 00 02

code

provisioning examples

Cologix

Equinix

PacketFabric

Other CSPs

obriensystems commented 7 months ago

Prototype: Latency connectivity between all regions 39 (why 42 by default)

org: old

Create 2nd default global routing VPC enable dns dns.googleapis.com -bgp-routing-mode=global

gcloud compute networks create global --project=interconnect-ol --description=global-auto --subnet-mode=auto --mtu=1460 --bgp-routing-mode=global 

gcloud compute firewall-rules create global-allow-custom --project=interconnect-ol --network=projects/interconnect-ol/global/networks/global --description=Allows\ connection\ from\ any\ source\ to\ any\ instance\ on\ the\ network\ using\ custom\ protocols. --direction=INGRESS --priority=65534 --source-ranges=10.128.0.0/9 --action=ALLOW --rules=all 

gcloud compute firewall-rules create global-allow-icmp --project=interconnect-ol --network=projects/interconnect-ol/global/networks/global --description=Allows\ ICMP\ connections\ from\ any\ source\ to\ any\ instance\ on\ the\ network. --direction=INGRESS --priority=65534 --source-ranges=0.0.0.0/0 --action=ALLOW --rules=icmp

gcloud compute firewall-rules create global-allow-rdp --project=interconnect-ol --network=projects/interconnect-ol/global/networks/global --description=Allows\ RDP\ connections\ from\ any\ source\ to\ any\ instance\ on\ the\ network\ using\ port\ 3389. --direction=INGRESS --priority=65534 --source-ranges=0.0.0.0/0 --action=ALLOW --rules=tcp:3389

gcloud compute firewall-rules create global-allow-ssh --project=interconnect-ol --network=projects/interconnect-ol/global/networks/global --description=Allows\ TCP\ connections\ from\ any\ source\ to\ any\ instance\ on\ the\ network\ using\ port\ 22. --direction=INGRESS --priority=65534 --source-ranges=0.0.0.0/0 --action=ALLOW --rules=tcp:22

VM with at least 30 vCores has Tier_1 networking performance - in this case N2-32 has 50gbps private, 25gpbs public

gcloud compute instances create nane1-vm --project=interconnect-ol --zone=northamerica-northeast1-a --machine-type=n2-standard-32 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=nane1-vm,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=20,type=projects/interconnect-ol/zones/northamerica-northeast1-a/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1

Nearest region to YVR is Oregon

gcloud compute instances create us-west1-vm --project=interconnect-ol --zone=us-west1-b --machine-type=n2-standard-32 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=us-west1-vm,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=20,type=projects/interconnect-ol/zones/us-west1-b/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1

fixing quota Current limit: 8.0. Metric: compute.googleapis.com/n2_cpus

Screenshot 2023-12-12 at 11 44 14
Your quota request for interconnect-ol has been partially approved and your project quota has been adjusted according to the following requested limits:

+------------------+------------+--------+-----------------+----------------+
| NAME             | DIMENSIONS | REGION | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+------------+--------+-----------------+----------------+
| CPUS_ALL_REGIONS |            | GLOBAL |              32 |             32 |
+------------------+------------+--------+-----------------+----------------+

Unfortunately, we were unable to grant your below quota request(s):

+---------+--------------------------------+-------------------------+
| NAME    | DIMENSIONS                     | REGION                  |
+---------+--------------------------------+-------------------------+
| N2_CPUS | region=northamerica-northeast1 | northamerica-northeast1 |
+---------+--------------------------------+-------------------------+

Unfortunately, we were unable to grant your below quota request(s):

+---------+-----------------+----------+
| NAME    | DIMENSIONS      | REGION   |
+---------+-----------------+----------+
| N2_CPUS | region=us-west1 | us-west1 |
+---------+-----------------+----------+

16vCPUs - no 32/7gbps for now

gcloud compute instances create nane-vm16 --project=interconnect-ol --zone=northamerica-northeast1-a --machine-type=n2-standard-16 --network-interface=network-tier=PREMIUM,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/devstorage.read_only,https://www.googleapis.com/auth/logging.write,https://www.googleapis.com/auth/monitoring.write,https://www.googleapis.com/auth/servicecontrol,https://www.googleapis.com/auth/service.management.readonly,https://www.googleapis.com/auth/trace.append --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=nane-vm16,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=20,type=projects/interconnect-ol/zones/northamerica-northeast1-a/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any

The N2-CPUS-per-project-region quota maximum in region northamerica-northeast1 has been exceeded. Current limit: 8.0. Metric: compute.googleapis.com/n2_cpus

Change N2 CPUs - northamerica-northeast1 from 8 to 16

use 8 for now

gcloud compute instances create nane1-8 --project=interconnect-ol --zone=us-central1-a --machine-type=n2-standard-8 --network-interface=network-tier=PREMIUM,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=nane1-8,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=20,type=projects/interconnect-ol/zones/us-central1-a/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any
ok

gcloud compute instances create us-west1-8 --project=interconnect-ol --zone=us-west1-b --machine-type=n2-standard-8 --network-interface=network-tier=PREMIUM,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=us-west1-8,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=20,type=projects/interconnect-ol/zones/us-west1-b/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any

I can create up to 4 vms globally for now

Screenshot 2023-12-12 at 11 54 00 Screenshot 2023-12-12 at 11 56 07

Plan is to standup 2 VMs at a time and iterate them across all regions - to get around max quota of 64 (2 vms with tier_1 networking)

+------------------+------------+--------+-----------------+----------------+
| NAME             | DIMENSIONS | REGION | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+------------+--------+-----------------+----------------+
| CPUS_ALL_REGIONS |            | GLOBAL |              64 |             64 |
+------------------+------------+--------+-----------------+----------------+

gcloud compute instances create n2d-64 --project=interconnect-ol --zone=us-central1-a --machine-type=n2d-standard-64 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=470582674421-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=n2d-64,image=projects/debian-cloud/global/images/debian-11-bullseye-v20231115,mode=rw,size=80,type=projects/interconnect-ol/zones/us-central1-a/diskTypes/pd-standard --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1

switch to n2d epyc
+------------------+--------------------+-------------+-----------------+----------------+
| NAME             | DIMENSIONS         | REGION      | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+--------------------+-------------+-----------------+----------------+
| CPUS_ALL_REGIONS |                    | GLOBAL      | 64              | 64             |
|                  |                    |             |                 |                |
| N2D_CPUS         | region=us-central1 | us-central1 | 64              | 64             |
+------------------+--------------------+-------------+-----------------+----------------+

n2d n/a
nane2

+------------------+--------------------------------+-------------------------+-----------------+----------------+
| NAME             | DIMENSIONS                     | REGION                  | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+--------------------------------+-------------------------+-----------------+----------------+
| CPUS_ALL_REGIONS |                                | GLOBAL                  | 64              | 64             |
|                  |                                |                         |                 |                |
| N2D_CPUS         | region=northamerica-northeast1 | northamerica-northeast1 | 64              | 64             |
| N2D_CPUS         | region=southamerica-east1 | southamerica-east1 | 64              | 64             |
| N2D_CPUS         | region=us-east1 | us-east1 | 64              | 64             |
| N2D_CPUS         | region=us-east4 | us-east4 | 64              | 64             |
| N2D_CPUS         | region=us-east5 | us-east5 | 64              | 64             |
us-sourth1 dallas n/a
| N2D_CPUS         | region=us-west1 | us-west1 | 64              | 64             |
| N2D_CPUS | region=us-west2 | us-west2 | - full
| N2D_CPUS         | region=us-west3 | us-west3 | 64              | 64             |
| N2D_CPUS         | region=us-west4 | us-west4 | 64              | 64             |
| N2D_CPUS | region=europe-north1 | europe-north1 | full
A 10GB pd-standard disk is currently unavailable in the europe-southwest1-a
| N2D_CPUS         | region=europe-west1 | europe-west1 | 64              | 64             |
| N2D_CPUS         | region=europe-west10 | europe-west10 | 64              | 64             |
| N2D_CPUS | region=europe-west12 | europe-west12 | - full
| N2D_CPUS         | region=europe-west2 | europe-west2 | 64              | 64             |
| N2D_CPUS         | region=europe-west3 | europe-west3 | 64              | 64             |
| N2D_CPUS         | region=europe-west4 | europe-west4 | 64              | 64             |
europe-west6 zurich - no N2D
| N2D_CPUS         | region=europe-west8 | europe-west8 | 64              | 64             |

+------------------+---------------------------+--------------------+-----------------+----------------+
obriensystems commented 7 months ago

GCP Network Connectivity Center

obriensystems commented 5 months ago

Use case option 3: VM based backhaul between regions

Regions/Pop Inventory

asia-east1-a asia-east1-b asia-east1-c asia-east2-a asia-east2-b asia-east2-c asia-northeast1-a asia-northeast1-b asia-northeast1-c asia-northeast2-a asia-northeast2-b asia-northeast2-c asia-northeast3-a asia-northeast3-b asia-northeast3-c asia-south1-a asia-south1-b asia-south1-c asia-south2-a asia-south2-b asia-south2-c asia-southeast1-a asia-southeast1-b asia-southeast1-c asia-southeast2-a asia-southeast2-b asia-southeast2-c australia-southeast1-a australia-southeast1-b australia-southeast1-c australia-southeast2-a australia-southeast2-b australia-southeast2-c europe-central2-a europe-central2-b europe-central2-c europe-north1-a europe-north1-b europe-north1-c europe-southwest1-a europe-southwest1-b europe-southwest1-c europe-west1-b europe-west1-c europe-west1-d europe-west10-a europe-west10-b europe-west10-c europe-west12-a europe-west12-b europe-west12-c europe-west2-a europe-west2-b europe-west2-c europe-west3-a europe-west3-b europe-west3-c europe-west4-a europe-west4-b europe-west4-c europe-west6-a europe-west6-b europe-west6-c europe-west8-a europe-west8-b europe-west8-c europe-west9-a europe-west9-b europe-west9-c me-central1-a me-central1-b me-central1-c me-central2-a me-central2-b me-central2-c me-west1-a me-west1-b me-west1-c northamerica-northeast1-a northamerica-northeast1-b northamerica-northeast1-c northamerica-northeast2-a northamerica-northeast2-b northamerica-northeast2-c southamerica-east1-a southamerica-east1-b southamerica-east1-c southamerica-west1-a southamerica-west1-b southamerica-west1-c us-central1-a us-central1-b us-central1-c us-central1-f us-east1-b us-east1-c us-east1-d us-east4-a us-east4-b us-east4-c us-east5-a us-east5-b us-east5-c us-south1-a us-south1-b us-south1-c us-west1-a us-west1-b us-west1-c us-west2-a us-west2-b us-west2-c us-west3-a us-west3-b us-west3-c us-west4-a us-west4-b us-west4-c

130

A default mode VPC will auto-create a single zone subnet in each region (40) Name Region Stack Type Internal IP ranges External IP ranges Secondary IPv4 ranges Gateway Private Google Access Flow logs default
us-central1 IPv4
10.128.0.0/20 None None 10.128.0.1 Off Off default europe-west1 IPv4
10.132.0.0/20 None None 10.132.0.1 Off Off default us-west1 IPv4
10.138.0.0/20 None None 10.138.0.1 Off Off default
asia-east1 IPv4
10.140.0.0/20 None None 10.140.0.1 Off Off default us-east1 IPv4
10.142.0.0/20 None None 10.142.0.1 Off Off default
asia-northeast1 IPv4
10.146.0.0/20 None None 10.146.0.1 Off Off default
asia-southeast1 IPv4
10.148.0.0/20 None None 10.148.0.1 Off Off default us-east4 IPv4
10.150.0.0/20 None None 10.150.0.1 Off Off default australia-southeast1 IPv4
10.152.0.0/20 None None 10.152.0.1 Off Off default europe-west2 IPv4
10.154.0.0/20 None None 10.154.0.1 Off Off default europe-west3 IPv4
10.156.0.0/20 None None 10.156.0.1 Off Off default
southamerica-east1 IPv4
10.158.0.0/20 None None 10.158.0.1 Off Off default
asia-south1 IPv4
10.160.0.0/20 None None 10.160.0.1 Off Off default
northamerica-northeast1 IPv4
10.162.0.0/20 None None 10.162.0.1 Off Off default europe-west4 IPv4
10.164.0.0/20 None None 10.164.0.1 Off Off default
europe-north1 IPv4
10.166.0.0/20 None None 10.166.0.1 Off Off default us-west2 IPv4
10.168.0.0/20 None None 10.168.0.1 Off Off default
asia-east2 IPv4
10.170.0.0/20 None None 10.170.0.1 Off Off default europe-west6 IPv4
10.172.0.0/20 None None 10.172.0.1 Off Off default
asia-northeast2 IPv4
10.174.0.0/20 None None 10.174.0.1 Off Off default
asia-northeast3 IPv4
10.178.0.0/20 None None 10.178.0.1 Off Off default us-west3 IPv4
10.180.0.0/20 None None 10.180.0.1 Off Off default us-west4 IPv4
10.182.0.0/20 None None 10.182.0.1 Off Off default
asia-southeast2 IPv4
10.184.0.0/20 None None 10.184.0.1 Off Off default
europe-central2 IPv4
10.186.0.0/20 None None 10.186.0.1 Off Off default
northamerica-northeast2 IPv4
10.188.0.0/20 None None 10.188.0.1 Off Off default
asia-south2 IPv4
10.190.0.0/20 None None 10.190.0.1 Off Off default australia-southeast2 IPv4
10.192.0.0/20 None None 10.192.0.1 Off Off default
southamerica-west1 IPv4
10.194.0.0/20 None None 10.194.0.1 Off Off default europe-west8 IPv4
10.198.0.0/20 None None 10.198.0.1 Off Off default europe-west9 IPv4
10.200.0.0/20 None None 10.200.0.1 Off Off default us-east5 IPv4
10.202.0.0/20 None None 10.202.0.1 Off Off default
europe-southwest1 IPv4
10.204.0.0/20 None None 10.204.0.1 Off Off default
us-south1 IPv4
10.206.0.0/20 None None 10.206.0.1 Off Off default me-west1 IPv4
10.208.0.0/20 None None 10.208.0.1 Off Off default
europe-west12 IPv4
10.210.0.0/20 None None 10.210.0.1 Off Off default
me-central1 IPv4
10.212.0.0/20 None None 10.212.0.1 Off Off default
europe-west10 IPv4
10.214.0.0/20 None None 10.214.0.1 Off Off default
me-central2 IPv4
10.216.0.0/20 None None 10.216.0.1 Off Off default
africa-south1 IPv4
10.218.0.0/20 None None 10.218.0.1 Off Off

obriensystems commented 5 months ago

java sdk for gcp for vm orchestration

https://cloud.google.com/compute/docs/instances/create-start-instance

obriensystems commented 5 months ago

On the fly quota for base VM that has gVNIC Enable per VM Tier_1 networking performance Maximum outbound network bandwidth: 50Gbps VM to Public IP: 25Gbps

gcloud compute instances create northamerica-northeast1 --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=n2-standard-32 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=northamerica-northeast1,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=40,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1
Screenshot 2024-01-29 at 10 25 44

running standard vm - pga + make sure nic has public IP off --network-interface=stack-type=IPV4_ONLY,subnet=default,no-address

gcloud compute instances create northamerica-northeast1-montreal --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=e2-medium --network-interface=stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=instance-2,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any

Doha, Qatar

gcloud compute instances create me-central1-doha --project=gh756-interconnect --zone=me-central1-a --machine-type=e2-medium --network-interface=stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=instance-3,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=40,type=projects/gh756-interconnect/zones/me-central1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any

deployment

michael@cloudshell:~ (clouddeploy-ol)$ gcloud config set project gh756-interconnect
Updated property [core/project].
michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create me-central1-doha --project=gh756-interconnect --zone=me-central1-a --machine-type=e2-medium --network-interface=stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=instance-3,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=40,type=projects/gh756-interconnect/zones/me-central1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any
Created [https://www.googleapis.com/compute/v1/projects/gh756-interconnect/zones/me-central1-a/instances/me-central1-doha].
WARNING: Some requests generated warnings:
 - Disk size: '40 GB' is larger than image size: '10 GB'. You might need to resize the root repartition manually if the operating system does not support automatic resizing. See https://cloud.google.com/compute/docs/disks/add-persistent-disk#resize_pd for details.

NAME: me-central1-doha
ZONE: me-central1-a
MACHINE_TYPE: e2-medium
PREEMPTIBLE: 
INTERNAL_IP: 10.212.0.2
EXTERNAL_IP: 
STATUS: RUNNING
michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create northamerica-northeast1-montreal --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=e2-medium --network-interface=stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=instance-2,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any                                    
Created [https://www.googleapis.com/compute/v1/projects/gh756-interconnect/zones/northamerica-northeast1-a/instances/northamerica-northeast1-montreal].
NAME: northamerica-northeast1-montreal
ZONE: northamerica-northeast1-a
MACHINE_TYPE: e2-medium
PREEMPTIBLE: 
INTERNAL_IP: 10.162.0.5
EXTERNAL_IP: 
STATUS: RUNNING
michael@cloudshell:~ (gh756-interconnect)$
Screenshot 2024-01-29 at 11 08 11
Linux me-central1-doha 5.10.0-27-cloud-amd64 #1 SMP Debian 5.10.205-2 (2023-12-31) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Mon Jan 29 16:08:51 2024 from 35.235.242.64
michael@me-central1-doha:~$ hostname -i
10.212.0.2
michael@me-central1-doha:~$ ping 10.162.0.5
PING 10.162.0.5 (10.162.0.5) 56(84) bytes of data.
64 bytes from 10.162.0.5: icmp_seq=1 ttl=64 time=199 ms
64 bytes from 10.162.0.5: icmp_seq=2 ttl=64 time=198 ms
64 bytes from 10.162.0.5: icmp_seq=3 ttl=64 time=198 ms
64 bytes from 10.162.0.5: icmp_seq=4 ttl=64 time=198 ms
64 bytes from 10.162.0.5: icmp_seq=5 ttl=64 time=198 ms
^C
--- 10.162.0.5 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 197.554/197.800/198.573/0.389 ms
michael@me-central1-doha:~$ 

Linux northamerica-northeast1-montreal 5.10.0-27-cloud-amd64 #1 SMP Debian 5.10.205-2 (2023-12-31) x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Mon Jan 29 16:12:14 2024 from 35.235.242.66
michael@northamerica-northeast1-montreal:~$ hostname -i
10.162.0.5
michael@northamerica-northeast1-montreal:~$ ping 10.212.0.2
PING 10.212.0.2 (10.212.0.2) 56(84) bytes of data.
64 bytes from 10.212.0.2: icmp_seq=1 ttl=64 time=199 ms
64 bytes from 10.212.0.2: icmp_seq=2 ttl=64 time=198 ms
64 bytes from 10.212.0.2: icmp_seq=3 ttl=64 time=198 ms
64 bytes from 10.212.0.2: icmp_seq=4 ttl=64 time=198 ms
^C
--- 10.212.0.2 ping statistics ---
5 packets transmitted, 4 received, 20% packet loss, time 4007ms
rtt min/avg/max/mdev = 197.624/197.881/198.569/0.397 ms
michael@northamerica-northeast1-montreal:~$ 
Screenshot 2024-01-29 at 11 15 58

Quota for 64 cores in europe-west3-frankfurt was approved for N2D type 50/25 gpbs

Screenshot 2024-01-29 at 11 32 05
michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create europe-west3-frankfurt --project=gh756-interconnect --zone=europe-west3-c --machine-type=n2d-standard-64 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=europe-west3-frankfurt,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/europe-west3-c/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1
ERROR: (gcloud.compute.instances.create) Could not fetch resource:
 - Quota 'CPUS_ALL_REGIONS' exceeded.  Limit: 64.0 globally.
        metric name = compute.googleapis.com/cpus_all_regions
        limit name = CPUS-ALL-REGIONS-per-project
        limit = 64.0
        dimensions = global: global
Try your request in another zone, or view documentation on how to increase quotas: https://cloud.google.com/compute/quotas.

Need to get 128 for CPUS-ALL-REGIONS first

michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create europe-west3-frankfurt --project=gh756-interconnect --zone=europe-west3-c --machine-type=n2d-standard-64 --network-interface=network-tier=PREMIUM,nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=europe-west3-frankfurt,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/europe-west3-c/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1
Created [https://www.googleapis.com/compute/v1/projects/gh756-interconnect/zones/europe-west3-c/instances/europe-west3-frankfurt].
NAME: europe-west3-frankfurt
ZONE: europe-west3-c
MACHINE_TYPE: n2d-standard-64
PREEMPTIBLE: 
INTERNAL_IP: 10.156.0.2
EXTERNAL_IP: 34.107.83.26
STATUS: RUNNING
Screenshot 2024-01-29 at 11 48 01 Screenshot 2024-01-29 at 11 48 50
Your quota request for gh756-interconnect has been approved and your project quota has been adjusted according to the following requested limits:

+------------------+------------+--------+-----------------+----------------+
| NAME             | DIMENSIONS | REGION | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+------------+--------+-----------------+----------------+
| CPUS_ALL_REGIONS |            | GLOBAL |             128 |            128 |
+------------------+------------+--------+-----------------+----------------+

target vm

gcloud compute instances create northamerica-northeast1-montreal25 --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=n2d-standard-64 --network-interface=nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=northamerica-northeast1-montreal25,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1

carefull - an in gui quota increase will reset ALL back to 64


Your quota request for gh756-interconnect has been approved and your project quota has been adjusted according to the following requested limits:

+------------------+--------------------------------+-------------------------+-----------------+----------------+
| NAME             | DIMENSIONS                     | REGION                  | REQUESTED LIMIT | APPROVED LIMIT |
+------------------+--------------------------------+-------------------------+-----------------+----------------+
| CPUS_ALL_REGIONS |                                | GLOBAL                  | 64              | 64             |
|                  |                                |                         |                 |                |
| N2D_CPUS         | region=northamerica-northeast1 | northamerica-northeast1 | 64              | 64             |
+------------------+--------------------------------+-------------------------+-----------------+----------------+

michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create northamerica-northeast1-montreal25 --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=n2d-standard-64 --network-interface=nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default,no-address --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=northamerica-northeast1-montreal25,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1
Created [https://www.googleapis.com/compute/v1/projects/gh756-interconnect/zones/northamerica-northeast1-a/instances/northamerica-northeast1-montreal25].
NAME: northamerica-northeast1-montreal25
ZONE: northamerica-northeast1-a
MACHINE_TYPE: n2d-standard-64
PREEMPTIBLE: 
INTERNAL_IP: 10.162.0.6
EXTERNAL_IP: 
STATUS: RUNNING
``
obriensystems commented 5 months ago

Testing 25gbps between frankfurt and montreal

Screenshot 2024-01-29 at 11 59 24

ssh may require an out of order retry - nane first

Last login: Mon Jan 29 16:59:59 2024 from 35.235.241.178
michael@europe-west3-frankfurt:~$ hostname -i
10.156.0.2
michael@europe-west3-frankfurt:~$ ping 10.162.0.6
PING 10.162.0.6 (10.162.0.6) 56(84) bytes of data.
64 bytes from 10.162.0.6: icmp_seq=1 ttl=64 time=88.2 ms
64 bytes from 10.162.0.6: icmp_seq=2 ttl=64 time=87.7 ms
64 bytes from 10.162.0.6: icmp_seq=3 ttl=64 time=87.6 ms
64 bytes from 10.162.0.6: icmp_seq=4 ttl=64 time=87.7 ms
64 bytes from 10.162.0.6: icmp_seq=5 ttl=64 time=87.7 ms
64 bytes from 10.162.0.6: icmp_seq=6 ttl=64 time=87.9 ms
^C
--- 10.162.0.6 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5008ms
rtt min/avg/max/mdev = 87.648/87.793/88.170/0.183 ms
michael@europe-west3-frankfurt:~$ 

ichael@northamerica-northeast1-montreal25:~$ hostname -i
10.162.0.6
michael@northamerica-northeast1-montreal25:~$ ping 10.156.0.2
PING 10.156.0.2 (10.156.0.2) 56(84) bytes of data.
64 bytes from 10.156.0.2: icmp_seq=1 ttl=64 time=88.6 ms
64 bytes from 10.156.0.2: icmp_seq=2 ttl=64 time=87.7 ms
64 bytes from 10.156.0.2: icmp_seq=3 ttl=64 time=87.7 ms
64 bytes from 10.156.0.2: icmp_seq=4 ttl=64 time=87.7 ms
64 bytes from 10.156.0.2: icmp_seq=5 ttl=64 time=87.7 ms
64 bytes from 10.156.0.2: icmp_seq=6 ttl=64 time=87.7 ms
^C
--- 10.156.0.2 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5004ms
rtt min/avg/max/mdev = 87.659/87.847/88.619/0.345 ms
Screenshot 2024-01-29 at 12 07 21
obriensystems commented 5 months ago

iperf for bandwith testing

gcloud compute --project=gh756-interconnect firewall-rules create iperf5001in --direction=INGRESS --priority=1000 --network=default --action=ALLOW --rules=tcp:5001 --source-ranges=0.0.0.0/0
gcloud compute --project=gh756-interconnect firewall-rules create iperf5001out --direction=EGRESS --priority=1000 --network=default --action=ALLOW --rules=tcp:5001 --destination-ranges=0.0.0.0/0

respin nane with public ip to temporarily do some apt-get installs
remove no-address

michael@cloudshell:~ (gh756-interconnect)$ gcloud compute instances create northamerica-northeast1-montreal25 --project=gh756-interconnect --zone=northamerica-northeast1-a --machine-type=n2d-standard-64 --network-interface=nic-type=GVNIC,stack-type=IPV4_ONLY,subnet=default --maintenance-policy=MIGRATE --provisioning-model=STANDARD --service-account=945246983496-compute@developer.gserviceaccount.com --scopes=https://www.googleapis.com/auth/cloud-platform --tags=http-server,https-server --create-disk=auto-delete=yes,boot=yes,device-name=northamerica-northeast1-montreal25,image=projects/debian-cloud/global/images/debian-11-bullseye-v20240110,mode=rw,size=10,type=projects/gh756-interconnect/zones/northamerica-northeast1-a/diskTypes/pd-balanced --no-shielded-secure-boot --shielded-vtpm --shielded-integrity-monitoring --labels=goog-ec-src=vm_add-gcloud --reservation-affinity=any --network-performance-configs=total-egress-bandwidth-tier=TIER_1

https://bash-prompt.net/guides/quick-network-test/


sudo apt-get update
sudo apt-get install iperf
michael@europe-west3-frankfurt:~$ iperf -s -i 10
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size:  128 KByte (default)
------------------------------------------------------------

michael@northamerica-northeast1-montreal25:~$ iperf -i 10 -c 10.156.0.2
------------------------------------------------------------
Client connecting to 10.156.0.2, TCP port 5001
TCP window size: 45.0 KByte (default)
------------------------------------------------------------
[  3] local 10.162.0.7 port 54088 connected with 10.156.0.2 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3] 0.0000-10.0000 sec   304 MBytes   255 Mbits/sec
[  3] 10.0000-10.0348 sec   256 KBytes  60.2 Mbits/sec
[  3] 0.0000-10.0348 sec   304 MBytes   254 Mbits/sec

michael@europe-west3-frankfurt:~$ iperf -s -i 10
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size:  128 KByte (default)
------------------------------------------------------------
[  4] local 10.156.0.2 port 5001 connected with 10.162.0.7 port 54088
[ ID] Interval       Transfer     Bandwidth
[  4] 0.0000-10.0000 sec   303 MBytes   254 Mbits/sec
[  4] 10.0000-10.0348 sec   716 KBytes   169 Mbits/sec
[  4] 0.0000-10.0348 sec   304 MBytes   254 Mbits/sec