Cloud VPN securely connects on-premises networks and other cloud providers to Google Cloud. IPsec-encrypted tunnels run over the internet and can be set up quickly.
What is Cloud VPN?
Cloud VPN creates encrypted IPsec tunnels between a data center or another cloud and a Google Cloud VPC. Traffic flows over the public internet but is end-to-end encrypted with IKEv2/IPsec.
Google offers two variants: HA VPN (High Availability) with redundant tunnels for higher availability, and Classic VPN with a single tunnel. If one tunnel fails in HA VPN, the other takes over automatically.
HA VPN vs. Classic VPN
| Criteria | HA VPN | Classic VPN |
|---|---|---|
| Availability | Higher, through redundant tunnels | Lower, single tunnel |
| Redundancy | 2+ tunnels | 1 tunnel |
| Routing | Dynamic only (BGP) | Static or BGP |
| IPv6 | Supported | Not supported |
Recommendation: Google recommends HA VPN for production workloads. Classic VPN remains available but is more limited functionally.
Core Features
- IPsec IKEv2: Industry-standard encryption for tunnel setup
- High Availability: HA VPN with redundant tunnels across two interfaces
- BGP Routing: Dynamic routing with Cloud Router
- Multi-Cloud: Connectivity to AWS, Azure, and other clouds
- Quick Setup: VPN tunnels set up much faster than dedicated lines
Typical Use Cases
Hybrid Cloud
Connect on-premises data centers with GCP. Workloads in GCP access legacy systems, on-premises applications use cloud services.
Multi-Cloud Connectivity
Cloud VPN connects GCP with AWS VPC or Azure VNet. Ideal for multi-cloud strategies or migration between clouds.
Branch Office Connection
Smaller locations without dedicated lines use Cloud VPN over the internet. HA VPN with two internet uplinks increases redundancy.
Disaster Recovery
Replicate data over VPN to GCP for disaster recovery. If the primary data center fails, GCP can take over the load.
Cloud VPN vs. Cloud Interconnect
| Criteria | Cloud VPN | Cloud Interconnect |
|---|---|---|
| Medium | Public internet | Dedicated line |
| Bandwidth | A few Gbit/s per tunnel | Significantly higher, double-digit Gbit/s ranges |
| Latency | Variable | More constant and predictable |
| Setup | Short lead time | Longer lead time |
| Use Case | Small/medium workloads | Enterprise, latency-critical applications |
Benefits
- Fast: VPN tunnels set up quickly
- No hardware required: Fully software-defined
- Secure: IPsec encryption as standard
- Highly available: HA VPN with redundant tunnels for production environments
Integration with innFactory
As a certified Google Cloud Partner, innFactory supports you with Cloud VPN: hybrid architecture, HA VPN setup, BGP configuration, and network design for secure cloud connectivity.
Typical Use Cases
Frequently Asked Questions
What is Cloud VPN?
Cloud VPN establishes encrypted IPsec connections between an on-premises network or another cloud and Google Cloud VPC. Traffic flows over the public internet but is encrypted with IPsec. For dedicated lines without internet transport, use Cloud Interconnect instead.
What is the difference between HA VPN and Classic VPN?
HA VPN uses redundant tunnels across two interfaces and offers higher availability than Classic VPN, which supports only a single tunnel. HA VPN requires dynamic routing via BGP, while Classic VPN also supports static routing. Google recommends HA VPN for production workloads.
How much bandwidth does Cloud VPN offer?
Depending on packet size, a single tunnel supports roughly 1 to 3 Gbit/s, or up to 250,000 packets per second combined ingress and egress. With HA VPN you can use multiple tunnels in parallel and configure ECMP (Equal-Cost Multi-Path) for higher aggregate throughput.
How much does Cloud VPN cost?
Google charges Cloud VPN on a pay-per-use basis with costs per gateway and tunnel hour plus additional egress traffic to on-premises locations. Current prices vary by region and are available on Google Cloud's official pricing page.
When should I use Cloud VPN instead of Cloud Interconnect?
Cloud VPN is suited for small to medium bandwidths and quick setup when variable traffic over the internet is acceptable. Cloud Interconnect offers dedicated lines for higher bandwidths, lower latency, and more predictable performance, but requires a longer setup lead time.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of Google Cloud (official documentation). This page does not represent an offer by Google Cloud.
