Can GCP do port mirroring at the subnet level?

Question

Can I define a custom network in Google Cloud Platform in such a way so that I can get the equivalent behavior of Port Mirroring in my VPC as one would configure on a hardware switch?

The goal is to sniff all traffic in the VPC for the purpose of network debugging, or deploying an Network Intrusion Detection System.

I'm not looking to deploy a bastion host, or use NetFlow.

John Mahowald · Answer 1 · 2018-10-02T21:29:52.910

1

No, not a mirrored port.

For visibility, you can bring your own security appliance VMs such as firewalls or virtual switches. Or consume their flow logs. Security vendors with a public cloud story probably do one of these.

Edit: I know you said GCP, but compare to what Azure very recently announced, Virtual Network TAP. You could try this, then ask GCP if they plan to offer something equivilant.

edited Oct 02 '18 at 21:29

answered Sep 30 '18 at 16:44

John Mahowald

30,009
1
17
32

This would require using a VM/scrurity appliance as a firewall for the VPC subnet, right? – Jev Björsell Oct 01 '18 at 14:31
Yes, you would have to route your own traffic through that VM like you would for a firewall. – John Mahowald Oct 02 '18 at 21:22

Can GCP do port mirroring at the subnet level?

1 Answers1