{"id":194377,"date":"2023-04-04T07:18:00","date_gmt":"2023-04-04T07:18:00","guid":{"rendered":"https:\/\/datascientest.com\/?p=194377"},"modified":"2023-11-09T14:23:13","modified_gmt":"2023-11-09T14:23:13","slug":"gcp-firewall-policy-tout-savoir","status":"publish","type":"post","link":"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir","title":{"rendered":"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"194377\" class=\"elementor elementor-194377\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-fa04def e-flex e-con-boxed e-con\" data-id=\"fa04def\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-18a014f elementor-widget elementor-widget-heading\" data-id=\"18a014f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">La mise en place d\u2019un cloud virtuel priv\u00e9 n\u00e9cessite de g\u00e9rer le trafic ayant acc\u00e8s au r\u00e9seau. C\u2019est justement pour cette raison que les GCP Firewall Policy existent. Alors de quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article.<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf1aba7 e-flex e-con-boxed e-con\" data-id=\"bf1aba7\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b5ab8e9 elementor-widget elementor-widget-heading\" data-id=\"b5ab8e9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">C\u2019est quoi les GCP Firewall Policy ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a5608dd elementor-widget elementor-widget-text-editor\" data-id=\"a5608dd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">Les Firewall Policy sur GCP ont pour objectif d\u2019<\/span><b>autoriser ou de refuser une connexion au sein d\u2019une instance de machine virtuelle<\/b><span style=\"font-weight: 400;\">. Ces r\u00e8gles peuvent s\u2019appliquer pour un ou plusieurs r\u00e9seaux VPC, un ou plusieurs projets, \u00e0 l\u2019\u00e9chelle de l\u2019organisation dans son ensemble ou d\u2019un dossier individuel.\u00a0<\/span><\/p><blockquote><p><span style=\"font-weight: 400;\"><strong>Bon \u00e0 savoir :<\/strong> d\u00e8s lors qu\u2019une Firewall Policy est activ\u00e9e, elle s\u2019applique. C\u2019est-\u00e0-dire qu\u2019elle va prot\u00e9ger votre instance de machine virtuelle, son syst\u00e8me d\u2019exploitation et sa configuration, m\u00eame si elle n\u2019a pas encore d\u00e9marr\u00e9. <\/span><\/p><\/blockquote>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-96fd779 e-flex e-con-boxed e-con\" data-id=\"96fd779\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f18487b elementor-widget elementor-widget-heading\" data-id=\"f18487b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Quelles sont les diff\u00e9rentes strat\u00e9gies de pare-feux ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-78f4a11 elementor-widget elementor-widget-text-editor\" data-id=\"78f4a11\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Pour simplifier la gestion des Firewall Policy sur GCP, vous devez<\/span><b> cr\u00e9er des strat\u00e9gies de pare-feux.<\/b><span style=\"font-weight: 400;\"> C\u2019est-\u00e0-dire, regrouper plusieurs r\u00e8gles entre elles. Comme elles sont centralis\u00e9es, vous pourrez plus facilement les mettre \u00e0 jour.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">Mais attention, il existe plusieurs strat\u00e9gies en fonction de vos besoins :\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les strat\u00e9gies de pare-feux hi\u00e9rarchiques <\/b><span style=\"font-weight: 400;\">: l\u2019id\u00e9e est d\u2019avoir un ensemble coh\u00e9rent pour toute l\u2019entreprise. Les r\u00e8gles sont alors regroup\u00e9es en fonction de leur importance pour l\u2019organisation.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les r\u00e8gles de pare-feux mondiales :<\/b><span style=\"font-weight: 400;\"> ici, les r\u00e8gles s\u2019appliquent \u00e0 plusieurs r\u00e9gions. Dans ce cadre, vous appliquez d\u2019abord une strat\u00e9gie au niveau mondial, qui peut ensuite se d\u00e9cliner aux diff\u00e9rentes ressources du r\u00e9seau VPC. <\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Les r\u00e8gles de pare-feux de r\u00e9seau r\u00e9gional :<\/b><span> \u00e0 l\u2019inverse, ces r\u00e8gles de pare-feux ne s&rsquo;appliquent qu\u2019\u00e0 un seul r\u00e9seau VPC. Mais elles peuvent \u00e9galement se d\u00e9cliner \u00e0 l\u2019ensemble des ressources internes au r\u00e9seau.<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-168256f elementor-widget elementor-widget-image\" data-id=\"168256f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.15.0 - 02-08-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1920\" height=\"1114\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall.jpg\" class=\"attachment-full size-full wp-image-194398\" alt=\"\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall.jpg 1920w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-300x174.jpg 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-1024x594.jpg 1024w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-768x446.jpg 768w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-1536x891.jpg 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cdd4402 e-flex e-con-boxed e-con\" data-id=\"cdd4402\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-61ef449 elementor-widget elementor-widget-heading\" data-id=\"61ef449\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Quels sont les composants des r\u00e8gles de pare-feux ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ff767c elementor-widget elementor-widget-text-editor\" data-id=\"3ff767c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Si chaque r\u00e8gle de pare-feux pr\u00e9sente ses propres sp\u00e9cificit\u00e9s, il existe toutefois quelques points communs entre les diff\u00e9rentes Firewall Policy de GCP. Notamment au niveau de leurs composants. Voici ce que vous retrouverez au moment de d\u00e9finir une r\u00e8gle :\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Application<\/b><span style=\"font-weight: 400;\"> : cela permet d\u2019activer ou de d\u00e9sactiver une r\u00e8gle. C\u2019est particuli\u00e8rement utile en cas de d\u00e9pannage, de test ou de d\u00e9ploiement exigeant des modifications en temps r\u00e9el.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Direction <\/b><span style=\"font-weight: 400;\">: il s\u2019agit de d\u00e9finir la ressource \u00e0 laquelle la r\u00e8gle est attach\u00e9e (r\u00e9seau VPC, politique hi\u00e9rarchique\u2026). Mais attention, il ne peut y avoir qu\u2019un seul sens de connexion (entrant ou sortant).\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Priorit\u00e9 :<\/b><span style=\"font-weight: 400;\"> c\u2019est un nombre qui va d\u00e9finir la priorit\u00e9 d\u2019une r\u00e8gle sur les autres. Plus le nombre est faible, plus la priorit\u00e9 est \u00e9lev\u00e9e.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Action <\/b><span style=\"font-weight: 400;\">: il s\u2019agit simplement des actions \u00ab\u00a0autoriser\u00a0\u00bb ou \u00ab\u00a0refuser\u00a0\u00bb (\u00e9galement appel\u00e9es Ingree ou Egress trafic). Vous pouvez aussi configurer l\u2019action \u00ab\u00a0goto.next\u00a0\u00bb.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Cible <\/b><span style=\"font-weight: 400;\">: cela permet de faire correspondre les origines du trafic r\u00e9seau potentiellement int\u00e9ressantes pour telle ou telle r\u00e8gle de pare-feu. Le contexte change en fonction de la direction d\u00e9finie.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Filtre : <\/b><span style=\"font-weight: 400;\">comme la source, l\u2019id\u00e9e est de faire correspondre les origines du trafic r\u00e9seau.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Ports et protocole<\/b><span style=\"font-weight: 400;\"> : il s\u2019agit d\u2019une combinaison de protocoles r\u00e9seau (comme TCP, UDP, ICMP) et de ports pour affiner les crit\u00e8res de s\u00e9lection d&rsquo;une r\u00e8gle de pare-feu.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Logs :<\/b> il s\u2019agit d\u2019une option. L\u2019id\u00e9e est alors de consigner dans les connexions correspondant \u00e0 la r\u00e8gle dans le Cloud Logging.<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1856400 elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"1856400\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formation-data-engineer\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">D\u00e9couvrir notre formation de Data Engineer<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0874ab1 e-flex e-con-boxed e-con\" data-id=\"0874ab1\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-311a442 elementor-widget elementor-widget-heading\" data-id=\"311a442\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Comment mettre en place des r\u00e8gles de pare-feux ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e733ffa elementor-widget elementor-widget-text-editor\" data-id=\"e733ffa\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Afin de cr\u00e9er une r\u00e8gle de pare-feux, vous devez d\u2019abord <\/span><b>d\u00e9finir un r\u00e9seau VPC et ses composants<\/b><span style=\"font-weight: 400;\">. Ensuite, vous pouvez utiliser diff\u00e9rents outils, comme <\/span><span style=\"font-weight: 400;\">la console Google Cloud, Google Cloud CLI et l&rsquo;API REST.<\/span><\/p><p><span style=\"font-weight: 400;\">Et pour vous aider \u00e0 impl\u00e9menter une strat\u00e9gie de Firewall Policy efficace sur GCP, voici <\/span><b>quelques bonnes pratiques \u00e0 mettre en place :\u00a0<\/b><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Le principe du moindre privil\u00e8ge : il s\u2019agit de bloquer tout le trafic par d\u00e9faut et de n\u2019autoriser que le trafic sp\u00e9cifique (en fonction de vos besoins).\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">La strat\u00e9gie de pare-feux hi\u00e9rarchique : celle-ci doit vous permettre de bloquer le trafic qui ne doit pas \u00eatre autoris\u00e9 (aussi bien au niveau de l\u2019organisation dans son ensemble que d\u2019un dossier individuel).\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Les r\u00e8gles d\u2019autorisation : elles doivent \u00eatre limit\u00e9es \u00e0 des machines virtuelles sp\u00e9cifiques. Dans ce cas, nous vous conseillons de pr\u00e9ciser le compte de service des VM.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Les adresses IP : limitez autant que possible les r\u00e8gles bas\u00e9es sur des adresses IP. Cela en complexifie la gestion.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firewall Insights : cet outil vous permet de v\u00e9rifier que les r\u00e8gles de pare-feux sont utilis\u00e9es conform\u00e9ment \u00e0 vos pr\u00e9visions.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">La journalisation des Firewall Policy : si cette fonctionnalit\u00e9 est tr\u00e8s utile, elle peut aussi entra\u00eener des co\u00fbts suppl\u00e9mentaires. Pour les r\u00e9duire, activez la journalisation avec parcimonie (uniquement quand c\u2019est vraiment utile).<\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1c95303 elementor-widget elementor-widget-image\" data-id=\"1c95303\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1920\" height=\"1280\" src=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall.jpg\" class=\"attachment-full size-full wp-image-194399\" alt=\"\" srcset=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall.jpg 1920w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall-300x200.jpg 300w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall-1024x683.jpg 1024w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall-768x512.jpg 768w, https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/regles-gcp-firewall-1536x1024.jpg 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ad913f3 elementor-widget elementor-widget-text-editor\" data-id=\"ad913f3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Pour approfondir les bonnes pratiques en mati\u00e8re de gestion des r\u00e8gles de pare-feux sur GCP, il est pr\u00e9f\u00e9rable de suivre une formation. N\u2019h\u00e9sitez pas \u00e0 <a href=\"https:\/\/datascientest.com\/formations-data\">consulter nos programmes<\/a> <\/span><span style=\"font-weight: 400;\">sur DataScientest.\u00a0<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0ab724d e-flex e-con-boxed e-con\" data-id=\"0ab724d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3505884 elementor-widget elementor-widget-heading\" data-id=\"3505884\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Quelles sont les sp\u00e9cificit\u00e9s des r\u00e8gles de pare-feux Google ?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eea11eb elementor-widget elementor-widget-text-editor\" data-id=\"eea11eb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Outre les bonnes pratiques mises en place, certaines sp\u00e9cificit\u00e9s de <a href=\"https:\/\/datascientest.com\/certifications-google-cloud-platform\">Google Cloud Platform<\/a> <\/span><span style=\"font-weight: 400;\">peuvent <\/span><b>affecter vos connexions<\/b><span style=\"font-weight: 400;\"> (qu\u2019elles soient entrantes ou sortantes). Voici donc quelques \u00e9l\u00e9ments que vous devez garder en t\u00eate au moment de cr\u00e9er vos Firewall Policy sur GCP :\u00a0<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Certains types de trafic peuvent \u00eatre automatiquement bloqu\u00e9s ou limit\u00e9s par Google. C\u2019est par exemple le cas des offres et des accus\u00e9s de r\u00e9ception DHCP entrants ou encore les adresses IP externes.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">La communication entre une instance de VM et le serveur de m\u00e9tadonn\u00e9es est toujours autoris\u00e9e d\u00e8s lors qu\u2019elle correspond \u00e0 l&rsquo;adresse 169.254.169.254.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chaque r\u00e9seau comporte des Firewall Policy implicites. Il est toutefois possible de les remplacer en cr\u00e9ant de nouvelles r\u00e8gles.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chaque r\u00e8gle de pare-feux s\u2019applique \u00e0 une connexion entrante ou une connexion sortante (jamais les deux en m\u00eame temps). <\/span><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7816ade e-flex e-con-boxed e-con\" data-id=\"7816ade\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6c8083a elementor-widget elementor-widget-heading\" data-id=\"6c8083a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Ce qu\u2019il faut retenir <\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bc2fea7 elementor-widget elementor-widget-text-editor\" data-id=\"bc2fea7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Les GCP Firewall Policy permettent d\u2019autoriser ou de refuser du trafic au sein d\u2019une instance de machine virtuelle.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Il est possible de mettre en place des strat\u00e9gies de pare-feux hi\u00e9rarchiques, mondiales ou r\u00e9gionales, en fonction de vos besoins.\u00a0<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Une r\u00e8gle de pare-feux est compos\u00e9e de plusieurs \u00e9l\u00e9ments, tels que l\u2019application, la direction, la priorit\u00e9, l\u2019action, la cible, le filtre, le port, les protocoles et les logs. Vous devrez d\u00e9finir chacun de ces composants pour votre GCP Firewall Policy. <\/span><\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c9398e2 elementor-widget elementor-widget-text-editor\" data-id=\"c9398e2\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Si vous avez des questions auxquelles vous d\u00e9sirez avoir des r\u00e9ponses, n&rsquo;h\u00e9sitez pas \u00e0 prendre rendez-vous.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39b747f elementor-align-center button-principale elementor-widget elementor-widget-button\" data-id=\"39b747f\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm elementor-animation-grow\" href=\"https:\/\/datascientest.com\/formations-data\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-text\">Consulter nos formations en Data Science<\/span>\n\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-74f27fc e-flex e-con-boxed e-con\" data-id=\"74f27fc\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e8f3841 elementor-widget elementor-widget-html\" data-id=\"e8f3841\" data-element_type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<script type=\"application\/ld+json\">\r\n{\r\n  \"@context\": \"https:\/\/schema.org\",\r\n  \"@type\": \"FAQPage\",\r\n  \"mainEntity\": [{\r\n    \"@type\": \"Question\",\r\n    \"name\": \"C\u2019est quoi les GCP Firewall Policy ?\",\r\n    \"acceptedAnswer\": {\r\n      \"@type\": \"Answer\",\r\n      \"text\": \"Les Firewall Policy sur GCP ont pour objectif d\u2019autoriser ou de refuser une connexion au sein d\u2019une instance de machine virtuelle. Ces r\u00e8gles peuvent s\u2019appliquer pour un ou plusieurs r\u00e9seaux VPC, un ou plusieurs projets, \u00e0 l\u2019\u00e9chelle de l\u2019organisation dans son ensemble ou d\u2019un dossier individuel.\"\r\n    }\r\n  },{\r\n    \"@type\": \"Question\",\r\n    \"name\": \"Quelles sont les diff\u00e9rentes strat\u00e9gies de pare-feux ?\",\r\n    \"acceptedAnswer\": {\r\n      \"@type\": \"Answer\",\r\n      \"text\": \"Pour simplifier la gestion des Firewall Policy sur GCP, vous devez cr\u00e9er des strat\u00e9gies de pare-feux. C\u2019est-\u00e0-dire, regrouper plusieurs r\u00e8gles entre elles. Comme elles sont centralis\u00e9es, vous pourrez plus facilement les mettre \u00e0 jour.\"\r\n    }\r\n  },{\r\n    \"@type\": \"Question\",\r\n    \"name\": \"Quels sont les composants des r\u00e8gles de pare-feux ?\",\r\n    \"acceptedAnswer\": {\r\n      \"@type\": \"Answer\",\r\n      \"text\": \"Si chaque r\u00e8gle de pare-feux pr\u00e9sente ses propres sp\u00e9cificit\u00e9s, il existe toutefois quelques points communs entre les diff\u00e9rentes Firewall Policy de GCP. Notamment au niveau de leurs composants. Voici ce que vous retrouverez au moment de d\u00e9finir une r\u00e8gle : Application : cela permet d\u2019activer ou de d\u00e9sactiver une r\u00e8gle. C\u2019est particuli\u00e8rement utile en cas de d\u00e9pannage, de test ou de d\u00e9ploiement exigeant des modifications en temps r\u00e9el. Direction : il s\u2019agit de d\u00e9finir la ressource \u00e0 laquelle la r\u00e8gle est attach\u00e9e (r\u00e9seau VPC, politique hi\u00e9rarchique\u2026). Mais attention, il ne peut y avoir qu\u2019un seul sens de connexion (entrant ou sortant). Priorit\u00e9 : c\u2019est un nombre qui va d\u00e9finir la priorit\u00e9 d\u2019une r\u00e8gle sur les autres. Plus le nombre est faible, plus la priorit\u00e9 est \u00e9lev\u00e9e.\"\r\n    }\r\n  }]\r\n}\r\n<\/script>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>La mise en place d\u2019un cloud virtuel priv\u00e9 n\u00e9cessite de g\u00e9rer le trafic ayant acc\u00e8s au r\u00e9seau. C\u2019est justement pour cette raison que les GCP Firewall Policy existent. Alors de quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article. C\u2019est quoi les [&hellip;]<\/p>\n","protected":false},"author":79,"featured_media":194379,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","inline_featured_image":false},"categories":[2411],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.7 (Yoast SEO v21.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google<\/title>\n<meta name=\"description\" content=\"Les GCP Firewall Policy : De quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google\" \/>\n<meta property=\"og:url\" content=\"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir\" \/>\n<meta property=\"og:site_name\" content=\"Formation Data Science | DataScientest.com\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-04T07:18:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-09T14:23:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-policy.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dan Cohen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dan Cohen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir\",\"url\":\"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir\",\"name\":\"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google\",\"isPartOf\":{\"@id\":\"https:\/\/datascientest.com\/#website\"},\"datePublished\":\"2023-04-04T07:18:00+00:00\",\"dateModified\":\"2023-11-09T14:23:13+00:00\",\"author\":{\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354\"},\"description\":\"Les GCP Firewall Policy : De quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article.\",\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/datascientest.com\/#website\",\"url\":\"https:\/\/datascientest.com\/\",\"name\":\"Formation Data Science | DataScientest.com\",\"description\":\"Leader de la formation en Data Science\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/datascientest.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354\",\"name\":\"Dan Cohen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/datascientest.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg\",\"contentUrl\":\"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg\",\"caption\":\"Dan Cohen\"},\"description\":\"Dan Cohen est actuellement Data Engineer chez DataScientest. Il poss\u00e8de une solide exp\u00e9rience dans le domaine de la data, ayant pr\u00e9c\u00e9demment occup\u00e9 des postes de Consultant en Data Science chez Meotec, Data Engineer chez Cetim, et Ing\u00e9nieur commercial chez Global D\u00e9co &amp; Food.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/dancohen1307\/\",\"Cloud & Data Engineering\"],\"url\":\"https:\/\/datascientest.com\/author\/dancohen\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google","description":"Les GCP Firewall Policy : De quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir","og_locale":"fr_FR","og_type":"article","og_title":"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google","og_url":"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir","og_site_name":"Formation Data Science | DataScientest.com","article_published_time":"2023-04-04T07:18:00+00:00","article_modified_time":"2023-11-09T14:23:13+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/03\/gcp-firewall-policy.png","type":"image\/png"}],"author":"Dan Cohen","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Dan Cohen","Dur\u00e9e de lecture estim\u00e9e":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir","url":"https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir","name":"GCP Firewall Policy : Tout savoir sur les pare-feux du cloud Google","isPartOf":{"@id":"https:\/\/datascientest.com\/#website"},"datePublished":"2023-04-04T07:18:00+00:00","dateModified":"2023-11-09T14:23:13+00:00","author":{"@id":"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354"},"description":"Les GCP Firewall Policy : De quoi s\u2019agit-il ? Quelles sont les strat\u00e9gies \u00e0 impl\u00e9menter ? Comment les mettre en place ? D\u00e9couvrez les r\u00e9ponses dans cet article.","inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/datascientest.com\/gcp-firewall-policy-tout-savoir"]}]},{"@type":"WebSite","@id":"https:\/\/datascientest.com\/#website","url":"https:\/\/datascientest.com\/","name":"Formation Data Science | DataScientest.com","description":"Leader de la formation en Data Science","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/datascientest.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/datascientest.com\/#\/schema\/person\/61997d589648bc1d367f632ba686e354","name":"Dan Cohen","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/datascientest.com\/#\/schema\/person\/image\/","url":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg","contentUrl":"https:\/\/datascientest.com\/wp-content\/uploads\/2023\/11\/dancohen.jpeg","caption":"Dan Cohen"},"description":"Dan Cohen est actuellement Data Engineer chez DataScientest. Il poss\u00e8de une solide exp\u00e9rience dans le domaine de la data, ayant pr\u00e9c\u00e9demment occup\u00e9 des postes de Consultant en Data Science chez Meotec, Data Engineer chez Cetim, et Ing\u00e9nieur commercial chez Global D\u00e9co &amp; Food.","sameAs":["https:\/\/www.linkedin.com\/in\/dancohen1307\/","Cloud & Data Engineering"],"url":"https:\/\/datascientest.com\/author\/dancohen"}]}},"_links":{"self":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/194377"}],"collection":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/users\/79"}],"replies":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/comments?post=194377"}],"version-history":[{"count":0,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/posts\/194377\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media\/194379"}],"wp:attachment":[{"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/media?parent=194377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/categories?post=194377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/datascientest.com\/wp-json\/wp\/v2\/tags?post=194377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}