How to Use share services from one GCP regional VPC to another regional VPC?

Google Cloud Compute Infrastructure
1

I have the following architecture

  1. Separate hub VPC exists for different region(i.e A & B) which has separate Interconnect from on-prem to GCP in each region

  2. Each hub VPC has separate NGFW(connected through nic) behind an internal load balancer. So two spoke project in a region communicate only through NGFW(NGFW has route).

  3. Now my requirement is to deploy some common share services in one region only i.e B(It will have host project and then have service project for different common share services)

  4. How can I connect the share services(Through internal ip) of which is deployed in region B from Region A spoke projects? There is no communication currently between two region.

  5. Each region also has separate dmz VPCs which are also attached to NGFW though a separate nic. In this DMZ vpc there are vpn connection from external client for each region.

Please suggest. Please find the following diagram. How Spoke C and D can use share services of region B

Picture 1.png
Picture 1.png3075×1750 417 KB

@grobledo @kolban do you have any lead on this?

Thanks

Subhajit

2

You can deploy VPC peering, which allows internal IP address connectivity across two VPCs. This solution supports IPV4 only, but it is better than HA VPN because it provides less network latency, and improves the network security. Please read this public documentation to know more about the restrictions and benefits about VPC peering before deploying it .