Deploy & cloud (DevOps)48k · #3087

gcp-networking

Helps your agent set up cloud networking. Creates security rules and connections. Useful for connecting your services securely.

What it does

This tool helps configure Google Cloud networking. You can create virtual networks (VPCs), set up security rules (firewalls), and manage internet access.

When to use it

✓When setting up the network for a new Google Cloud project.
✓When you need to control which services can communicate with each other.
✓To allow your virtual machines to securely access the internet.

Example of what to ask your AI

“Set up a VPC network named 'my-network' with subnets for the 'us-east1' and 'europe-west1' regions.”

Want more? Open the sections below.

How to use

The easiest way: copy the message below and paste it into Claude, ChatGPT, Cursor or any AI. It reads the skill and follows the instructions.

Skill link

https://github.com/sickn33/agentic-awesome-skills/blob/main/plugins/agentic-awesome-skills-claude/skills/gcp-networking/SKILL.md

Ready-to-paste message

Use this skill to help me: https://github.com/sickn33/agentic-awesome-skills/blob/main/plugins/agentic-awesome-skills-claude/skills/gcp-networking/SKILL.md Read the SKILL.md file at that link and follow its instructions for my task.

View on GitHub ↗Raw file

How it works

The tool uses Google Cloud SDK commands to create and manage network resources. It defines network settings, firewall rules, and other connectivity options.

Installation

Easiest way: copy the skill link and paste it into Claude, ChatGPT or Cursor asking it to follow the instructions.

In the terminal (Claude Code, Codex, Cursor), in your project folder:

npx skills add sickn33/agentic-awesome-skills --skill gcp-networking

Or download just the file:

curl -L https://raw.githubusercontent.com/sickn33/agentic-awesome-skills/main/plugins/agentic-awesome-skills-claude/skills/gcp-networking/SKILL.md -o SKILL.md

Technical content (original SKILL.md)

Original text by the author, straight from GitHub.

GCP Networking

Design, implement, and secure network infrastructure on Google Cloud Platform.

When to Use

Building VPC networks for new GCP projects or multi-project architectures
Configuring firewall rules to control traffic between services
Setting up Cloud NAT for outbound internet access from private instances
Deploying load balancers for HTTP(S), TCP/UDP, or internal traffic
Implementing Private Service Connect or Shared VPC

Prerequisites

Google Cloud SDK (gcloud) installed and authenticated
Compute Engine API enabled
IAM role roles/compute.networkAdmin for network management

gcloud services enable compute.googleapis.com servicenetworking.googleapis.com

VPC Network Creation

gcloud compute networks create prod-vpc \
  --subnet-mode=custom --bgp-routing-mode=regional --mtu=1460

gcloud compute networks subnets create us-subnet \
  --network=prod-vpc --region=us-central1 --range=10.0.0.0/20 \
  --enable-private-ip-google-access --enable-flow-logs \
  --logging-flow-sampling=0.5

gcloud compute networks subnets create eu-subnet \
  --network=prod-vpc --region=europe-west1 --range=10.1.0.0/20 \
  --enable-private-ip-google-access --enable-flow-logs

# Subnet with secondary ranges for GKE
gcloud compute networks subnets create gke-subnet \
  --network=prod-vpc --region=us-central1 --range=10.2.0.0/20 \
  --secondary-range=pods=10.4.0.0/14,services=10.8.0.0/20 \
  --enable-private-ip-google-access

# Proxy-only subnet (required for regional L7 LBs)
gcloud compute networks subnets create proxy-only-subnet \
  --network=prod-vpc --region=us-central1 --range=10.129.0.0/23 \
  --purpose=REGIONAL_MANAGED_PROXY --role=ACTIVE

Firewall Rules

gcloud compute firewall-rules create allow-http-https \
  --network=prod-vpc --allow=tcp:80,tcp:443 \
  --source-ranges=0.0.0.0/0 --target-tags=http-server --priority=1000

gcloud compute firewall-rules create allow-internal \
  --network=prod-vpc --allow=tcp,udp,icmp \
  --source-ranges=10.0.0.0/8 --priority=1000

gcloud compute firewall-rules create allow-iap-ssh \
  --network=prod-vpc --allow=tcp:22 \
  --source-ranges=35.235.240.0/20 --priority=1000

gcloud compute firewall-rules create allow-health-checks \
  --network=prod-vpc --allow=tcp:80,tcp:443,tcp:8080 \
  --source-ranges=130.211.0.0/22,35.191.0.0/16 \
  --target-tags=http-server --priority=900

# List firewall rules
gcloud compute firewall-rules list --filter="network=prod-vpc" \
  --format="table(name,direction,priority,allowed[].map().firewall_rule().list():label=ALLOW)"

Cloud NAT

gcloud compute routers create prod-router \
  --network=prod-vpc --region=us-central1

gcloud compute routers nats create prod-nat \
  --router=prod-router --region=us-central1 \
  --nat-all-subnet-ip-ranges --auto-allocate-nat-external-ips \
  --min-ports-per-vm=256 --max-ports-per-vm=4096 \
  --enable-logging --log-filter=ERRORS_ONLY

# Static NAT IPs (stable egress)
gcloud compute addresses create nat-ip-1 nat-ip-2 --region=us-central1
gcloud compute routers nats create prod-nat-static \
  --router=prod-router --region=us-central1 \
  --nat-all-subnet-ip-ranges --nat-external-ip-pool=nat-ip-1,nat-ip-2

External HTTP(S) Load Balancer

gcloud compute addresses create web-lb-ip --global

gcloud compute health-checks create http web-hc \
  --port=80 --request-path=/healthz --check-interval=10s --timeout=5s

gcloud compute backend-services create web-backend \
  --protocol=HTTP --port-name=http --health-checks=web-hc \
  --global --enable-cdn --enable-logging

gcloud compute backend-services add-backend web-backend \
  --instance-group=web-mig --instance-group-region=us-central1 \
  --balancing-mode=UTILIZATION --max-utilization=0.8 --global

gcloud compute url-maps create web-url-map --default-service=web-backend

gcloud compute ssl-certificates create web-cert \
  --domains=app.example.com --global

gcloud compute target-https-proxies create web-proxy \
  --url-map=web-url-map --ssl-certificates=web-cert

gcloud compute forwarding-rules create web-https \
  --address=web-lb-ip --target-https-proxy=web-proxy --ports=443 --global

Internal Load Balancer

gcloud compute backend-services create internal-backend \
  --protocol=TCP --region=us-central1 \
  --health-checks=web-hc --health-checks-region=us-central1 \
  --load-balancing-scheme=INTERNAL

gcloud compute forwarding-rules create internal-lb \

…

FAQ

What is a VPC?

VPC stands for Virtual Private Cloud. It's like creating your own private network within Google Cloud to organize and isolate your resources.

What are firewall rules?

Firewall rules act like virtual gatekeepers, controlling the traffic going in and out of your network, allowing or blocking connections based on rules you define.

What is Cloud NAT?

Cloud NAT allows your virtual machines in private networks to access the internet for updates or downloads, without being directly accessible from the internet.

Details

Original description by the author

Configure VPCs, firewall rules, and Cloud NAT. Implement shared VPC and private service connect. Use when designing GCP network infrastructure.

repo: sickn33/agentic-awesome-skills

Popularity

GitHub stars: 48k
Ranking position: #3087
License: MIT
Updated: 10/15/2026

Is this skill useful?

Comments

More skills from this repository

Agents48k

00-andruia-consultant

Helps your agent start or improve AI projects. It analyzes code, suggests tools, and creates action plans in Spanish.

sickn33/agentic-awesome-skills

Misc48k

007

Lets your agent perform security audits and threat modeling. It's useful for protecting projects against attacks and vulnerabilities.

sickn33/agentic-awesome-skills

Agents48k

10-andruia-skill-smith

Helps your agent create or improve AI tools. It defines how tools work, writes documentation, and validates the structure.

sickn33/agentic-awesome-skills

Misc48k

20-andruia-niche-intelligence

Lets your agent create a summary about a specific industry. It's useful for understanding the context, rules, usage patterns, and risks of a project, using reliable sources.

sickn33/agentic-awesome-skills

Similar skills

Deploy & cloud (DevOps)280k

bun-runtime

Has your agent use Bun to run, organize, and test code. It helps choose Bun over other tools and migrate existing projects.

affaan-m/ECC

Deploy & cloud (DevOps)280k

database-migrations

Helps your agent make safe changes to databases. It ensures changes can be undone and minimizes downtime.

affaan-m/ECC

Deploy & cloud (DevOps)280k

deployment-patterns

Sets up deployment and CI/CD workflows, containerization, and rollback strategies to ensure safe releases.

affaan-m/ECC