- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
To prevent use of the default
network, a project should not have a default
network.
By default, for each project, a default
network is created.
The default
network has a preconfigured network configuration and automatically generates the following insecure firewall rules:
These automatically-created firewall rules do not get audit-logged and cannot be configured to enable firewall rule logging.
Furthermore, the default
network is an auto-mode network, which means that its subnets use the same predefined range of IP addresses. As a result, it’s not possible to use Cloud VPN or VPC Network Peering with the default
network.
Based on organization security and networking requirements, the organization should create a new network and delete the default
network.
When an organization deletes the default
network, it may need to migrate services onto a new network.
default
.default
network.Delete the default
network:
gcloud compute networks delete default
If needed, create a new network to replace it:
gcloud compute networks create NETWORK_NAME
You can prevent the default
network and its insecure firewall rules from being created by setting up an Organization Policy to skip default
network creation at https://console.cloud.google.com/iam-admin/orgpolicies/compute-skipDefaultNetworkCreation.