How to Manually Upload and Deploy the CloudGen Firewall in the Google Cloud
You can deploy the Barracuda CloudGen Firewall to the Google Cloud as a gateway or remote connectivity device. The firewall is deployed in a dedicated subnet (public subnet) in the Google Cloud network, and the instances for your cloud-based applications are deployed in backend or private subnets of the network. Each subnet is automatically assigned a dedicated gateway IP address and default route that allow the instances to connect to the Internet via the default Google Cloud gateway. An additional tag-based Google Cloud route is introduced to use the firewall as the default gateway. This route is applied automatically to all backend instances with this tag. Google Cloud firewall rules must be created to allow traffic between the firewall and the backend instances, as well as from the Internet to the firewall. By default, the Google Cloud firewall blocks all traffic, even between two instances in a subnet. The firewall has only a single DHCP network interface with a private IP address. Assign a static or ephemeral (dynamic) external IP address to your firewall to be able to connect to the Google Cloud network, even from outside the network.
Before you Begin
A Google Cloud account is required.
Download the Google Cloud firewall image from the Barracuda Download portal.
Step 1. Create a Network in the Google Cloud
Create the virtual network you are deploying your firewall to.
Click the hamburger menu in the upper left corner.
In the Networking section, click VPC Network.
In the main area, click Create Network.
Enter the Name.
In the Subnetworks section, click Custom.
Create the public subnet:
Name – Enter
public-subnetRegion – Select your region.
IP address range – Enter the network in CIDR format. If possible, do not use a network that overlaps with your on-premises network.
Click Add subnetwork and create the private subnet:
Name – Enter
private-subnetRegion – Select your region.
IP address range – Enter the network in CIDR format. If possible, do not use a network that overlaps with your on-premises network.
Click Create.
The network is now listed.
Step 2. Create an External IP Address
Create a static external IP address for your firewall. You can also skip this step and use an ephemeral IP address when creating the firewall instance.
Click the hamburger menu in the upper-left corner.
In the Networking section, click VPC Network.
In the left menu, click External IP addresses.
In the main area, click Reserve static address.
Reserve a static address:
Name – Enter a unique name for the external IP address.
Type – Select Regional
Region – Select the same region you selected for the public subnet of the network.
Click Reserve.
Step 3. Create a Storage Bucket and Upload the Image
Upload the image to Google Cloud. If the upload through the browser does not work, you can instead use Google SDK to upload the image.
Click the hamburger menu in the upper-left corner.
In the Storage section, click Storage.
In the main area, click Create bucket.
Create a storage bucket:
Name – Enter a unique name.
Storage class – Select a storage class depending on your preferences.
Location – Select the location matching the region you are deploying in.
Click Create.
Click on the storage bucket you just created.
Click Upload Files and select the firewall image you previously downloaded from the Barracuda Download Portal.
The upload window is displayed in the lower-right corner.
The image is now listed in the file list of the storage bucket.
Step 4. Create a Compute Engine Image from the Uploaded Disk Image
To be able to deploy a firewall from the disk image uploaded in Step 3, you must create a Google Compute Engine image. The firewall is created with one DHCP interface. DHCP reservation can be done manually (static) or automatically by Google during deployment. Once assigned, the internal IP address does not change.
Click the hamburger menu in the upper-left corner.
In the Compute section, click Compute Engine.
In the left menu, click Images.
In the main area, click Create Images.
Create an image using the disk image uploaded in Step 3.
Name – Enter a name for the firewall image.
Encryption – Select Automatic (recommended).
Source – Select Cloud Storage file.
Cloud Storage File – Click Browse and select the disk image in the storage bucket created in Step 3.
Click Create.