Cloud Architecture

GCP Shared VPC for Multi-Project Network Isolation

Cloud Architecture diagram · made in Skemio

Shared VPC architecture showing a central Host Project managing subnets connected to two Service Projects running GKE and Compute instances.
Shared VPC architecture showing a central Host Project managing subnets connected to two Service Projects running GKE and Compute instances.

What it shows

  • Host projects centralize subnets, firewalls, and interconnects under SecOps.
  • Service projects delegate compute admin to product teams without network access.
  • Cross-project workloads communicate over private RFC 1918 IPs without NAT.

The takeaway

Shared VPC enforces central network governance while maintaining independent service ownership.

More cloud architecture diagrams