Deploy a CloudGen Firewall High Availability cluster in the Google Cloud to ensure that your GCE resources are always available. For the backend servers to always use the active firewall instance as the default gateway, the Google route table is rewritten each time a takeover event occurs. Incoming traffic can be directed to the active firewall by either the Google Network TCP Load Balancer or UDP Load Balancer.
Creating a Service Account and Role For CloudGen Firewalls in the Google Cloud
For the firewall instance running in the Google Cloud to be able to access the API and to use the gcloud tool installed on the firewall, you must create a service account and assign a custom role to the account.
For more information, see How to Create a Custom Role and Service Account for the CloudGen Firewall in the Google Cloud.
Deploy a High Availability Cluster in the Google Cloud
A High Availability cluster in the Google Cloud requires two firewalls with multiple network interfaces to be deployed to two different zones in a VPC network. Each network interface is attached to a subnet in a different VPC to allow the firewall to act as a segmentation firewall between multiple VPC networks.
For more information, see How to Configure a High Availability Cluster in Google Cloud.