R12.1-2025Jul03

Understand GCP Network Tree

The network tree of GCP networking objects is structured based on their hierarchy as follows:

Level 0Level 1Level 2Level 3Level 4Level 5
Google OrganizationGoogle FolderGoogle ProjectGoogle VPC NetworkGoogle VPC Router  
Google Subnet

Google VM instance 1 (Folder)

Google VM instance 2 (Folder)

Google Cloud Router  
Google VPN Gateway 
Google Cloud NAT 
Google Firewall

Private Service Connect Endpoint 
Google Network Virtual Appliance (NVA)Google VM instance
Google Load Balancer (Folder)  
Google Partner Interconnect (Folder)  
Google Dedicated Interconnect (Folder)  


In the Network Tree, you will also find:

  • The subnet is listed under the associated VPC Network.
  • VM Instance is listed under the connected Subnet.
  • Load Balancer is a logic object connected with different VPC networks in multiple regions under the project.
  • Interconnect is not associated with a specific VPC Network, so it is under the project.

 

To view and understand the detailed information about your GCP network, complete the following steps:

  1. In the Network pane, select Google Cloud > Network View. The hierarchy view of the GCP data model is organized in this order: Organization > Folder > Project > VPC Network.
  2. Expand an Organization node to view the relationship between its child nodes.

  3. Select a VPC node and click the Context Maps tab to view the corresponding L3 topology of the VPC. For more examples of context maps, refer to GCP Context Map.
    Graphical user interface, text, application

Description automatically generated
  4. Click the Device Details tab to view the details of the object, and the hyperlink will take you to the GCP console directly. 

GCP Context Map 

The following table outlines the available context maps for GCP.

Name DescriptionSample Context Map
GCP VPC Context MapThis context map helps you understand the network reachability of a VPC Network.Graphical user interface, application

Description automatically generated
Subnet Context MapThis context map helps you understand the virtual machine instances connecting to the same subnet within the virtual network.Graphical user interface, application

Description automatically generated
VPN Gateway Context MapThis context map demonstrates the relationship between Google Cloud and the on-premises network. The IPsec VPN connection between the VPN gateway and the on-promise edge device will be displayed. Also, the link for BGP Session between the Cloud Router and the on-premises edge device will be displayed.Diagram

Description automatically generated with low confidence
Partner Interconnect Context MapThis context map demonstrates the relationship between Google Cloud and the on-premises network. The private link connection between Interconnect and on-premises edge devices is displayed.  Also, the link for BGP Session between Cloud Router and on-premises edge devices will be displayed.Graphical user interface

Description automatically generated
NVA Context MapThis context map demonstrates the relationship between NVA and the on-premises network. The IPsec Tunnel connection between NVA and on-premises edge device is displayed.Graphical user interface

Description automatically generated