gcp-networking-observability
Installation
SKILL.md
GCP Networking Observability
Overview
Google Cloud emits multiple network telemetry streams: VPC Flow Logs (sampled IP traffic), firewall rule logs, Cloud NAT translation logs, Cloud Firewall Plus / Cloud IDS threat logs, and aggregated metrics in Cloud Monitoring. Connectivity Tests provide static path analysis for "why can't A reach B?" questions. The right source depends on the question — pick one and stop, do not chase verification across tools.
Instructions
Telemetry Streams
| Stream | Use it for |
|---|---|
| VPC Flow Logs | Top talkers, bytes/packets between IPs, traffic trends, egress analysis |
| Firewall Logs | DENY events, verifying ALLOW rules, audit of who hit which rule |
| Cloud NAT Logs | Port exhaustion, source NAT translation auditing |
| Threat Logs | Cloud Firewall Plus / Cloud IDS — malicious patterns from deep packet inspection |
| Networking Metrics | Time-series throughput, RTT, packet loss for performance dashboards |
| Connectivity Tests | Static reachability analysis between two endpoints |