Network Architects and Cloud Engineers
Designing the initial IP address schema and CIDR allocations for a new GKE On-Prem cluster
Use cases
About
The Anthos Networking mind map template provides a technical architecture overview for IT professionals managing Google Cloud's hybrid cloud platform. This 119-node cheat sheet covers critical infrastructure components including IP Addresses, Service Types, and Load Balancing configurations. It specifically details how Anthos On-Prem Island Mode enables Pod-to-Pod connectivity and how BGP via the Calico CNI plugin forms a node-to-node mesh. Designed for network architects and SREs, this template serves as a visual guide for mapping out routable VIPs, CIDR blocks, and ingress controller setups using Envoy-based proxies. By utilizing this Anthos Networking template, teams can ensure consistent networking policies across on-premises and cloud environments while managing complex L3/L4 load balancer integrations.
Terms and ConditionsWhen to use this template
Site Reliability Engineers (SREs)
Troubleshooting connectivity issues between Pods and external services in a hybrid cloud environment
IT Infrastructure Managers
Documenting the load balancing and ingress strategy for a multi-cluster Anthos deployment
How to use this template
Step 1
Import the networking template
Open the .xmind file in Xmind desktop or web app to view the full hierarchy of Anthos networking components.
Step 2
Map your IP ranges
Edit the 'Pod CIDR block' and 'Services VIPs' nodes to include your organization's specific IP ranges and routing rules.
Step 3
Export for team review
Save your customized map and export it as a PDF or PNG to share the network architecture with your security and ops teams.
Frequently asked questions
This template includes a comprehensive breakdown of networking layers, including IP address management (Node, Pod, and Service CIDRs), service discovery types like NodePort and LoadBalancer, and hybrid connectivity strategies. It also covers security and isolation features such as VPC Service Control and Private Google Access.
Use the 'IP Addresses' branch to calculate the necessary CIDR block sizes for your nodes and services. It helps ensure your 'Services CIDR block' does not overlap with existing data center IPs, which is crucial for a successful GKE On-Prem deployment.
Yes, you can fully edit the nodes to reflect your specific hardware, such as replacing generic F5 BIG-IP references with your actual load balancer configurations or updating the 'Control plane VIP' with your production IP assignments.
Navigate to the 'Hybrid Connectivity' and 'VPC Service Control' sections to map out the secure perimeters between your on-premises clusters and Google Cloud resources, ensuring all egress traffic is properly NAT'd and routed.
Got an inspiring template?
Share your mind map templates with creators around the world and start earning from your work.
Free template