Google Cloud has multiple network boundaries and perimeters that should be secured. The primary boundary is at the Private Cloud itself, consisting of dedicated sets of network segments for management and workloads. These network segments are separated from the network uplinks by an NSX Edge Gateway firewall.
