Question

A large enterprise runs workloads across 40 projects managed by different application teams. The central networking team must own and control all subnets, firewall rules, and routes, while individual teams deploy VMs into designated subnets within their own projects. The networking team also wants to avoid the non-transitive routing limitations that would complicate a mesh of interconnected projects. Which network design should you recommend?

Accepted Answer

Create a Shared VPC with the networking team's project as the host project and the 40 application projects as service projects.

Answer

Create a standalone VPC in each application project and establish VPC Network Peering between all 40 projects in a full mesh.

Answer

Create one VPC in a central project and connect the 40 application projects using HA VPN tunnels back to the central VPC.

Answer

Create a Shared VPC in each application project and use Private Service Connect to expose subnets to the networking team.