1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
|
#####################
Google Cloud Platform
#####################
This guide provides step-by-step instructions for deploying a VyOS instance with two NICs and the required resources on Google Cloud Platform (GCP).
Prerequisites
========
Before proceeding, ensure the following:
- A GCP account with billing enabled.
- Permissions to deploy Marketplace images.
- Access to enable APIs and create resources (e.g., Compute Engine Admin, Network Admin).
- An SSH key pair for VyOS instance access.
- GA Google Cloud Project.
Deployment Steps
========
Step 1: Add SSH Key
-------------------
1. If you don’t already have SSH keys, generate an SSH key pair of type ``ssh-rsa`` on your local machine:
Example:
.. code-block:: none
ssh-keygen -t rsa -f ~/.ssh/vyos_gcp -C "vyos@mypc"
.. note:: In the comment ``vyos@mypc``, the username must start with vyos.
This is because the default user in the VyOS image is ``vyos``, and the Google Cloud API uses this value for SSH access.
2. Open GCP console and navigate to the **Compute Engine** > **Metadata** > **SSH Keys**. Choose
**SSH Keys**.
.. figure:: /_static/images/cloud-gcp-01.png
3. Click **edit** and **Add item**.
4. Paste your public ssh key and **Save**.
.. figure:: /_static/images/cloud-gcp-02.png
For more information, please visit the official Google Cloud documentation:
https://cloud.google.com/compute/docs/connect/add-ssh-keys
https://cloud.google.com/compute/docs/connect/create-ssh-keys
Step 2: Create a Service Account (If You Don't Have One)
-------------------------------
1. In the Google Cloud console **IAM & Admin > Service Accounts**.
2. Select select a project.
.. figure:: /_static/images/cloud-gcp-proj.png
3. Click **Create Service Account**:
- Name: e.g., ``vyos-test``
- Service account ID: e.g., ``vyos-test``
- Description: e.g., ``VyOS Test Service Account``
4. Click **Done**.
.. figure:: /_static/images/cloud-gcp-svc.png
For more information, please visit the official Google Cloud documentation:
https://cloud.google.com/iam/docs/service-accounts-create
https://cloud.google.com/iam/docs/service-account-overview
Step 3: Create VPC Networks and Subnets
-------------------------------
1. In the Google Cloud console **VPC Network > VPC Networks** https://console.cloud.google.com/networking/networks/list
2. Select select a project.
.. figure:: /_static/images/cloud-gcp-proj.png
3. Click **Create VPC Network**.
**Public VPC**:
- Name: e.g., ``vyos-public-vpc``
- Subnet creation mode: ``Custom``
- Subnet name: e.g., ``vyos-public-subnet``
- Region: e.g., ``europe-west1``
- IP range: e.g., ``10.0.1.0/24``
- Leave all other settings at default, then click **Create**.
.. figure:: /_static/images/cloud-gcp-vpc-01.png
.. figure:: /_static/images/cloud-gcp-vpc-02.png
**Private VPC**:
- Name: ``vyos-private-vpc``
- Subnet creation mode: ``Custom``
- Subnet name: ``vyos-private-subnet``
- Region: e.g., ``europe-west1``
- IP range: ``10.0.11.0/24``
- Leave all other settings at default, then click **Create**.
.. figure:: /_static/images/cloud-gcp-vpc-03.png
.. figure:: /_static/images/cloud-gcp-vpc-04.png
4. Add firewall rules to allow specific network traffic from the Internet. By default all incoming traffic from outside a network is blocked.
.. figure:: /_static/images/cloud-gcp-vpc-05.png
.. figure:: /_static/images/cloud-gcp-vpc-06.png
.. figure:: /_static/images/cloud-gcp-vpc-07.png
For more information, please visit the official Google Cloud documentation:
https://cloud.google.com/vpc/docs/create-modify-vpc-networks
Step 4: Deploy VyOS instance from Marketplace
---------
1. Go to the Google Cloud Marketplace page in the Google Cloud console https://console.cloud.google.com/marketplace
2. Choose the project where you want to deploy the VyOS instance.
.. figure:: /_static/images/cloud-gcp-proj.png
3. In the search bar, type ``vyos`` to find the VyOS image in the Marketplace.
.. figure:: /_static/images/cloud-gcp-market-01.png
.. figure:: /_static/images/cloud-gcp-market-02.png
4. On the next page, review details such as support, pricing, and other details.
.. figure:: /_static/images/cloud-gcp-market-03.png
5. Click the ``GET STARTED`` button to start deployment process.
.. figure:: /_static/images/cloud-gcp-market-04.png
.. figure:: /_static/images/cloud-gcp-market-05.png
6. General settings.
- Deployment name: e.g., ``vyos-test-vm``
- Select a Service Account: Select the service account created earlier.
- Image: Select VyOS image for deployment.
- Zone: e.g., ``europe-west1-b``
- Machine type: Choose based on performance and resource needs.
.. figure:: /_static/images/cloud-gcp-vm-01.png
.. figure:: /_static/images/cloud-gcp-vm-02.png
7. Configure the network interfaces.
**Public Network interface:**
Edit the first (default) network interface and select following settings:
- Network: ``vyos-public-vpc``
- Subnetwork: ``vyos-public-subnet``
- External IP: ``Ephemeral``
- Private Network interface:
**Private Network Interface:**
Click **ADD A NETWORK INTERFACE** button to create a second (private) interface, and select following settings:
- Network: ``vyos-private-vpc``
- Subnetwork: ``vyos-private-subnet``
- External IP: ``None``
.. figure:: /_static/images/cloud-gcp-vm-03.png
8. Deployment automation.
- You can use ``cloud-init`` ``User Data`` to automatically inject specific configuration commands into the VyOS instance during deployment.
- Example:
.. code-block:: none
#cloud-config
vyos_config_commands:
- set system host-name 'VyOS-for-GCP'
- set system login banner pre-login 'Welcome to the VyOS for on GCP'
- set interfaces ethernet eth0 description 'WAN'
- set interfaces ethernet eth1 description 'LAN'
- set interfaces ethernet eth1 address 'dhcp'
- set interfaces ethernet eth1 dhcp-options no-default-route
For more information, please visit the official VyOS documentation:
https://docs.vyos.io/en/stable/automation/cloud-init.html#module-vyos-userdata
.. figure:: /_static/images/cloud-gcp-vm-09.png
9. Click ``Deploy`` button.
.. figure:: /_static/images/cloud-gcp-vm-06.png
.. figure:: /_static/images/cloud-gcp-vm-07.png
Connect to the VyOS instance
-----------
To connect to the VyOS instance, use the SSH key that was generated in the first step.
To retrieve the public IP address, go to the **Google Cloud Console** and navigate to: **Compute Engine** > **VM instances** https://console.cloud.google.com/compute/instances?project=vyos-images
.. figure:: /_static/images/cloud-gcp-vm-08.png
Example:
.. code-block:: none
ssh vyos@35.233.97.132 -i .ssh/vyos_gcp
The authenticity of host '35.233.97.132 (35.233.97.132)' can't be established.
ED25519 key fingerprint is SHA256:KCsCnwCGhwX2ba5RcPUAO3ZUSNzS4sXIkujFoScCd0g.
This key is not known by any other names
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '35.233.97.132' (ED25519) to the list of known hosts.
Welcome to the VyOS for on GCP
Welcome to VyOS!
┌── ┐
. VyOS 1.4.2
└ ──┘ sagitta
* Documentation: https://docs.vyos.io/en/sagitta
* Project news: https://blog.vyos.io
* Bug reports: https://vyos.dev
You can change this banner using "set system login banner post-login" command.
VyOS is a free software distribution that includes multiple components,
you can check individual component licenses under /usr/share/doc/*/copyright
vyos@VyOS-for-GCP:~$
|
