Skip to content
iceMax
hello@icemax.net

Google Cloud Platform Infrastructure

Google Cloud Platform infrastructure.

Containerised workloads and cross-cloud connectivity, managed alongside the edge and the AWS estate.

03 Service Overview

We deliver managed Google Cloud Platform deployments focused on multi-cloud integration, containerised workloads and infrastructure cost control — operated from Singapore for organisations across Asia-Pacific.

GCP is treated as one environment within a wider estate rather than in isolation. Where workloads span providers, VPC peering and secure interconnects are configured so that routing between GCP, AWS and the Cloudflare edge is deliberate, and so that inspection and compute placement remain consistent across the path.

Kubernetes as the reason to be here

Google Kubernetes Engine is the most mature managed Kubernetes platform available, and for many organisations it is the reason Google Cloud enters the estate. We design and operate GKE clusters in both Standard and Autopilot modes: node pools sized against actual pod requests rather than guesses, workload identity in place of long-lived service account keys, network policy restricting east-west traffic, and ingress fronted by the Cloudflare perimeter so the cluster is never directly exposed.

Where a service does not need a cluster — a stateless API, a scheduled job, a webhook receiver — Cloud Run runs the container without the operational overhead, scaling to zero when idle. Choosing between GKE and Cloud Run per workload, rather than putting everything on the cluster because the cluster exists, is a large part of what keeps GCP spend proportional.

Connectivity across clouds

A multi-cloud estate is only as good as the network between its parts. We configure the project and VPC hierarchy so that GCP workloads reach AWS workloads over private addressing — VPN tunnels for modest throughput, Cloud Interconnect meeting AWS Direct Connect at a carrier-neutral facility where bandwidth and latency demand it — with DNS resolving across both sides and firewall rules written once, not per cloud.

The Cloudflare edge is joined to the same fabric. Inbound traffic is inspected at the perimeter and routed to whichever cloud holds the service, and the origin in each cloud accepts connections from Cloudflare alone.

Spend that stays proportional

Google Cloud’s pricing model is generous to committed, steady workloads and expensive for the forgotten. We review each project against real consumption on an ongoing basis: committed use discounts applied to the stable baseline, idle Compute Engine instances and unattached persistent disks, node pools with headroom far beyond what pods request, storage classes that do not match access patterns, egress paths that could stay in-region. Budgets and alerts at the billing account make growth visible early, and each recommendation is quantified before it is applied.

Where GCP sits in the estate

Google Cloud is one of two cloud platforms we operate, behind a Cloudflare perimeter and alongside AWS. Organisations engage us to bring an existing set of GCP projects under management, to build a Kubernetes platform for an application moving to containers, or to add GCP as a second provider to an AWS estate — with the network between them designed rather than improvised.

01 What We Provide
01

Compute & Container Management

Deployment and scaling of Google Compute Engine instances and Google Kubernetes Engine (GKE) clusters.

02

Cross-Cloud Connectivity

Configuration of VPC peering and secure interconnects between GCP, AWS, and Cloudflare edge networks.

03

GCP Resource Optimisation

Auditing project resource usage, committed use discounts, and idle compute allocation to control monthly spend.

02 How We Approach the Engagement
  1. 01

    Project and network review

    Existing project structure, resource usage and network boundaries are mapped before changes are proposed.

  2. 02

    Workload placement

    Compute Engine and GKE workloads are placed according to latency, data residency and interconnect requirements.

  3. 03

    Connectivity

    VPC peering and secure interconnects are configured so GCP, AWS and the edge form one routed path.

  4. 04

    Spend review

    Committed use discounts and idle allocation are reviewed against actual consumption.

03 Technical Capabilities
  • Google Compute Engine instance deployment and scaling
  • Google Kubernetes Engine (GKE) cluster management
  • Cloud Run for containerised services without cluster overhead
  • Organisation, folder and project hierarchy design
  • Shared VPC and VPC peering between GCP and AWS environments
  • Cloud Interconnect and Cloud VPN
  • Secure interconnects to Cloudflare edge networks
  • Project resource usage auditing
  • Committed use discount analysis
  • Idle compute allocation review
  • Infrastructure as code with Terraform
04 Questions

When does Google Cloud make more sense than AWS?

When the workload is Kubernetes-first and benefits from GKE’s managed control plane and Autopilot mode; when the data platform is built on BigQuery; when the team already works in Google Workspace and identity is simpler there; or when a second provider is needed for resilience or negotiating position. Most of our clients run both, placed by workload rather than by preference.

Can iceMax connect our GCP project to an existing AWS environment?

Yes. Depending on the throughput and latency required, this is done with VPN tunnels between the two clouds, with Cloud Interconnect and AWS Direct Connect meeting at a common carrier, or through Cloudflare’s network as the routing fabric. Route tables, firewall rules and DNS are designed so services on either side resolve and reach each other as if they were in one network.

Do you manage GKE clusters as an ongoing service?

Yes. Cluster version upgrades, node pool sizing, workload identity, network policy, ingress and certificate management, and observability are operated on a continuing basis. Application deployment pipelines stay with your developers; we keep the platform they deploy onto current and correctly sized.

How is GCP spend controlled?

Every project is reviewed against actual consumption: committed use discounts applied to the stable baseline, idle Compute Engine instances and persistent disks identified, GKE node pools right-sized against pod requests, and Cloud Storage classes matched to access patterns. Budgets and alerts are configured at the billing account so growth is visible before the invoice arrives.

Which GCP regions do you deploy to?

asia-southeast1 (Singapore) is the default for Southeast Asian workloads, with asia-southeast2 (Jakarta), asia-east2 (Hong Kong), asia-northeast1 (Tokyo) and australia-southeast1 (Sydney) for regional placement and disaster recovery. Data residency requirements are confirmed before region selection.

Is Google Cloud offered as part of a multi-cloud managed service?

That is the usual shape. Cloudflare provides the perimeter, AWS and GCP hold the compute. One team is accountable for the whole path, from the request arriving at the edge to the container that answers it.

Enquiries

Discuss a GCP
infrastructure requirement.