Google software-defined networking fabric includes a next-generation firewall called Google Cloud Firewall that is completely distributed
Google are happy to inform that the Cloud Firewall’s fully qualified domain name (FQDN) capability is now generally available
FQDN-based objects to facilitate domain name-based traffic filtering
When creating firewall rules for fully qualified domain name (FQDN)-based objects, Google Cloud takes care of identifying the precise IP addresses for the FQDN
For Cloud Firewall, expanded threat intelligence listings
Also available in public preview are support for IPv6 and node pools for IAM-governed tags on Google Kubernetes Engine (GKE). The Cloud Firewall Essentials grade offers tag support