
Google Network Connectivity Center
Network access control software
Network security software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if Google Network Connectivity Center and its alternatives fit your requirements.
Pay-as-you-go
Small
Medium
Large
-
What is Google Network Connectivity Center
Google Network Connectivity Center is a Google Cloud managed hub-and-spoke service for connecting and routing traffic between VPC networks, on-premises sites, and branch locations using Google Cloud networking attachments. It targets cloud and network teams that need centralized connectivity management across multiple regions and projects, often in hybrid or multi-site environments. The product focuses on connectivity orchestration and route distribution rather than endpoint access control, and it integrates with Google Cloud services such as Cloud Interconnect, Cloud VPN, and Cloud Router.
Centralized hub-and-spoke routing
The service provides a single control plane to connect multiple VPCs and hybrid network attachments through a hub-and-spoke model. This can simplify route propagation and reduce the need for complex, manually managed peering topologies. It supports common enterprise patterns such as shared services VPCs and segmented environments across projects.
Native Google Cloud integration
Network Connectivity Center works with Google Cloud connectivity primitives such as Cloud VPN, Dedicated/Partner Interconnect, and Cloud Router. This allows organizations already standardized on Google Cloud networking to manage hybrid connectivity using consistent constructs and IAM-based administration. It also aligns with Google Cloud’s regional networking design and operational tooling.
Scales for multi-site connectivity
The hub model is designed to accommodate many spokes and attachments, which is useful for distributed enterprises with multiple branches or on-prem sites. Centralized connectivity can reduce operational overhead compared with managing many point-to-point connections. It is suited to organizations that need consistent routing behavior across environments rather than per-user access brokering.
Not a NAC or ZTNA tool
Despite being adjacent to security use cases, the product does not provide endpoint posture checks, device onboarding, or user-based access policies typical of network access control platforms. It primarily manages network connectivity and routing, so organizations still need separate controls for identity-aware access, device compliance, and segmentation enforcement at the user/device level. This can increase solution complexity when NAC is a core requirement.
Google Cloud dependency
Network Connectivity Center is specific to Google Cloud and is most valuable when Google Cloud is the central transit environment. Organizations with significant investments in other cloud providers or non-cloud WAN architectures may find the service less applicable. Multi-cloud connectivity and policy consistency may require additional products or architectural work.
Requires networking expertise
Effective use depends on correct design of routing, IP addressing, and attachment configuration across VPCs and hybrid links. Misconfiguration can lead to route leaks, asymmetric routing, or unexpected reachability between segments. Teams without strong cloud networking skills may face a steeper implementation and troubleshooting curve.
Plan & Pricing
Pricing model: Pay-as-you-go (usage-based)
Free tier / waivers: Spoke hour charges are waived for up to three VPN spokes and three Cloud Interconnect (VLAN attachment) spokes; this is a waiver noted on the official pricing page (not a named “free plan” product tier). cite
Key charges and rates (official):
- Hub: No charge. cite
- Spoke hours (charges applied per hour that a spoke is active):
- Cloud Interconnect, Cloud VPN, and Cloud Router appliance spokes: $0.075 per hour. cite
- VPC and producer VPC spokes: $0.10 per hour. cite
- Advanced Data Networking (ADN) data processing fee: $0.02 per GiB per month for traffic sent from a spoke through a hub. (ADN applies to traffic originating from VPC spokes; ADN for hybrid spokes is currently waived according to the page.) cite
- Data transfer (site-to-site / outbound) to worldwide destinations (excluding Australia) — tiered per-month pricing by GiB:
- 0 to 1,024 GiB: $0.12 per GiB per month.
- 1,024 to 10,240 GiB: $0.11 per GiB per month.
- 10,240 GiB and above: $0.08 per GiB per month. cite
Notes & examples (official):
- Spoke hour charges and ADN charges accrue in their respective projects; spoke-hour credits (waivers) noted above apply. cite
- The pricing page includes example monthly cost calculations (spoke-hour + data transfer + ADN examples). The Network Connectivity pricing page also makes clear that charges for other Google Cloud resources (Cloud VPN, Cloud Interconnect, Compute Engine used by router appliances, external IP addresses) are billed separately and are not included in the NCC product charges. cite
Example cost items (from the official page):
- Spoke hour: $0.075 / hour (Cloud VPN/Interconnect/Router appliance spoke). cite
- ADN: $0.02 / GiB. cite
- Data transfer tier (example): $0.08–$0.12 / GiB depending on monthly volume. cite
Seller details
Google LLC
Mountain View, CA, USA
1998
Subsidiary
https://cloud.google.com/deep-learning-vm
https://x.com/googlecloud
https://www.linkedin.com/company/google/