GCP Firewall allow ingress traffic based on domain name

Question

Is GCP Firewall able to allow ingress traffic based on a specific domain name?

I've googled about it and I didn't find any result on this.

All I know is it can allow or deny based on IP address.

Answer 1

A network firewall typically acts at the packet level and since network packets don't carry information about the domain, the standard GCP VPC Firewall will not let you do that.

What you are looking for is an Application Firewall (or Layer 7 Firewall). Google Cloud has another service called Cloud Armor that has WAF (Web Application Firewall) capabilities. I think that by using Cloud Armor and load balancers you might be able to do what you want.