Cloud Firewall Service Insertion Design – Ingress Traffic

Following are two popular design choice

Centralized VPC Sandwich LB Design

Dedicated Ingress VPC Design

Topology Credit: Rodrigo Loureiro