Google Compute Engine Firewall

Question

When I create an instance in Google Compute Engine the instance is created with a default network and firewall. Does this firewall preclude the use of activating the firewall in Ubuntu itself?

In other words, is enabling the ufw in Ubuntu redundant for an ecommerce implementation?

Thank you.

Answer 1

Wont hurt to run additional firewalls. Some may have richer features that the GCE firewall doesnt have, or might help in case the GCE firewall has a security hole.
The drawback is that its more work to configure and later maintain individual firewalls if you have several instances, and you will consume a little more resources to run the extra firewall.