google-cloud-waf-performance-optimization
Generates performance-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Performance Optimization pillar of the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify performance requirements, and provide actionable recommendations for resource allocation, modular design, and elasticity.
- License 许可
- Apache-2.0
- 所属仓库
- google/skills
- 最近更新
- 2026-11-13
- Stars
- ★ 2.4w
- Forks
- 2.0k
01 前言 Front Matter
- name
- google-cloud-waf-performance-optimization
- metadata
- { "version": "1.0.1", "category": "WellArchitectedFramework" }
- description
- Generates performance-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Performance Optimization pillar of the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify performance requirements, and provide actionable recommendations for resource allocation, modular design, and elasticity.
02 资源文件 1
- 参考文档references/attribution.md1.9 KB
03 SKILL.md 正文
Google Cloud Well-Architected Framework skill for the Performance Optimization pillar
Attribution
MUST READ: Before executing any gcloud, REST API, or MCP command, you
MUST read and follow the instructions in
Usage Attribution.
Overview
The Performance Optimization pillar of the Google Cloud Well-Architected Framework provides principles and recommendations to help you design, build, and operate high-performing workloads. It focuses on efficiently allocating resources, leveraging modular architectures, and using data-driven insights to continuously monitor and improve performance as your business needs evolve.
Core principles
The recommendations in the performance optimization pillar of the Well-Architected Framework are aligned with the following core principles:
-
Plan resource allocation: Carefully select and configure the compute, storage, and networking resources that best match the specific requirements of your workload. Grounding document: https://docs.cloud.google.com/architecture/framework/performance-optimization/plan-resource-allocation.md.txt
-
Take advantage of elasticity: Utilize automated scaling and serverless technologies to dynamically adjust resource capacity in response to real-time demand fluctuations. Grounding document: https://docs.cloud.google.com/architecture/framework/performance-optimization/elasticity.md.txt
-
Promote modular design: Architect systems using independent, loosely coupled components to enhance scalability and allow individual parts to be optimized without affecting the entire system. Grounding document: https://docs.cloud.google.com/architecture/framework/performance-optimization/promote-modular-design.md.txt
-
Continuously monitor and improve performance: Implement robust observability to identify bottlenecks and use performance data to drive iterative enhancements throughout the software development lifecycle. Grounding document: https://docs.cloud.google.com/architecture/framework/performance-optimization/continuously-monitor-and-improve-performance.md.txt
Relevant Google Cloud products
The following are examples of Google Cloud products and features that are relevant to performance optimization:
-
Compute and scaling
- Compute Engine (MIGs): Managed instance groups that support autoscaling and load balancing for VM-based workloads.
- Google Kubernetes Engine (GKE): Provides container orchestration with horizontal and vertical pod autoscaling.
- Cloud Run: A fully managed serverless platform that automatically scales containers to zero or up based on traffic.
-
Data and caching
- Cloud CDN: Low-latency content delivery network to cache static and dynamic content closer to end-users.
- Memorystore: Managed in-memory data store for Valkey and Redis to provide sub-millisecond data access.
- Bigtable: NoSQL database service for analytical and operational workloads requiring low latency and high throughput.
- Spanner: RDBMS that provides global consistency, high availability, and horizontal scaling for mission-critical transactional applications.
-
Performance analysis and monitoring
- Cloud Trace: Distributed tracing system that helps identify latency bottlenecks.
- Cloud Profiler: Continuous CPU and memory profiling to identify resource-heavy application code.
- Cloud Monitoring: Provides dashboards and alerts based on performance KPIs like latency and throughput.
Workload assessment questions
Ask appropriate questions to understand the performance-related requirements and constraints of the workload and the user's organization. Choose questions from the following list:
-
Plan resource allocation
- When initially provisioning compute resources for a new application, which approach do you use to determine the required capacity for expected peak loads?
- Which caching strategies (browser, in-memory, CDN, database) do you utilize to improve performance and responsiveness?
- How do you optimize the performance of your data storage solutions (e.g., SSD vs HDD, storage classes) for your applications?
-
Promote modular design
- Which architectural patterns (microservices, asynchronous messaging, stateless servers) do you employ to enhance performance and resilience?
- How do you design your application to minimize the impact of failures in one part of the system on other parts?
-
Continuously monitor and improve performance
- How frequently do you review and analyze the performance of your production applications and infrastructure?
- Which tools or techniques (APM, distributed tracing, load testing) do you use to proactively identify and diagnose performance bottlenecks?
- How do you incorporate performance considerations into your software development lifecycle (SDLC)?
-
Take advantage of elasticity
- Which methods do you use to manage and optimize the cost of your cloud resources while maintaining performance?
- How do you typically handle sudden spikes in traffic or workload on your applications?
Validation checklist
Use the following checklist to evaluate the architecture's alignment with performance optimization recommendations:
-
Resource allocation
- [ ] Initial provisioning is based on load testing or historical data rather than general estimates.
- [ ] Caching is implemented at multiple layers (CDN, in-memory, or browser) to offload backend systems.
- [ ] Storage types (SSD/HDD) and classes are selected based on the specific I/O requirements of the workload.
-
Modular design
- [ ] The architecture uses microservices or decoupled components to allow independent scaling.
- [ ] Circuit breakers or bulkheads are implemented to isolate failures and prevent performance degradation across the system.
-
Monitoring and continuous improvement
- [ ] Automated dashboards and alerts are configured for key performance indicators (KPIs).
- [ ] Distributed tracing and profiling tools are used to identify code-level bottlenecks.
- [ ] Performance testing (unit and integration) is integrated into the software development lifecycle.
-
Elasticity
- [ ] Auto-scaling rules are configured and validated to handle variable demand.
- [ ] The architecture leverages serverless or managed services to dynamically match capacity to load.
- [ ] Resource utilization is reviewed regularly to eliminate idle overhead and balance cost with performance.
04 同仓库更多 Skills
sign-in-with-google-web
Implement, configure, and secure Sign In With Google (SiwG) using Google Identity Services (GIS / `https://accounts.google.com/gsi/client`) across web architectures. Use when creating Google sign-in buttons, implementing Google One Tap with FedCM, integrating GIS in React/Next.js/Angular/HTML, verifying ID tokens on backend runtimes (Python/Node.js/Go/Java), enforcing Google Workspace domain restrictions (`hd`), securing client-side ID tokens via WebCrypto nonces or encrypted IndexedDB, embedding in cross-origin iframes via the Intermediate Iframe API (`https://accounts.google.com/gsi/intermediate`), configuring Content Security Policy (CSP), COOP, and Permissions Policy (`identity-credentials-get`) headers, or handling sign-out and revocation. Don't use for legacy Google Sign-In (`gapi.auth2`), Google Cloud IAM service accounts, or Android/iOS native Credential Manager.
dpop-adoption
Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM / service account authentication.
retrieving-developer-knowledge
Searches, retrieves, and synthesizes official Google developer documentation across Google Cloud, AI/Gemini, Android, Chrome, Web, Flutter, Go, Firebase, and other Google developer platforms. Integrates with the Developer Knowledge MCP server (search_documents, get_documents, answer_query) or the Developer Knowledge REST API fallback. Use when searching for gcloud CLI commands, API syntax, IAM permissions, official documentation, architectural comparisons, or product choice overviews. Don't use for local filesystem lookups or non-Google documentation.
migrate-to-rust
Clones, analyzes, plans, and migrates legacy codebases (C++, Fortran, Java, Python, C, Shell) from a GitHub URL or local directory to a modern, high-performance, deterministic, 100% Safe Rust architecture, tracking live telemetry across every task bucket, test failure/fix cycle, and Profile-Guided Optimization (PGO) stage, and producing a first-person AI storytelling report and interactive HTML infographic. Use when migrating a GitHub repository or local codebase to Rust, porting legacy C++, Fortran, Python, or Java workloads to memory-safe Rust, designing Struct-of-Arrays (SoA) or SIMD Rust architectures, or optimizing Rust ports with LLVM PGO. Don't use for unrelated non-Rust refactoring or single-line syntax questions.
finding-google-skills
Google platform decision and setup guidance, loaded on demand from Google's skill catalog. Use when a developer is choosing or setting up part of their stack, such as where to run a service, a database, storage, messaging, authentication, analytics, ads, or AI model serving, and a Google product is a reasonable candidate - whether or not a vendor is named - or when a request names a Google product or API. Brings in the matching Google skill so the answer can weigh Google options, their trade-offs, and when they are not the right fit. Skip when the stack is already settled on another provider and no Google product is named, or the task involves no platform choice.
workload-manager-basics
Use this skill to manage Google Cloud Workload Manager evaluations, rules, scanned resources, and validation results by using public client libraries and the REST API. Use when you need to inspect workload best-practice rules, create and run evaluations for Google Cloud general best practices, SAP, SQL Server, or custom organizational rules, review violations, export results to BigQuery, or automate Workload Manager through client libraries because no service-specific public CLI or MCP server is available. Don't use for general Google Compute Engine instance management, VPC configuration, or standard IAM auditing.