Is it possible to connect through vpc peering?

1,608 views

Skip to first unread message

변재천

unread,

Jul 8, 2022, 12:18:19 PM7/8/22

to Google Cloud SQL discuss

I made two VPCs and connected them with peering.
Can I access Cloud SQL in B-VPC from VM in A-VPC?
SQL Proxy and Public IP are not being used.
Cloud SQL is using private IP.

Gabe Weiss

unread,

Jul 8, 2022, 12:42:40 PM7/8/22

to google-cloud...@googlegroups.com

Unfortunately no, not easily. Cloud SQL is a service deployed from Private Services (a Google-managed VPC) and when you instantiate an instance of it, that Cloud SQL is peered to your project's VPC where you deploy it. That means there's already one degree of VPC peering happening. VPC peering is not transitive sadly. So e.g. you have VPC A peered to VPC B, and VPC B is peered to VPC C. VPCs A and C cannot see each other.

Ways around this are to use VPC Sharing instead of peering, and use hosted projects to house your data (shared VPCs can see each other okay), or use Public IP on your Cloud SQL instance (but don't use authorized networks which becomes more of a security issue) and use the SQL Proxy like you are. You can also set up a bastion instance in the VPC with Cloud SQL. Use a VM with a public IP that you lock down to only be able to communicate with the application VPC, and use something like a Socks5 proxy on the bastion instance.

Gabe Weiss (he/him) |

Developer Advocate |

gwe...@google.com

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-d...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/871246a5-5c07-413d-8a17-cbba2e0fb0a8n%40googlegroups.com.

Reply all

Reply to author

Forward

0 new messages