Download Google Cloud VPN

Cloud project. gcloud Use the gcloud edge-cloud container vpn-connections describe command:gcloud edge-cloud container vpn-connections describe VPN_CONNECTION_NAME \ --project=PROJECT_ID \ --location=REGIONReplace the following:VPN_CONNECTION_NAME: the name of the target VPNconnection.PROJECT_ID: the ID of the target Google Cloud project.REGION: the Google Cloud region in which the targetDistributed Cloud connected zone is created. API Make a GET request to the projects.locations.vpnConnections.get method:GET /v1/PROJECT_ID/locations/REGION/vpnConnections/VPN_CONNECTION_NAMEReplace the following:PROJECT_ID: the ID of the target Google Cloud project.REGION: the Google Cloud region in which the targetDistributed Cloud connected zone is created.VPN_CONNECTION_NAME: the name of the target VPNconnection.Delete a VPN connectionTo delete a Distributed Cloud VPN connection, complete thesteps in this section.If you are deleting the last remaining VPN connection associated with aCloud Router resource that Distributed Cloudpreviously created in the Google Cloud project,deleting the VPN connection automatically deletes the associatedCloud Router resource. However, only Cloud Router resourcesthat are automatically created by Distributed Cloud connected areautomatically deleted in this situation. Distributed Cloud connecteddoes not delete existing Cloud Router resources that are specifiedby using the --router flag.To complete this task, you must have theEdge Container Admin role(roles/edgecontainer.admin) in your Google Cloud project. gcloud Use the gcloud edge-cloud container vpn-connections delete command:gcloud edge-cloud container vpn-connections delete VPN_CONNECTION_NAME \ --location=REGION \ --project=PROJECT_IDReplace the following:VPN_CONNECTION_NAME: a descriptive name that uniquelyidentifies this VPN connection.REGION: the Google Cloud region in which thetarget Distributed Cloud connected zone is created.PROJECT_ID: the ID of the target Google Cloud project. API Make a DELETE request to the projects.locations.vpnConnections.deletemethod:DELETE /v1/PROJECT_ID/locations/REGION/vpnConnections/VPN_CONNECTION_NAME?requestId=REQUEST_IDReplace the following:PROJECT_ID: the ID of the target Google Cloud project.REGION: the Google Cloud region in which the targetDistributed Cloud connected zone is created.VPN_CONNECTION_NAME: the name of the target VPNconnection.REQUEST_ID: a unique programmatic ID that identifiesthis request.Manage cross-project VPN connectionsDistributed Cloud connected also allows you to create VPN connectionsto VPC networks in a Google Cloud project that'sdifferent from the Google Cloud project

This page describes how to create and manage Google Distributed Cloud connectedVPN connection resources in a Distributed Cloud connected zone.This functionality is only available on Distributed Cloud connected racks.Distributed Cloud connected servers don't support VPN connection resources.For more information about Distributed Cloud VPNconnections, seeHow Distributed Cloud connected works.Keep the following in mind:You must configure your network toallow the traffic requiredby Distributed Cloud VPN connections.When you create a Distributed Cloud VPN connection,Distributed Cloud connected creates the required Cloud VPN gatewayand Cloud Router resources. The name of the Cloud VPN gatewayis prefixed with anthos-mcc. The name of the Cloud Router is prefixedwith gdce. You must not modify these resources; otherwise, theDistributed Cloud VPN connection might stop functioning.If you accidentally modify these resources, you must delete and re-create theaffected Distributed Cloud VPN connection.Distributed Cloud connected creates a single Cloud Routerper Google Cloud project per region when you create your firstDistributed Cloud VPN connection in thatGoogle Cloud project and region. All VPN connections subsequently created inthat Google Cloud project and region reuse that same Cloud Routerresource.A Cloud Router resource can only be deleted when there are no secondarynetwork interfaces attached to it. Distributed Cloud connectedautomatically deletes a Cloud Router when you delete the last remaining VPN connection attached to it.Distributed Cloud VPN connections support IPv4 addressesonly.You can create only one VPN connection perDistributed Cloud connected cluster.If your local network uses multiple network address translation (NAT) gateways,you must configure them so that your Distributed Cloud connectedinstallation uses a single IP address for outbound traffic to yourVirtual Private Cloud (VPC) network.By default, Distributed Cloud connected configures a single VPNclient on a single node to connect to Google Cloud by using two VPNtunnels, also known asHA VPNon the Google Cloud end. You can further increase the availability ofthe VPN connection by using the --high-availability flag. This flaginstructs

Distributed Cloud connected to configure two VPN clientson two separate nodes for a total of four VPN tunnels.You must delete and re-create a VPN connection if you want to change itsconfiguration.You can manage VPN connections by using the Google Cloud CLI or theDistributed Cloud Edge Container API.Create a VPN connectionTo create a Distributed Cloud VPN connection, complete thesteps in this section.To complete this task, you must have theEdge Container Admin role(roles/edgecontainer.admin) in your Google Cloud project. gcloud Use the gcloud edge-cloud container vpn-connections create command:gcloud edge-cloud container vpn-connections create VPN_CONNECTION_NAME \ --project=PROJECT_ID \ --location=REGION \ --cluster=CLUSTER_NAME \ --vpc-network=VPC_NETWORK_NAME \ --nat-gateway-ip=NAT_GATEWAY_IP \ --router=ROUTER_NAME \ --high-availabilityReplace the following:VPN_CONNECTION_NAME: a descriptive name that uniquelyidentifies this VPN connection.PROJECT_ID: the ID of the target Google Cloud project.REGION: the Google Cloud region in which thetarget Distributed Cloud connected zone is created.CLUSTER_NAME: the name of the targetDistributed Cloud connected cluster.VPC_NETWORK_NAME: the name of the targetVPC network to which this VPN connection points. Thisnetwork must be in the same Google Cloud project as yourDistributed Cloud connected installation.NAT_GATEWAY_IP: the NAT gateway IP address for thetarget cluster. Omit this flag if you are not using NAT.ROUTER_NAME (optional): specifies an existingCloud Router resource to use for this VPN connection. Otherwise,Distributed Cloud connected creates a Cloud Routerautomatically if one does not yet exist in the targetGoogle Cloud project and region.--high-availability (optional): configures this VPN connection for highavailability on the cluster side by setting up two separate VPN clientsthat run on two separate nodes. To disable high availability,omit this flag. API Make a POST request to the projects.locations.vpnConnections.createmethod:POST /v1/PROJECT_ID/locations/REGION/vpnConnections?vpnConnectionId=VPN_CONNECTION_ID&requestId=REQUEST_ID{ "name": string, "labels": { }, "natGatewayIp": NAT_GATEWAY, "cluster": CLUSTER_PATH, "vpc": VPC_NETWORK_ID "enableHighAvailability": HA_ENABLE, "router": ROUTER_NAME,}Replace the following:PROJECT_ID: the ID of the target Google Cloud project.REGION: the Google Cloud region in which the targetDistributed Cloud connected zone is created.VPN_CONNECTION_ID: a unique programmatic ID thatidentifies this