Step 4: Configure service networking

You're viewing Apigee X documentation.
View Apigee Edge documentation.

After creating an organization for your project, it's time to set up how it connects to the network.

To get an idea of how the parts of an Apigee organization fit together, see the Apigee architecture overview.

What you're doing in this step

Service networking describes the connections between automated systems. In this case, you (or your network administrator) connect your Google Cloud project's Virtual Private Cloud (VPC) network to Google's services. This private connection—known as a peering connection between networks—lets Google's services interact with your project. You only need to do this once. (If you'd like to see a rendering of what this connection looks like, see Peering ranges.)

After your VPC is connected to the Google services, you can configure that connection. This step sets the number of IP addresses allocated in your VPC for connecting to Google services. Your network must have a /16 block available. For more information about this process, see the following:

Perform the step

To configure the peering connection:

  1. Open the Apigee provisioning wizard if it is not currently open. The wizard returns to the most recent incomplete task in the list.
  2. In the wizard, click EDIT next to Networking in the task list.

    The Set up networking view displays:

    Set up networking

    If your project is using Shared Virtual Private Cloud (VPC) networking, select the network from your host project that will be used to peer with Apigee. If you do not see that network in the dropdown list, have an administrator with permission to manage the network create the peering range and connect the Apigee services to the network. For details, see Provisioning a paid org from the command line > Configure service networking. Then you can return to the wizard and continue. For more information on Shared VPC networking, see Shared VPC overview.

    If you are not in the compute.networkAdmin and compute.networkUser roles, the wizard displays the following view:

    Set up networking with additional links for Admin

    In that case, ask a network administrator to create a VPC and peering connection so that the wizard can configure it. They will give you the name of the network which you will then select in this step.

  3. Select your VPC network from the Authorized network drop-down list.

    The drop-down list includes all VPC networks in your Cloud project, even custom ones that don't have peering connections set up.

    If you select a network that does not have a connection set up yet, you'll be prompted to select a peering range and the wizard will create the connection for you.

    If you have not created a network, select the default VPC, which is created for all projects.

    The wizard verifies that you can add your Cloud project to the selected network. It then prompts you to reserve IP addresses — either automatically chosen by Google or from within a given range that you choose:

    Choose range

  4. If you want Apigee to manage the IP range for you, choose Automatically allocate IP range.

    If you have at least one VPC peering IP address bound to the selected network, then you can choose the Select IP ranges option. This lets you select your own range from which Apigee chooses IP addresses, or specify a new one.


    Apigee configures the connection between the VPC and Google's services to use IP addresses within the allowed ranges.

If you encounter errors during this part of the process, see Troubleshooting.

1 2 3 4 NEXT: Create a runtime 6 7 8