This page shows how to use Serverless VPC Access to connect your App Engine standard environment app directly to your VPC network, allowing access to Compute Engine VM instances, Memorystore instances, and any other resources with an internal IP address.
To use Serverless VPC Access, you must first create a Serverless VPC Access connector to handle communication to your VPC network. After you create a connector, you configure your App Engine services to use the connector.
Creating a Serverless VPC Access connector
For detailed instructions on creating Serverless VPC Access connectors, refer to Creating a connector.
Configuring your app to use a connector
After you have created a Serverless VPC Access connector, you can configure the services in your App Engine app to use the connector.
To specify a connector for a service in your app:
<vpc-access-connector>element to your service's
<vpc-access-connector> <name>projects/PROJECT_ID/locations/REGION/connectors/CONNECTOR_NAME</name> </vpc-access-connector>
PROJECT_IDis your Cloud project ID,
REGIONis the region your connector is in, and
CONNECTOR_NAMEis the name of your connector.
Deploy the service:
gcloud app deploy WEB-INF/appengine-web.xml
After you deploy your service, it is able to send requests to internal IP
addresses in order to access resources in your VPC network.
To disconnect a service from a VPC network, remove the
<vpc-access-connector> element from the
appengine-web.xml file and re-deploy the service.
Connecting to a Shared VPC network
Make sure an administrator of the host project completes the setup described at Configuring the host project if using Shared VPC.
Create the Shared VPC connector following the instructions at Creating a connector.
Specify the connector in your
appengine-web.xmlfile using the connector's fully-qualified name:
<vpc-access-connector> <name>projects/SERVICE_PROJECT_ID/locations/CONNECTOR_REGION/connectors/CONNECTOR_NAME</name> </vpc-access-connector>Where
SERVICE_PROJECT_IDis the ID of the service project,
CONNECTOR_REGIONis the region the connector is in, and
CONNECTOR_NAMEis the name of the connector.
This connects your App Engine service to the Shared VPC network.
- Learn more about Serverless VPC Access.
- Learn how to connect to Memorystore from the App Engine standard environment.