IP address utilization insights

This page describes the Network Analyzer insights for IP address utilization. For information about all the insight types, see Insight groups and types.

IP address utilization insights show the IP address allocation percentage of subnet ranges, which are calculated based on configurations that use IP addresses, such as VMs and load balancers. In the case of Shared VPC, Network Analyzer provides the IP address utilization insights of the host project, and the information from service projects is automatically aggregated to derive the insight information.

View insights in the Recommender API

To view these insights in the gcloud CLI or the Recommender API, use the following insight type:

  • google.networkanalyzer.vpcnetwork.ipAddressInsight

You need the following permissions:

  • recommender.networkAnalyzerIpAddressInsights.list
  • recommender.networkAnalyzerIpAddressInsights.get

For more information about using the Recommender API for Network Analyzer insights, see Use the Recommender CLI and API.

High IP address utilization of a subnet

Indicates that the IP address utilization of a subnet is too high (the allocation ratio is higher than 75 percent). Such an issue can prevent automation from creating new VMs or upgrading a GKE cluster. This insight includes the following information:

  • Subnetwork: The name of the subnetwork.
  • Secondary range name: If the insight shows the primary range of the subnet, this field is not displayed.
  • IP address range: The IP address range of the subnetwork range.
  • Allocation ratio: The percentage of IP addresses from the range of the subnet that are allocated.
  • Resources using this range: The count of the number of resources of this type that have allocated IP addresses within the IP address range of the subnet. This attribute gives a summary of the number of IP addresses used by resources such as VMs and load balancers.

The allocation ratio of the primary range includes the four unusable IP addresses.

Recommendations

You have two options:

IP address utilization summary

This insight gives a summary of the IP address utilization of subnet ranges in the analyzed project. It includes the following information:

  • All subnet ranges that have an allocation ratio more than zero.
  • Secondary range name: The secondary range name of a subnet. This field is not displayed for the primary range of a subnet.
  • Subnet range prefix: The IP address range of the subnetwork range in CIDR format.
  • Allocation ratio: The ratio (between 0 and 1, 1 being 100%) of IP addresses allocated from the range of the subnet compared to the total number of IP addresses in the subnet.

The allocation ratio of the primary range includes the four unusable IP addresses.

For more information, see High IP address utilization insight.

PSA IP address utilization summary

This insight gives a summary of the IP utilization of Private Service Access (PSA) ranges in the analyzed projects.

  • PSA ranges are used by Google Cloud managed services such as Cloud SQL. The managed service creates a PSA subnet in the Google managed Virtual Private Cloud (VPC) that is peered to your VPC.
  • In the table that populates information related to this insight, columns contain data that is relevant to PSA ranges or PSA subnets:
    • PSA ranges include Network, PSA range prefix, and Allocation ratio columns.
    • PSA subnets include Network, PSA range prefix, PSA subnet region, PSA subnet service, and Allocation ratio columns.
  • In the case of Shared VPC, Network Analyzer provides the IP address utilization insights of the host project.

This insight includes the following information:

  • PSA range prefix: PSA ranges are configured with a prefix that you reserve in your VPC for these managed services.
  • PSA subnet prefix: PSA subnets are identified with an IP range that is a subset of the PSA range.
  • PSA subnet region: The region used by the PSA managed service for this PSA subnet.
  • PSA subnet service: The insight also includes the name of the managed service using the PSA subnet for the services listed in the following Managed services supporting the name field section.
  • Allocation ratio:
    • The allocation ratio of the PSA range corresponds to how much of the range is allocated to managed services. Each managed service you use reserves one or multiple ranges of varying size, depending on the service.
    • The allocation ratio of the PSA subnet corresponds to the number of IP addresses that are allocated from the range of the PSA subnet in the Google-managed VPC compared to the total number of IP addresses in the range.

Managed services supporting the name field

The name field is populated for the following services:

  • AlloyDB for PostgreSQL
  • Apigee
  • Cloud Build
  • Cloud SQL
  • Memorystore for Memcached
  • Memorystore for Redis
  • Vertex AI managed notebooks

Recommendations

Review the allocation ratio for your PSA ranges and consider adding new PSA ranges as soon as the allocation ratio is greater than 50%.