Google Cloud Network Management V1 Client - Class Cause (2.1.0)

Version 2.1.0

• 2.1.1 (latest)
• 2.1.0
• 2.0.1
• 1.7.3
• 1.5.0
• 1.4.2
• 1.3.0
• 1.2.0
• 1.1.1
• 1.0.5

Reference documentation and code samples for the Google Cloud Network Management V1 Client class Cause.

Drop cause types:

Protobuf type google.cloud.networkmanagement.v1.DropInfo.Cause

Namespace

Google \ Cloud \ NetworkManagement \ V1 \ DropInfo

Methods

static::name

Parameter
Name	Description
value	mixed

static::value

Parameter
Name	Description
name	mixed

Constants

CAUSE_UNSPECIFIED

Value: 0

Cause is unspecified.

Generated from protobuf enum CAUSE_UNSPECIFIED = 0;

UNKNOWN_EXTERNAL_ADDRESS

Value: 1

Destination external address cannot be resolved to a known target. If the address is used in a Google Cloud project, provide the project ID as test input.

Generated from protobuf enum UNKNOWN_EXTERNAL_ADDRESS = 1;

FOREIGN_IP_DISALLOWED

Value: 2

A Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.

Generated from protobuf enum FOREIGN_IP_DISALLOWED = 2;

FIREWALL_RULE

Value: 3

Dropped due to a firewall rule, unless allowed due to connection tracking.

Generated from protobuf enum FIREWALL_RULE = 3;

NO_ROUTE

Value: 4

Dropped due to no matching routes.

Generated from protobuf enum NO_ROUTE = 4;

ROUTE_BLACKHOLE

Value: 5

Dropped due to invalid route. Route's next hop is a blackhole.

Generated from protobuf enum ROUTE_BLACKHOLE = 5;

ROUTE_WRONG_NETWORK

Value: 6

Packet is sent to a wrong (unintended) network. Example: you trace a packet from VM1:Network1 to VM2:Network2, however, the route configured in Network1 sends the packet destined for VM2's IP address to Network3.

Generated from protobuf enum ROUTE_WRONG_NETWORK = 6;

ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED

Value: 42

Route's next hop IP address cannot be resolved to a GCP resource.

Generated from protobuf enum ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED = 42;

ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND

Value: 43

Route's next hop resource is not found.

Generated from protobuf enum ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND = 43;

ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK

Value: 49

Route's next hop instance doesn't have a NIC in the route's network.

Generated from protobuf enum ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK = 49;

ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP

Value: 50

Route's next hop IP address is not a primary IP address of the next hop instance.

Generated from protobuf enum ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP = 50;

ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH

Value: 51

Route's next hop forwarding rule doesn't match next hop IP address.

Generated from protobuf enum ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH = 51;

ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED

Value: 52

Route's next hop VPN tunnel is down (does not have valid IKE SAs).

Generated from protobuf enum ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED = 52;

ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID

Value: 53

Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).

Generated from protobuf enum ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID = 53;

NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS

Value: 44

Packet is sent from the Internet to the private IPv6 address.

Generated from protobuf enum NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS = 44;

VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH

Value: 45

The packet does not match a policy-based VPN tunnel local selector.

Generated from protobuf enum VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH = 45;

VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH

Value: 46

The packet does not match a policy-based VPN tunnel remote selector.

Generated from protobuf enum VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH = 46;

PRIVATE_TRAFFIC_TO_INTERNET

Value: 7

Packet with internal destination address sent to the internet gateway.

Generated from protobuf enum PRIVATE_TRAFFIC_TO_INTERNET = 7;

PRIVATE_GOOGLE_ACCESS_DISALLOWED

Value: 8

Instance with only an internal IP address tries to access Google API and services, but private Google access is not enabled in the subnet.

Generated from protobuf enum PRIVATE_GOOGLE_ACCESS_DISALLOWED = 8;

PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED

Value: 47

Source endpoint tries to access Google API and services through the VPN tunnel to another network, but Private Google Access needs to be enabled in the source endpoint network.

Generated from protobuf enum PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED = 47;

NO_EXTERNAL_ADDRESS

Value: 9

Instance with only an internal IP address tries to access external hosts, but Cloud NAT is not enabled in the subnet, unless special configurations on a VM allow this connection.

Generated from protobuf enum NO_EXTERNAL_ADDRESS = 9;

UNKNOWN_INTERNAL_ADDRESS

Value: 10

Destination internal address cannot be resolved to a known target. If this is a shared VPC scenario, verify if the service project ID is provided as test input. Otherwise, verify if the IP address is being used in the project.

Generated from protobuf enum UNKNOWN_INTERNAL_ADDRESS = 10;

FORWARDING_RULE_MISMATCH

Value: 11

Forwarding rule's protocol and ports do not match the packet header.

Generated from protobuf enum FORWARDING_RULE_MISMATCH = 11;

FORWARDING_RULE_NO_INSTANCES

Value: 12

Forwarding rule does not have backends configured.

Generated from protobuf enum FORWARDING_RULE_NO_INSTANCES = 12;

FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK

Value: 13

Firewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer.

For more details, see Health check firewall rules.

Generated from protobuf enum FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK = 13;

INSTANCE_NOT_RUNNING

Value: 14

Packet is sent from or to a Compute Engine instance that is not in a running state.

Generated from protobuf enum INSTANCE_NOT_RUNNING = 14;

GKE_CLUSTER_NOT_RUNNING

Value: 27

Packet sent from or to a GKE cluster that is not in running state.

Generated from protobuf enum GKE_CLUSTER_NOT_RUNNING = 27;

CLOUD_SQL_INSTANCE_NOT_RUNNING

Value: 28

Packet sent from or to a Cloud SQL instance that is not in running state.

Generated from protobuf enum CLOUD_SQL_INSTANCE_NOT_RUNNING = 28;

REDIS_INSTANCE_NOT_RUNNING

Value: 68

Packet sent from or to a Redis Instance that is not in running state.

Generated from protobuf enum REDIS_INSTANCE_NOT_RUNNING = 68;

REDIS_CLUSTER_NOT_RUNNING

Value: 69

Packet sent from or to a Redis Cluster that is not in running state.

Generated from protobuf enum REDIS_CLUSTER_NOT_RUNNING = 69;

TRAFFIC_TYPE_BLOCKED

Value: 15

The type of traffic is blocked and the user cannot configure a firewall rule to enable it. See Always blocked traffic for more details.

Generated from protobuf enum TRAFFIC_TYPE_BLOCKED = 15;

GKE_MASTER_UNAUTHORIZED_ACCESS

Value: 16

Access to Google Kubernetes Engine cluster master's endpoint is not authorized. See Access to the cluster endpoints for more details.

Generated from protobuf enum GKE_MASTER_UNAUTHORIZED_ACCESS = 16;

CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS

Value: 17

Access to the Cloud SQL instance endpoint is not authorized.

See Authorizing with authorized networks for more details.

Generated from protobuf enum CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS = 17;

DROPPED_INSIDE_GKE_SERVICE

Value: 18

Packet was dropped inside Google Kubernetes Engine Service.

Generated from protobuf enum DROPPED_INSIDE_GKE_SERVICE = 18;

DROPPED_INSIDE_CLOUD_SQL_SERVICE

Value: 19

Packet was dropped inside Cloud SQL Service.

Generated from protobuf enum DROPPED_INSIDE_CLOUD_SQL_SERVICE = 19;

GOOGLE_MANAGED_SERVICE_NO_PEERING

Value: 20

Packet was dropped because there is no peering between the originating network and the Google Managed Services Network.

Generated from protobuf enum GOOGLE_MANAGED_SERVICE_NO_PEERING = 20;

GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT

Value: 38

Packet was dropped because the Google-managed service uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.

Generated from protobuf enum GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT = 38;

GKE_PSC_ENDPOINT_MISSING

Value: 36

Packet was dropped because the GKE cluster uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.

Generated from protobuf enum GKE_PSC_ENDPOINT_MISSING = 36;

CLOUD_SQL_INSTANCE_NO_IP_ADDRESS

Value: 21

Packet was dropped because the Cloud SQL instance has neither a private nor a public IP address.

Generated from protobuf enum CLOUD_SQL_INSTANCE_NO_IP_ADDRESS = 21;

GKE_CONTROL_PLANE_REGION_MISMATCH

Value: 30

Packet was dropped because a GKE cluster private endpoint is unreachable from a region different from the cluster's region.

Generated from protobuf enum GKE_CONTROL_PLANE_REGION_MISMATCH = 30;

PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION

Value: 31

Packet sent from a public GKE cluster control plane to a private IP address.

Generated from protobuf enum PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION = 31;

GKE_CONTROL_PLANE_NO_ROUTE

Value: 32

Packet was dropped because there is no route from a GKE cluster control plane to a destination network.

Generated from protobuf enum GKE_CONTROL_PLANE_NO_ROUTE = 32;

CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC

Value: 33

Packet sent from a Cloud SQL instance to an external IP address is not allowed. The Cloud SQL instance is not configured to send packets to external IP addresses.

Generated from protobuf enum CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC = 33;

PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION

Value: 34

Packet sent from a Cloud SQL instance with only a public IP address to a private IP address.

Generated from protobuf enum PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION = 34;

CLOUD_SQL_INSTANCE_NO_ROUTE

Value: 35

Packet was dropped because there is no route from a Cloud SQL instance to a destination network.

Generated from protobuf enum CLOUD_SQL_INSTANCE_NO_ROUTE = 35;

CLOUD_SQL_CONNECTOR_REQUIRED

Value: 63

Packet was dropped because the Cloud SQL instance requires all connections to use Cloud SQL connectors and to target the Cloud SQL proxy port (3307).

Generated from protobuf enum CLOUD_SQL_CONNECTOR_REQUIRED = 63;

CLOUD_FUNCTION_NOT_ACTIVE

Value: 22

Packet could be dropped because the Cloud Function is not in an active status.

Generated from protobuf enum CLOUD_FUNCTION_NOT_ACTIVE = 22;

VPC_CONNECTOR_NOT_SET

Value: 23

Packet could be dropped because no VPC connector is set.

Generated from protobuf enum VPC_CONNECTOR_NOT_SET = 23;

VPC_CONNECTOR_NOT_RUNNING

Value: 24

Packet could be dropped because the VPC connector is not in a running state.

Generated from protobuf enum VPC_CONNECTOR_NOT_RUNNING = 24;

VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED

Value: 60

Packet could be dropped because the traffic from the serverless service to the VPC connector is not allowed.

Generated from protobuf enum VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED = 60;

VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED

Value: 61

Packet could be dropped because the health check traffic to the VPC connector is not allowed.

Generated from protobuf enum VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED = 61;

FORWARDING_RULE_REGION_MISMATCH

Value: 25

Packet could be dropped because it was sent from a different region to a regional forwarding without global access.

Generated from protobuf enum FORWARDING_RULE_REGION_MISMATCH = 25;

PSC_CONNECTION_NOT_ACCEPTED

Value: 26

The Private Service Connect endpoint is in a project that is not approved to connect to the service.

Generated from protobuf enum PSC_CONNECTION_NOT_ACCEPTED = 26;

PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK

Value: 41

The packet is sent to the Private Service Connect endpoint over the peering, but it's not supported.

Generated from protobuf enum PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK = 41;

PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS

Value: 48

The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule does not have global access enabled.

Generated from protobuf enum PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS = 48;

PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS

Value: 54

The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule has multiple ports specified.

Generated from protobuf enum PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS = 54;

CLOUD_SQL_PSC_NEG_UNSUPPORTED

Value: 58

The packet is sent to the Private Service Connect backend (network endpoint group) targeting a Cloud SQL service attachment, but this configuration is not supported.

Generated from protobuf enum CLOUD_SQL_PSC_NEG_UNSUPPORTED = 58;

NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT

Value: 57

No NAT subnets are defined for the PSC service attachment.

Generated from protobuf enum NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT = 57;

PSC_TRANSITIVITY_NOT_PROPAGATED

Value: 64

PSC endpoint is accessed via NCC, but PSC transitivity configuration is not yet propagated.

Generated from protobuf enum PSC_TRANSITIVITY_NOT_PROPAGATED = 64;

HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED

Value: 55

The packet sent from the hybrid NEG proxy matches a non-dynamic route, but such a configuration is not supported.

Generated from protobuf enum HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED = 55;

HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED

Value: 56

The packet sent from the hybrid NEG proxy matches a dynamic route with a next hop in a different region, but such a configuration is not supported.

Generated from protobuf enum HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED = 56;

CLOUD_RUN_REVISION_NOT_READY

Value: 29

Packet sent from a Cloud Run revision that is not ready.

Generated from protobuf enum CLOUD_RUN_REVISION_NOT_READY = 29;

DROPPED_INSIDE_PSC_SERVICE_PRODUCER

Value: 37

Packet was dropped inside Private Service Connect service producer.

Generated from protobuf enum DROPPED_INSIDE_PSC_SERVICE_PRODUCER = 37;

LOAD_BALANCER_HAS_NO_PROXY_SUBNET

Value: 39

Packet sent to a load balancer, which requires a proxy-only subnet and the subnet is not found.

Generated from protobuf enum LOAD_BALANCER_HAS_NO_PROXY_SUBNET = 39;

CLOUD_NAT_NO_ADDRESSES

Value: 40

Packet sent to Cloud Nat without active NAT IPs.

Generated from protobuf enum CLOUD_NAT_NO_ADDRESSES = 40;

ROUTING_LOOP

Value: 59

Packet is stuck in a routing loop.

Generated from protobuf enum ROUTING_LOOP = 59;

DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE

Value: 62

Packet is dropped inside a Google-managed service due to being delivered in return trace to an endpoint that doesn't match the endpoint the packet was sent from in forward trace. Used only for return traces.

Generated from protobuf enum DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE = 62;

LOAD_BALANCER_BACKEND_INVALID_NETWORK

Value: 65

Packet is dropped due to a load balancer backend instance not having a network interface in the network expected by the load balancer.

Generated from protobuf enum LOAD_BALANCER_BACKEND_INVALID_NETWORK = 65;

BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED

Value: 66

Packet is dropped due to a backend service named port not being defined on the instance group level.

Generated from protobuf enum BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED = 66;

DESTINATION_IS_PRIVATE_NAT_IP_RANGE

Value: 67

Packet is dropped due to a destination IP range being part of a Private NAT IP range.

Generated from protobuf enum DESTINATION_IS_PRIVATE_NAT_IP_RANGE = 67;

DROPPED_INSIDE_REDIS_INSTANCE_SERVICE

Value: 70

Generic drop cause for a packet being dropped inside a Redis Instance service project.

Generated from protobuf enum DROPPED_INSIDE_REDIS_INSTANCE_SERVICE = 70;

REDIS_INSTANCE_UNSUPPORTED_PORT

Value: 71

Packet is dropped due to an unsupported port being used to connect to a Redis Instance. Port 6379 should be used to connect to a Redis Instance.

Generated from protobuf enum REDIS_INSTANCE_UNSUPPORTED_PORT = 71;

REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS

Value: 72

Packet is dropped due to connecting from PUPI address to a PSA based Redis Instance.

Generated from protobuf enum REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS = 72;

REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK

Value: 73

Packet is dropped due to no route to the destination network.

Generated from protobuf enum REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK = 73;

REDIS_INSTANCE_NO_EXTERNAL_IP

Value: 74

Redis Instance does not have an external IP address.

Generated from protobuf enum REDIS_INSTANCE_NO_EXTERNAL_IP = 74;

REDIS_INSTANCE_UNSUPPORTED_PROTOCOL

Value: 78

Packet is dropped due to an unsupported protocol being used to connect to a Redis Instance. Only TCP connections are accepted by a Redis Instance.

Generated from protobuf enum REDIS_INSTANCE_UNSUPPORTED_PROTOCOL = 78;

DROPPED_INSIDE_REDIS_CLUSTER_SERVICE

Value: 75

Generic drop cause for a packet being dropped inside a Redis Cluster service project.

Generated from protobuf enum DROPPED_INSIDE_REDIS_CLUSTER_SERVICE = 75;

REDIS_CLUSTER_UNSUPPORTED_PORT

Value: 76

Packet is dropped due to an unsupported port being used to connect to a Redis Cluster. Ports 6379 and 11000 to 13047 should be used to connect to a Redis Cluster.

Generated from protobuf enum REDIS_CLUSTER_UNSUPPORTED_PORT = 76;

REDIS_CLUSTER_NO_EXTERNAL_IP

Value: 77

Redis Cluster does not have an external IP address.

Generated from protobuf enum REDIS_CLUSTER_NO_EXTERNAL_IP = 77;

REDIS_CLUSTER_UNSUPPORTED_PROTOCOL

Value: 79

Packet is dropped due to an unsupported protocol being used to connect to a Redis Cluster. Only TCP connections are accepted by a Redis Cluster.

Generated from protobuf enum REDIS_CLUSTER_UNSUPPORTED_PROTOCOL = 79;

NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION

Value: 80

Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix advertised via BGP by the Cloud Router.

Generated from protobuf enum NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION = 80;

NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION

Value: 81

Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix included to the local traffic selector of the VPN tunnel.

Generated from protobuf enum NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION = 81;

NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION

Value: 82

Packet from the unknown peered network is dropped due to no known route from the source network to the destination IP address.

Generated from protobuf enum NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION = 82;