REST Resource: projects.locations.gateways

Resource: Gateway

Gateway represents the configuration for a proxy, typically a load balancer. It captures the ip:port over which the services are exposed by the proxy, along with any policy configurations. Routes have reference to to Gateways to dictate how requests should be routed by this Gateway.

JSON representation
{
  "name": string,
  "selfLink": string,
  "createTime": string,
  "updateTime": string,
  "labels": {
    string: string,
    ...
  },
  "description": string,
  "type": enum (Type),
  "addresses": [
    string
  ],
  "ports": [
    integer
  ],
  "scope": string,
  "serverTlsPolicy": string,
  "authorizationPolicy": string,
  "certificateUrls": [
    string
  ],
  "securityPolicy": string,
  "gatewaySecurityPolicy": string,
  "network": string,
  "subnetwork": string
}
Fields
name

string

Required. Name of the Gateway resource. It matches pattern projects/*/locations/*/gateways/<gateway_name>.

createTime

string (Timestamp format)

Output only. The timestamp when the resource was created.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

updateTime

string (Timestamp format)

Output only. The timestamp when the resource was updated.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

labels

map (key: string, value: string)

Optional. Set of label tags associated with the Gateway resource.

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

description

string

Optional. A free-text description of the resource. Max length 1024 characters.

type

enum (Type)

Immutable. The type of the customer managed gateway. This field is required. If unspecified, an error is returned.

addresses[]

string

Optional. Zero or one IPv4-address on which the Gateway will receive the traffic. When no address is provided, an IP from the subnetwork is allocated

This field only applies to gateways of type 'SECURE_WEB_GATEWAY'. Gateways of type 'OPEN_MESH' listen on 0.0.0.0.

ports[]

integer

Required. One or more port numbers (1-65535), on which the Gateway will receive traffic. The proxy binds to the specified ports. Gateways of type 'SECURE_WEB_GATEWAY' are limited to 1 port. Gateways of type 'OPEN_MESH' listen on 0.0.0.0 and support multiple ports.

scope

string

Optional. Scope determines how configuration across multiple Gateway instances are merged. The configuration for multiple Gateway instances with the same scope will be merged as presented as a single coniguration to the proxy/load balancer.

Max length 64 characters. Scope should start with a letter and can only have letters, numbers, hyphens.

serverTlsPolicy

string

Optional. A fully-qualified ServerTLSPolicy URL reference. Specifies how TLS traffic is terminated. If empty, TLS termination is disabled.

authorizationPolicy

string

Optional. A fully-qualified AuthorizationPolicy URL reference. Specifies how traffic is authorized. If empty, authorization checks are disabled.

certificateUrls[]

string

Optional. A fully-qualified Certificates URL reference. The proxy presents a Certificate (selected based on SNI) when establishing a TLS connection. This feature only applies to gateways of type 'SECURE_WEB_GATEWAY'.

securityPolicy

string

Optional. A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.

This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.

DEPRECATED!!!! Use the gatewaySecurityPolicy field instead.

gatewaySecurityPolicy

string

Optional. A fully-qualified GatewaySecurityPolicy URL reference. Defines how a server should apply security policy to inbound (VM to Proxy) initiated connections.

For example: projects/*/locations/*/gatewaySecurityPolicies/swg-policy.

This policy is specific to gateways of type 'SECURE_WEB_GATEWAY'.

network

string

Optional. The relative resource name identifying the VPC network that is using this configuration. For example: projects/*/global/networks/network-1.

Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY'.

subnetwork

string

Optional. The relative resource name identifying the subnetwork in which this SWG is allocated. For example: projects/*/regions/us-central1/subnetworks/network-1

Currently, this field is specific to gateways of type 'SECURE_WEB_GATEWAY".

Type

The type of the customer-managed gateway. Possible values are: * OPEN_MESH * SECURE_WEB_GATEWAY

Enums
TYPE_UNSPECIFIED The type of the customer managed gateway is unspecified.
OPEN_MESH The type of the customer managed gateway is TrafficDirector Open Mesh.
SECURE_WEB_GATEWAY The type of the customer managed gateway is SecureWebGateway (SWG).

Methods

create

Creates a new Gateway in a given project and location.

delete

Deletes a single Gateway.

get

Gets details of a single Gateway.

getIamPolicy

Gets the access control policy for a resource.

list

Lists Gateways in a given project and location.

patch

Updates the parameters of a single Gateway.

setIamPolicy

Sets the access control policy on the specified resource.

testIamPermissions

Returns permissions that a caller has on the specified resource.