Private network access enables supported Google Cloud products to send HTTP requests to a customer Virtual Private Cloud (VPC) network resource. The requests are sent over the private network while enforcing Identity and Access Management (IAM) and VPC Service Controls. A network resource could be a virtual machine (VM) instance, Cloud Interconnect IP address, or a Layer 4 internal load balancer.
With Private Service Connect, you can create private endpoints within your VPC network by using internal IP addresses. Private network access extends the capability and helps Google Cloud services connect directly to VPC networks.
Private network access offers the following features:
- Provides a unified way of managing customer network, security, and access policies applied to all network paths.
- Enables Google Cloud products to reach one or more HTTP(S) endpoints in customer private networks through the private network of Google rather than the internet. It also provides a VPC Service Controls-compliant option. The communication helps in providing better security, managing network security policies, and protecting against exfiltration while using Google Cloud features such as HTTP Push.
The following diagram shows how Dialogflow connects to a Google Cloud VM through the internet without private network access.
The following diagram shows how Dialogflow connects to a Google Cloud VM through the private network with private network access.
For detailed information about VPC Service Controls, see the VPC Service Controls documentation.
For information about how to configure private network access, see Configuring private network access.
For information about how you can use Service Directory private network access with Dialogflow, see Using Service Directory for private network access.
Quotas and limits
The following quotas and limits apply for private network access:
- Service Directory limits apply when you use private network access.
- Calls from Google Cloud services that use private network access do not count against your quotas.
- Service Directory pricing applies for calls from Google Cloud services that use private network access. Because Service Directory charges are per API call against the Service Directory service, each private network access is charged as one API call.
- To learn about Service Directory, see Service Directory overview.
- To learn how to configure private network access, see Configure private network access.
- To find solutions for common problems that you might experience when using Service Directory, see Troubleshooting.