可将受限虚拟 IP (VIP) 与专用 Google 访问通道搭配使用,以便为向 Google Cloud 服务发出的请求提供专用网络路由,而无需将请求公开给互联网。受限 VIP 支持 VPC Service Controls 可以保护的所有 API。除了 VPC Service Controls 支持的服务之外,受限 VIP 还支持作为依赖项的多项其他服务。
下表提供了受限 VIP 支持的 Google Cloud 服务的列表。
除了表中列出的服务名称之外,受限 VIP 还包含一些作为所列端点的依赖项的附加端点。例如,Container Registry 使用 gcr.io
和 *.gcr.io
。
The table provides the level of support for each integration. The table includes the following stages of support:
- GA: This integration is fully supported by the restricted VIP and can be protected by VPC Service Controls perimeters.
- Beta: This integration receives a beta-stage level of support for the restricted VIP and can be protected by VPC Service Controls perimeters.
- Alpha: This integration receives an alpha-stage level of support for the restricted VIP and can be protected by VPC Service Controls perimeters for testing purposes only.
- Restricted VIP only: This service is integrated with the restricted VIP in order to support the use of other services and resources inside a service perimeter. It cannot be added to a perimeter as a protected service.
- Other: This service has not yet been assigned a support stage.
Services | Support stage |
---|---|
discovery.googleapis.com
|
Restricted VIP only |
oauth2.googleapis.com
|
Restricted VIP only |
openidconnect.googleapis.com
|
Restricted VIP only |
reauth.googleapis.com
|
Restricted VIP only |
accessapproval.googleapis.com
|
GA |
aiplatform.googleapis.com
|
GA |
alloydb.googleapis.com
|
GA |
analyticshub.googleapis.com
|
GA |
apigee.googleapis.com
|
GA |
apigeeconnect.googleapis.com
|
GA |
apphub.googleapis.com
|
GA |
artifactregistry.googleapis.com
|
GA |
automl.googleapis.com
|
GA |
baremetalsolution.googleapis.com
|
GA |
batch.googleapis.com
|
GA |
beyondcorp.googleapis.com
|
GA |
biglake.googleapis.com
|
GA |
bigquery.googleapis.com
|
GA |
bigquerydatapolicy.googleapis.com
|
GA |
bigquerydatatransfer.googleapis.com
|
GA |
bigquerymigration.googleapis.com
|
GA |
bigtable.googleapis.com
|
GA |
binaryauthorization.googleapis.com
|
GA |
blockchainnodeengine.googleapis.com
|
GA |
certificatemanager.googleapis.com
|
GA |
cloud.googleapis.com
|
GA |
cloudaicompanion.googleapis.com
|
GA |
cloudasset.googleapis.com
|
GA |
cloudbuild.googleapis.com
|
GA |
clouddeploy.googleapis.com
|
GA |
clouderrorreporting.googleapis.com
|
GA |
cloudfunctions.googleapis.com
|
GA |
cloudkms.googleapis.com
|
GA |
cloudprofiler.googleapis.com
|
GA |
cloudscheduler.googleapis.com
|
GA |
cloudsearch.googleapis.com
|
GA |
cloudtasks.googleapis.com
|
GA |
cloudtrace.googleapis.com
|
GA |
composer.googleapis.com
|
GA |
compute.googleapis.com
|
GA |
confidentialcomputing.googleapis.com
|
GA |
config.googleapis.com
|
GA |
connectgateway.googleapis.com
|
GA |
connectors.googleapis.com
|
GA |
contactcenterinsights.googleapis.com
|
GA |
container.googleapis.com
|
GA |
containeranalysis.googleapis.com
|
GA |
containerfilesystem.googleapis.com
|
GA |
containerregistry.googleapis.com
|
GA |
containersecurity.googleapis.com
|
GA |
containerthreatdetection.googleapis.com
|
GA |
contentwarehouse.googleapis.com
|
GA |
datacatalog.googleapis.com
|
GA |
dataflow.googleapis.com
|
GA |
dataform.googleapis.com
|
GA |
datafusion.googleapis.com
|
GA |
datalineage.googleapis.com
|
GA |
datamigration.googleapis.com
|
GA |
datapipelines.googleapis.com
|
GA |
dataplex.googleapis.com
|
GA |
dataproc.googleapis.com
|
GA |
datastream.googleapis.com
|
GA |
discoveryengine.googleapis.com
|
GA |
dlp.googleapis.com
|
GA |
dns.googleapis.com
|
GA |
documentai.googleapis.com
|
GA |
earthengine.googleapis.com
|
GA |
essentialcontacts.googleapis.com
|
GA |
eventarc.googleapis.com
|
GA |
file.googleapis.com
|
GA |
financialservices.googleapis.com
|
GA |
firebaseappcheck.googleapis.com
|
GA |
firebaserules.googleapis.com
|
GA |
firestore.googleapis.com
|
GA |
gameservices.googleapis.com
|
GA |
gkeconnect.googleapis.com
|
GA |
gkehub.googleapis.com
|
GA |
gkemulticloud.googleapis.com
|
GA |
gkeonprem.googleapis.com
|
GA |
healthcare.googleapis.com
|
GA |
iamcredentials.googleapis.com
|
GA |
iap.googleapis.com
|
GA |
iaptunnel.googleapis.com
|
GA |
identitytoolkit.googleapis.com
|
GA |
ids.googleapis.com
|
GA |
integrations.googleapis.com
|
GA |
kmsinventory.googleapis.com
|
GA |
krmapihosting.googleapis.com
|
GA |
language.googleapis.com
|
GA |
livestream.googleapis.com
|
GA |
logging.googleapis.com
|
GA |
looker.googleapis.com
|
GA |
managedidentities.googleapis.com
|
GA |
memcache.googleapis.com
|
GA |
meshca.googleapis.com
|
GA |
metastore.googleapis.com
|
GA |
microservices.googleapis.com
|
GA |
migrationcenter.googleapis.com
|
GA |
ml.googleapis.com
|
GA |
monitoring.googleapis.com
|
GA |
networkconnectivity.googleapis.com
|
GA |
networkmanagement.googleapis.com
|
GA |
networksecurity.googleapis.com
|
GA |
networkservices.googleapis.com
|
GA |
notebooks.googleapis.com
|
GA |
ondemandscanning.googleapis.com
|
GA |
opsconfigmonitoring.googleapis.com
|
GA |
orgpolicy.googleapis.com
|
GA |
osconfig.googleapis.com
|
GA |
oslogin.googleapis.com
|
GA |
parallelstore.googleapis.com
|
GA |
policysimulator.googleapis.com
|
GA |
policytroubleshooter.googleapis.com
|
GA |
privateca.googleapis.com
|
GA |
publicca.googleapis.com
|
GA |
pubsub.googleapis.com
|
GA |
pubsublite.googleapis.com
|
GA |
recaptchaenterprise.googleapis.com
|
GA |
recommender.googleapis.com
|
GA |
redis.googleapis.com
|
GA |
run.googleapis.com
|
GA |
secretmanager.googleapis.com
|
GA |
securetoken.googleapis.com
|
GA |
securitycenter.googleapis.com
|
GA |
servicecontrol.googleapis.com
|
GA |
servicedirectory.googleapis.com
|
GA |
spanner.googleapis.com
|
GA |
speakerid.googleapis.com
|
GA |
speech.googleapis.com
|
GA |
sqladmin.googleapis.com
|
GA |
ssh-serialport.googleapis.com
|
GA |
storage.googleapis.com
|
GA |
storageinsights.googleapis.com
|
GA |
storagetransfer.googleapis.com
|
GA |
sts.googleapis.com
|
GA |
texttospeech.googleapis.com
|
GA |
timeseriesinsights.googleapis.com
|
GA |
tpu.googleapis.com
|
GA |
trafficdirector.googleapis.com
|
GA |
transcoder.googleapis.com
|
GA |
translate.googleapis.com
|
GA |
videointelligence.googleapis.com
|
GA |
videostitcher.googleapis.com
|
GA |
vision.googleapis.com
|
GA |
visualinspection.googleapis.com
|
GA |
vmmigration.googleapis.com
|
GA |
vpcaccess.googleapis.com
|
GA |
webrisk.googleapis.com
|
GA |
websecurityscanner.googleapis.com
|
GA |
workflows.googleapis.com
|
GA |
workstations.googleapis.com
|
GA |
adsdatahub.googleapis.com
|
Beta support |
apikeys.googleapis.com
|
Beta support |
assuredworkloads.googleapis.com
|
Beta support |
backupdr.googleapis.com
|
Beta support |
cloudcode.googleapis.com
|
Beta support |
cloudcontrolspartner.googleapis.com
|
Beta support |
cloudquotas.googleapis.com
|
Beta support |
cloudresourcemanager.googleapis.com
|
Beta support |
cloudsupport.googleapis.com
|
Beta support |
dialogflow.googleapis.com
|
Beta support |
domains.googleapis.com
|
Beta support |
firebasecrashlytics.googleapis.com
|
Beta support |
gkebackup.googleapis.com
|
Beta support |
iam.googleapis.com
|
Beta support |
lifesciences.googleapis.com
|
Beta support |
meshconfig.googleapis.com
|
Beta support |
rapidmigrationassessment.googleapis.com
|
Beta support |
retail.googleapis.com
|
Beta support |
securesourcemanager.googleapis.com
|
Beta support |
visionai.googleapis.com
|
Beta support |
vmwareengine.googleapis.com
|
Beta support |
后续步骤
- 要配置专用连接,请参阅设置与 Google API 和服务的专用连接。
- 如果您使用的是 Google Kubernetes Engine (GKE),需要为
gcr.io
配置 DNS,请参阅为 GKE 专用集群设置 Container Registry。 - 了解如何排查常见的 VPC Service Controls 问题。
- 了解如何排查不同 Google Cloud 服务的常见问题。