IssueTracker

Cloud function integrations can be done using Node.js client libraries [1][2]. There is a tutorial explaining how to access GCE resources from those libraries here [3]. I do not believe there is a different path. Now it seems to me that you are trying to call GCE services from Cloud functions which might be different (Not accessing the GCE API services per se [4]). Please let me know the details, it will be my pleasure to further investigate.

[1] https://cloud.google.com/functions/docs/concepts/overview
[2] https://cloud.google.com/nodejs/apis
[3] https://cloud.google.com/compute/docs/tutorials/nodejs-guide
[4] https://cloud.google.com/compute/docs/reference/latest/

Hi,

Exactly, I'm trying to communicate with instances running on Google Compute Engine (or its internal load balancer) from a cloud function via private network. But from what I gather the cloud functions run in separate networks (and would be considered external traffic), is that right?

Basically I'm trying to HTTP post from a cloud function to a web server running on Google Compute Engine over it's private network, without outside world access.

Regards,
Niklas

Thanks for your feedback.

You are totally right. At the moment the instances are only able to receive such requests via the external IP [1].

I have filed a feature request in your behalf so that this functionality might be considered for future deployments.  I cannot guarantee this will be implemented or provide an E.T.A. Nevertheless, rest assured that your feedback is always seriously taken.  

[1] https://cloud.google.com/compute/docs/networking

I am having  the same issue. I want to access mongodb running on the GCE instance from a Cloud Function.

If public ip is the only way to access GCE does this mean that I need to open port in my cloud firewall? Or are cloud functions and GCE network able to connect without opening holes to the project's firewall?

You will still need to explicitly allow the traffic in Google Firewall.

Just a quick update on this.  Access to private addresses in the GCE network IS on our roadmap and although we can't give definite time-frames just yet, it's high on our list of priorities.

+1 - this is pretty critical

Will this support Firebase functions as well?

Could it be worked out that firebase functions run on the VPC for the project?  Or alternatively on a VPC of their own that could be peered?

+1

I have a customer who wants to push notification data from cloud functions to RabbitMQ hosted in CE, but wants to do it on internal ip. Is there an alternate way to deliver this.

The new firewall for google app engine looks promises but it does not appear possible at present to whitelist GCP cloud functions. It would be very helpful to have this functionality.

Hi, we're also experiencing the same issue. We'd like to run code in cloud functions and then allow communication to Google Compute instances running Elasticsearch. Unfortunately we can only do this if we open up our project firewalls and whitelist every IP in the world. Is there any news on timing with regard to allowing Cloud Functions to talk to GCE through a firewall rule using the service account for example?

Hi all,
any updates on this? I have a customer who needs to access Redis on a Kubernetes cluster via Cloud Functions but in a secure and ideally private way, i.e. within same network.

Cheers,
Alex

+1 This is really important for my use case! AWS already has had this for a while - would really like to see it with Cloud Functions!

+1 also after any updates on this feature. It would be very useful our current use case (Cloud Functions talking to Kubernetes cluster via internal IP)!! Thanks

+1 Also trying to use pubsub triggered cloud functions, but need private network access into our private data services running on compute engine.

+1 Need ability for cloud functions to access private network compute instance that is vpn connected to on-premise system. We do not want to expose the compute instance to the public internet.

+1 "Basically I'm trying to HTTP post from a cloud function to a web server running on Google Compute Engine over it's private network, without outside world access."

+1 Cloud functions is not usable for us because we need to talk to internal microservices running on GKE which are not publicly exposed.  Being limited to GCP services and public IPs is very limiting.

+1 I don't want to expose unnecessary resources to the public.

+1 perfect if can access by using vm instance name

+1 Neither App Engine Standard nor Cloud Functions can talk to GCE yet, this is extremely limiting for micro-service architectures.

+1 This limitation severely limits what cloud functions can be used for.

+10 it really limits guys. I feel this is one of the required features of any serverless computing, when AWS can provide it why not here. Or do you have a better way to solve this problem ?

+1 When accessing GKE services via public ip addresses is not an option, what is the recommended action?

+1 My RESTful server is running inside a GCE instance but there is no way to call APIs from Google Cloud Function privately. I desperately need this feature.

+1 What is the status on this? I need my GKE cluster to be private, but also to be able to take requests from GCFs!

+1 I'm a bit baffled by the lack of communication, cloud functions is not an actual product without such a critical feature... We have to be able to communicate with applications in the internal network, either using standard tools or the gcloud sdk (I suspect this would be much easier). If going the sdk route, http at the very least has to be supported. We are currently able to access databases but not applications, it just doesn't make sense to me. Not a usable product as far as we're concerned, or maybe only for a few very limited use cases.

+1

I want access to MemoryStore and all other services inside my VPC network. Google are there any updates? You promised to complete this a year ago, what are you doing there?

Here you said that all this stuff will be ready till the end of the year https://www.youtube.com/watch?v=oALEthV9z_U&feature=youtu.be&list=PLBgogxgQVM9uSqzLOc66kNIZMUOvnGbU4&t=1005  2 months have left. Hurry up.

I am looking for the same thing. I need to call my application hosted on Compute Engine from Cloud Functions via internal network.
Please let us know an exact ETA for the same.
If I had to route it over the internet, I could pass this to an AWS cluster instead.

+1000000000000
Firebase works for me it seems ideal! but I can not connect any of my services in GCE
It is urgent to fix this, since amazon already has it

+1 Useful feature to connect to internal ip using functions

I noticed that this is in alpha currently.  Will support for memorystore be available as well?

Hello everyone,

We have an alpha release of VPC support for Cloud Functions available now. If you're interested in testing and providing feedback, please sign up here:
https://docs.google.com/forms/d/1-cnuWIpTjbSFAETbpHo4aqgCuhYCGk2qczxHZvNCmFI

This feature does support connecting to Cloud Memorystore from your Cloud Function.

How much time takes to get the alpha access after registered? I'm waiting since December.

We'll be running another round of whitelisting this week. Apologies for the holiday-induced delay.

Hi - are there any further updates please on progress with access to the GCF VPC Private Connectivity Alpha ?

I have recently registered and not received any further feedback or user guide link.

Would appreciate your help in moving this forward please.

Thanks.

Hi, we run whitelsiting about once a week; I just whitelisted you.

On Wed, Feb 20, 2019 at 2:57 AM <buganizer-system@google.com> wrote:

Is there any kid of timeline on this? Alpha won't fly in production.

Guys, has this progressed further from Alpha?

Hi,

I have recently registered and not received any further feedback or user guide link.
Would appreciate your help in moving this forward, please.

Thank you

Is there any way allow me to try using internal access from cloud function to app engine?
Thanks

Hi everyone, we have paused whitelisting for a moment, but if you've signed
up we'll give you access in the next few weeks.

On Mon, Mar 25, 2019 at 1:36 AM <buganizer-system@google.com> wrote:

Hi everyone, we just launched this functionality to Beta at GCP Next! You can get started by following our docs:
https://cloud.google.com/functions/docs/connecting-vpc
https://cloud.google.com/appengine/docs/standard/python/connecting-vpc
https://cloud.google.com/vpc/docs/configure-serverless-vpc-access

Hi, does this cover services deployed in gke sitting behind an internal load balancer? Cloud function is able to connect to my services running on gce but not the ones in gke

CF can connect services on GCE via Serverless VPC but not for services run on GKE, please update!