5 ms·
But, correct me if this has changed please, last i checked Cloud Run did not support private networks. So you SQL instance has to be exposed to the internet, c
by cstpdk 7y ago
But, correct me if this has changed please, last i checked Cloud Run did not support private networks. So you SQL instance has to be exposed to the internet, correct?
- dstaley 7y agoYes, Cloud Run requires your Cloud SQL instance to have a public IP address.
- chimera77 7y agoYour Cloud SQL instance would have a public IP, but would not be exposed to the internet. All traffic is blocked by default. Only GCP service accounts with the right permissions can make connections to your SQL instance, or IPs added to a whitelist (not recommended).
- cstpdk 7y agoAh, thanks for clearing that up, I was unaware. How is the traffic blocked by default? Firewall layer?
- helpfulgoogler 7y agoYes. There is a proxy in front of the database which only allows whitelisted traffic (dangerous) or traffic with a valid cert (safe).