Create a private connectivity configuration

Stay organized with collections Save and categorize content based on your preferences.

In this page, you learn how to create a private connectivity configuration. This type of configuration contains information that Datastream uses to communicate with a data source over a private network (internally within Google Cloud, or with external sources connected over VPN or Interconnect). This communication happens through a Private Service Connect interface connection or a Virtual Private Cloud (VPC) peering connection.

A Private Service Connect interface connection uses a virtual machine (VM) with a network interface that Datastream creates. The network interface then connects to your VPC network using the network attachment that you supply, with the IP address assigned from the network attachment subnetwork.

A VPC peering connection is a networking connection between two VPCs that lets you route traffic between them using internal, private IPv4 addresses. You need to provide the private IP addresses when setting up the private connectivity configuration because Datastream doesn't support Domain Name System (DNS) resolution in private connections.

Before you begin

Before you create your private connectivity configuration, review the prerequisites:

• For VPC peering, see VPC peering prerequisites.
• For Shared VPC, see Shared VPC prerequisites.
• For Private Service Connect interfaces, see Private Service Connect prerequisites.

Create the configuration

To create a private connectivity configuration, perform the following steps:

1. Go to the Private connectivity configurations page in the Google Cloud console.

   Go to the Private connectivity configurations page

2. Click Create configuration.

3. Use the following table to populate the fields of the Configure private connectivity section of the Create private connectivity configuration page:

   Field	Description
   Configuration name	Enter the display name of the private connectivity configuration.
   Configuration ID	Datastream populates this field automatically based on the configuration name that you enter. You can keep the ID that's auto-generated or change it.
   Region	Select the region where the private connectivity configuration is stored.

4. In the Set up connection section, select an option from the Private connectivity method drop-down:

   • PSC interfaces: select this option to use Private Service Connect interface as your private connectivity method:

     Field	Description
     Select a network attachment	Select the network attachment that you created for your VPC.
     Update allowlist	Click this button to allow connections from the Datastream IP addresses. You need to have the compute.networkAdmin role assigned to connect to the network attachment.

   • VPC peering: select this option to use VPC peering as your private connectivity method:

     Field	Description
     Authorized VPC network	Select the VPC network that you created.
     Allocate an IP range	Enter an available IP range on the VPC network.

5. Click CREATE.

After creating a private connectivity configuration, you can view high-level and detailed information about it.

What's next

• Learn more about private connectivity.
• Learn how to view your private connectivity configuration.
• Find out how to delete a private connectivity configuration.