Stay organized with collections
Save and categorize content based on your preferences.
This page provides instructions about how to create a peering zone. For detailed
background information, see Peering
zones.
Permissions required for this task
To perform this task, you must have been granted the following permissions
or the following IAM roles.
Permissions
dns.managedZones.create to create a managed zone
dns.networks.targetWithPeeringZone to create a peering zone
dns.activePeeringZones.getZoneInfo to get information about a peering zone
dns.activePeeringZones.list to list peering zones
dns.activePeeringZones.deactivate to deactivate a peering zone
Roles
roles/dns.admin
roles/dns.peer
To create a new managed private peering zone when you need one VPC
network (the consumer network) to query the VPC name
resolution order of another VPC network (the producer
network), follow these steps.
Console
In the Google Cloud console, go to the Create a DNS zone page.
PRODUCER_PROJECT_ID: the ID of the project that
contains the producer VPC network
SERVICE_ACCOUNT: the service account in the project
that contains the consumer VPC network that was
identified or created in step 1
In the project that contains the consumer VPC network,
grant the DNS Administrator role to the
service account and create a new managed private peering zone by running the
dns managed-zones create
command:
gcloud dns managed-zones create NAME \
--description=DESCRIPTION \
--dns-name=DNS_SUFFIX \
--networks=CONSUMER_VPC_NETWORK \
--account=SERVICE_ACCOUNT \
--target-network=PRODUCER_VPC_NETWORK \
--target-project=PRODUCER_PROJECT_ID \
--visibility=private
Replace the following:
NAME: a name for your zone
DESCRIPTION: a description for your zone
DNS_SUFFIX: the DNS suffix for your zone, such as
example.com
CONSUMER_VPC_NETWORK: the name of the consumer
VPC network
SERVICE_ACCOUNT: the service account in the project
that contains the consumer VPC network, identified in
step 1
PRODUCER_VPC_NETWORK: the name of the producer
VPC network
PRODUCER_PROJECT_ID: the ID of the project that
contains the producer VPC network