Mengakses layanan eksternal menggunakan akses layanan pribadi
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Instance Looker (inti Google Cloud) yang menggunakan akses layanan pribadi dan dikonfigurasi hanya dengan IP pribadi atau IP pribadi dan publik mungkin memerlukan konfigurasi tambahan untuk terhubung ke layanan atau resource di luar jaringan VPC instance. Bagian berikut menjelaskan opsi konfigurasi tambahan.
Terhubung ke VPC lain menggunakan akses layanan pribadi
Untuk menggunakan IP internal guna terhubung ke layanan di VPC lain yang dihosting oleh Google atau pihak ketiga, Anda dapat menggunakan akses layanan pribadi.
Selama pembuatan instance Looker (Google Cloud core), Anda membuat koneksi akses layanan pribadi untuk menghubungkan VPC ke layanan Looker (Google Cloud core). Anda juga dapat memperbarui alokasi IP koneksi akses layanan pribadi yang ada tanpa mengganggu traffic.
Siapkan koneksi pribadi antara jaringan VPC Anda dan jaringan produsen layanan, menggunakan rentang IP yang dialokasikan. Koneksi pribadi ini membuat koneksi Peering Jaringan VPC antara VPC Anda dan jaringan lainnya.
Koneksi pribadi adalah hubungan one-to-one antara jaringan VPC Anda dan produsen layanan. Jika satu produsen layanan menawarkan beberapa layanan, Anda hanya memerlukan satu koneksi pribadi untuk semua layanan produsen tersebut.
Menghubungkan ke resource lokal atau layanan pihak ketiga menggunakan akses layanan pribadi
Jika instance dibuat untuk menggunakan akses layanan pribadi, dengan IP pribadi saja atau IP pribadi dan IP publik, Anda dapat menggunakan salah satu dari dua opsi berikut untuk menghubungkan instance Looker (inti Google Cloud) ke resource lokal atau layanan pihak ketiga:
Perbarui firewall lokal Anda untuk mengizinkan traffic dengan subnet Looker (Google Cloud core).
Konfigurasikan Penerusan DNS, yang akan memungkinkan Looker (Google Cloud core) terhubung ke resource lokal.
Konfigurasikan Peering DNS dengan VPC yang Dikelola Google untuk Jaringan Layanan untuk instance Looker (inti Google Cloud) guna me-resolve nama host pribadi.
Cloud Interconnect dan Cloud Router
Diagram jaringan berikut menunjukkan cara Cloud Interconnect dan Cloud Router berinteraksi dengan layanan Looker (inti Google Cloud) untuk terhubung ke jaringan lokal:
Akses layanan pribadi menghubungkan layanan Looker (inti Google Cloud) dengan VPC melalui alamat IP internal menggunakan peering VPC.
Cloud Router menggunakan Border Gateway Protocol (BGP) untuk mengiklankan awalan IP pribadi dan memprogram rute dinamis berdasarkan iklan BGP yang diterima dari peer. Cloud Interconnect digunakan untuk terhubung ke jaringan lokal.
Cloud VPN dan Cloud Router
Untuk panduan cara membuat instance Looker (inti Google Cloud) IP pribadi dan publik serta menghubungkannya ke database lokal menggunakan Cloud VPN dan Cloud Router, lihat codelab Menghubungkan Looker Cloud melalui jaringan hybrid.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-25 UTC."],[],[],null,["Looker (Google Cloud core) instances that use [private services access](/looker/docs/looker-core-create-private-ip) and are configured with private connections or hybrid connections may require additional configuration to connect to services or resources outside of the instance's VPC network. The following sections describe additional configuration options.\n\n\nConnect to other VPCs using private services access\n\nTo use internal IPs to connect to services in other VPCs that are hosted by either Google or third parties, you can use [private services access](/vpc/docs/private-services-access).\n\nDuring Looker (Google Cloud core) [instance creation](/looker/docs/looker-core-create-private-ip#before_you_create_a_instance), you created a private services access connection to connect your VPC to the Looker (Google Cloud core) service. You can also [update the IP allocation](/vpc/docs/configure-private-services-access#modifying-connection) of an existing private services access connection without disrupting traffic.\n\nTo set up a private services access connection:\n\n1. [Allocate an internal IP range](/vpc/docs/configure-private-services-access#allocating-range) in your VPC network.\n2. [Set up the private connection](/vpc/docs/configure-private-services-access#creating-connection) between your VPC network and service producer's network, using the allocated IP range. This private connection establishes a [VPC Network Peering](/vpc/docs/vpc-peering) connection between your VPC and the other network.\n\nPrivate connections are a one-to-one relationship between your VPC network and a service producer. If a single service producer offers multiple services, you only need one private connection for all of the producer's services.\n\nConnect to on-premises resources or third-party services using private services access\n\nIf your instance was created to use private services access, with either private connections or hybrid connections, you can use either of the following two options to connect Looker (Google Cloud core) instances to on-premises resources or third-party services:\n\n- [Cloud Interconnect](/network-connectivity/docs/interconnect/concepts/overview) and [Cloud Router](/network-connectivity/docs/router/concepts/overview)\n- [Cloud VPN](/network-connectivity/docs/vpn/concepts/overview), specifically HA VPN, and [Cloud Router](/network-connectivity/docs/router/concepts/overview)\n\nWith either method, you will need to do the following:\n\n- Configure a [dynamic route](/vpc/docs/routes#dynamic_routes) in your Looker (Google Cloud core) VPC for each on-premises resource.\n- Set up a [custom advertised route](/network-connectivity/docs/router/concepts/advertised-routes) of the Looker (Google Cloud core) [private services access subnet](/vpc/docs/configure-private-services-access#about_the_service_producers_subnet) on all Cloud Routers that are deployed in the Looker (Google Cloud core) VPC.\n- Update your on-premises firewalls to allow traffic with the Looker (Google Cloud core) subnet.\n- Configure [DNS forwarding](/dns/docs/overview#dns-forwarding-methods), which will let Looker (Google Cloud core) connect to any on-premises resources.\n- Configure [DNS Peering](/sdk/gcloud/reference/services/peered-dns-domains) with the Service Networking Google Managed VPC for the Looker (Google Cloud core) instance to resolve the private hostnames.\n\nCloud Interconnect and Cloud Router\n\nThe following network diagram shows how Cloud Interconnect and Cloud Router interact with the Looker (Google Cloud core) service to connect to an on-premises network:\n\n1. Private services access connects the Looker (Google Cloud core) service with the VPC over internal IP addresses using VPC peering.\n2. Cloud Router uses Border Gateway Protocol (BGP) to advertise the IP prefixes and program dynamic routes based on the BGP advertisements it receives from a peer. Cloud Interconnect is used to connect to the on-premises network.\n\nCloud VPN and Cloud Router\n\nFor a walkthrough of how to create a private and public IP Looker (Google Cloud core) instance and connect it to an on-premises database using Cloud VPN and Cloud Router, see the [Connect Looker Cloud over hybrid networking](https://codelabs.developers.google.com/codelabs/looker-hybrid-networking) codelab.\n\nWhat's next?\n\n- [Connect Looker Cloud over hybrid networking](https://codelabs.developers.google.com/codelabs/looker-hybrid-networking)\n- [Connecting Looker (Google Cloud core) to your database](/looker/docs/looker-core-dialects)\n- [Prepare your Looker (Google Cloud core) instance for users](/looker/docs/looker-core-instance-setup)\n- For an example of how to manually install [Looker Marketplace](/looker/docs/marketplace) content, see the Looker Community article, [Installing the Looker API Explorer on a Looker (Google Cloud core) instance on a private IP network](https://www.googlecloudcommunity.com/gc/Technical-Tips-Tricks/Installing-the-Looker-API-Explorer-on-a-Looker-Google-Cloud-core/ta-p/722671)."]]
