Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Menghubungkan ke VM TPU tanpa alamat IP publik
Jika organisasi Anda memiliki batasan kebijakan organisasi constraints/compute.vmExternalIpAccess, Anda harus membuat VM TPU yang tidak memiliki alamat IP eksternal. Untuk terhubung ke VM TPU tanpa alamat IP eksternal, Anda harus:
Berikan roles/iap.tunnelResourceAccessor dan roles/tpu.admin kepada pengguna yang akan terhubung ke VM TPU.
Buat VM TPU tanpa alamat IP publik.
Hubungkan ke VM TPU Anda menggunakan opsi --tunnel-through-iap.
Mengaktifkan Akses Google Pribadi
Untuk menggunakan IAP, Anda harus mengaktifkan Akses Google Pribadi yang memungkinkan Anda terhubung
ke VM yang tidak memiliki alamat IP eksternal. Pada perintah berikut, ganti
your-subnet dengan nama subnet tempat Anda akan membuat VM TPU
dan your-region dengan region tempat VM TPU akan berada.
Pengguna yang perlu terhubung ke VM TPU menggunakan SSH yang tidak memiliki alamat IP publik harus diberi peran iap.tunnelResourceAccessor. Untuk mengetahui informasi selengkapnya tentang cara memberikan peran, lihat Memberikan Peran IAM.
Membuat VM TPU tanpa alamat IP publik
Perintah berikut menunjukkan cara membuat VM TPU tanpa alamat IP publik.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-18 UTC."],[],[],null,["# Connect to a TPU VM without a public IP address\n===============================================\n\nIf your organization has a `constraints/compute.vmExternalIpAccess` organization\npolicy constraint, you need to create TPU VMs that don't have an external IP\naddress. To connect to a TPU VM without an external IP address, you need to:\n\n1. Enable [Private Google Access](/vpc/docs/private-google-access) for the subnet where you will create a TPU VM.\n2. Grant `roles/iap.tunnelResourceAccessor` and `roles/tpu.admin` to users who will connect to the TPU VMs.\n3. Create a TPU VM without a public IP address.\n4. Connect to your TPU VM using `--tunnel-through-iap` option.\n\nEnable Private Google Access\n----------------------------\n\nTo use an IAP, you must enable Private Google Access which lets you connect\nto VMs that don't have external IP addresses. In the following command replace\n\u003cvar translate=\"no\"\u003eyour-subnet\u003c/var\u003e with the name of the subnet where you will create the TPU\nVM and \u003cvar translate=\"no\"\u003eyour-region\u003c/var\u003e with the region where the TPU VM will be located. \n\n```bash\ngcloud compute networks subnets update your-subnet \\\n--region=your-region \\\n--enable-private-ip-google-access\n```\n\nGrant permissions\n-----------------\n\nUsers that need to connect to the TPU VMs using SSH that don't have public IP\naddresses must be granted the iap.tunnelResourceAccessor role. For more\ninformation about granting a role, see\n[Granting an IAM Role](/iam/docs/granting-changing-revoking-access#grant-single-role).\n\nCreate a TPU VM without a public IP address\n-------------------------------------------\n\nThe following command shows how to create a TPU VM with no public IP address. \n\n```bash\ngcloud compute tpus tpu-vm create tpu-vm-name \\\n --zone $ZONE \\\n --project your-project \\\n --internal-ips \\\n --version tpu-vm-tf-2.17.1-pjrt \\\n --accelerator-type v2-8 \\\n --subnetwork your-subnet \\\n```\n\nConnect to your TPU VM using SSH with IAP tunneling\n---------------------------------------------------\n\nThe following command shows how to connect to a TPU VM using IAP tunneling. \n\n```bash\ngcloud alpha compute tpus tpu-vm ssh tpu-vm-name --tunnel-through-iap\n```"]]
