Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Akses Google Pribadi
Instance VM yang hanya memiliki alamat IP internal (tanpa alamat IP eksternal) dapat menggunakan Akses Google Pribadi. Instance tersebut dapat menjangkau alamat IP eksternal Google API dan layanan Google. Alamat IP sumber paket dapat berupa alamat IP internal utama antarmuka jaringan atau alamat dalam rentang IP alias yang ditetapkan ke antarmuka. Jika Anda menonaktifkan Akses Google Pribadi, instance VM tidak dapat lagi menjangkau API dan layanan Google, instance tersebut hanya dapat mengirim traffic dalam jaringan VPC.
Akses Google Pribadi tidak berpengaruh pada instance yang memiliki alamat IP eksternal. Instance dengan alamat IP eksternal dapat mengakses internet, sesuai dengan persyaratan akses internet. API ini tidak memerlukan konfigurasi khusus untuk mengirim permintaan ke alamat IP eksternal Google API dan layanan Google.
Anda mengaktifkan Akses Google Pribadi berbasis subnet demi subnet; ini adalah setelan untuk subnet dalam jaringan VPC. Guna mengaktifkan subnet untuk Akses Google Pribadi dan melihat persyaratannya, lihat Mengonfigurasi Akses Google Pribadi.
Layanan yang didukung
Dengan Akses Google Pribadi, Anda dapat mengakses Google API dan layanan Google yang dihosting di infrastruktur produksi Google.
Layanan Google lainnya dihosting di jaringan VPC dan dapat diakses menggunakan metode berikut:
Diagram berikut menunjukkan implementasi Akses Google Pribadi.
Implementasi Akses Google Pribadi (klik untuk memperbesar).
Jaringan VPC telah dikonfigurasi untuk memenuhi persyaratan jaringan DNS, perutean, dan firewall untuk Google API dan layanan Google. Akses Google Pribadi telah diaktifkan di subnet-a, tetapi tidak di subnet-b.
VM A1 dapat mengakses Google API dan layanan Google, termasuk Cloud Storage, karena antarmuka jaringannya berada di subnet-a, yang mengaktifkan Akses Google Pribadi. Akses Google Pribadi berlaku untuk instance karena hanya memiliki alamat IP internal.
VM B1tidak dapat mengakses Google API dan layanan Google karena hanya memiliki alamat IP internal dan Akses Google Pribadi dinonaktifkan untuk subnet-b.
VM A2 dan VM B2 dapat mengakses Google API dan layanan Google, termasuk Cloud Storage, karena masing-masing memiliki alamat IP eksternal.
Akses Google Pribadi tidak berpengaruh pada apakah instance ini dapat mengakses Google API dan layanan Google karena keduanya memiliki alamat IP eksternal.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-19 UTC."],[],[],null,["# Private Google Access\n=====================\n\nVM instances that only have internal IP addresses (no external IP addresses) can\nuse Private Google Access. They can reach the external IP addresses of Google\nAPIs and services. The source IP address of the packet can be the primary\ninternal IP address of the network interface or an address in an alias IP range\nthat is assigned to the interface. If you disable Private Google Access, the\nVM instances can no longer reach Google APIs and services; they can only send\ntraffic within the VPC network.\n\nPrivate Google Access has no effect on instances that have external IP\naddresses. Instances with external IP addresses can access the internet,\naccording to the [internet access\nrequirements](/vpc/docs/vpc#internet_access_reqs). They don't need any special\nconfiguration to send requests to the external IP addresses of Google APIs and\nservices.\n\nYou enable Private Google Access on a subnet by subnet basis; it's a setting\nfor subnets in a VPC network. To enable a subnet for\nPrivate Google Access and to view the requirements, see [Configure\nPrivate Google Access](/vpc/docs/configure-private-google-access).\n\nSupported services\n------------------\n\nPrivate Google Access lets you access [Google APIs and\nservices](/vpc/docs/configure-private-google-access#domain-options)\nthat are hosted in Google's production infrastructure.\n\nOther Google services are hosted in VPC networks and can be\naccessed by using the following methods:\n\n- To connect to services that are published using the\n [Service Networking API](/service-infrastructure/docs/service-networking/reference/rest),\n see [private services access](/vpc/docs/private-services-access).\n\n- To connect to services that are published using\n [Private Service Connect](/vpc/docs/configure-private-service-connect-producer), see [Access managed services](/vpc/docs/configure-private-service-connect-services).\n\nExample\n-------\n\nThe following diagram shows an implementation of Private Google Access.\n[](/static/vpc/images/private-google-access.svg) Implementation of Private Google Access (click to enlarge).\n\nThe VPC network has been configured to meet the [DNS, routing,\nand firewall network requirements](/vpc/docs/configure-private-google-access#config)\nfor Google APIs and services. Private Google Access has been enabled on\n`subnet-a`, but not on `subnet-b`.\n\n- `VM A1` can access Google APIs and services, including Cloud Storage,\n because its network interface is located in `subnet-a`, which has\n Private Google Access enabled. Private Google Access applies to the instance\n because it only has an internal IP address.\n\n- `VM B1` **cannot** access Google APIs and services because it only has an\n internal IP address and Private Google Access is disabled for `subnet-b`.\n\n- `VM A2` and `VM B2` can both access Google APIs and services, including\n Cloud Storage, because they each have external IP addresses.\n Private Google Access has no effect on whether or not these instances can\n access Google APIs and services because both have external IP addresses.\n\nWhat's next\n-----------\n\n- To configure Private Google Access, see [Configure\n Private Google Access](/vpc/docs/configure-private-google-access)."]]
