Thanks a lot that clarified. I followed your suggestion regarding the feature request.
One more question in this subject though... If I will make the VPN connection through a regular Compute Engine is it possible to securely forward all the incoming traffic to one of the GAE modules? To be more precise, once the request arrives via VPN I would like to do the protocol forwarding from the Compute Engine VM to the GAE. This way I could keep the main logic in the scope of the GAE and make the Compute Engine VM a thin layer with no or very little logic. I'm not sure though if that is possible and secure in a sense of not exposing the request/response to the outside world (outside of the Google's network). On Monday, December 21, 2015 at 10:54:08 PM UTC+1, Nick (Cloud Platform Support) wrote: > > You'll need a static IP on the machine making the connection, and the > machine must be able to make the connection. Given that this is a low level > network task, you'll need to user Managed VMs or Compute Engine, rather > than App Engine, yes. For Compute Engine, you can set a static IP address > <https://cloud.google.com/compute/docs/instances-and-network>. In Managed > VMs, once the VM is switched to "User Managed", this is also possible, > although I believe the address will be voided on restart of the instance - > you may want to check this. > > There is currently a Public Issue Tracker > <https://code.google.com/p/googleappengine/issues/detail?id=12244> issue > with feedback which seems to suggest that the ability to pin static IP > addresses to Managed VMs may be changing, in fact. It might be worth making > a feature request which specifically mentions that PIT issue and which > represents a feature request to clarify that static IPs on Managed VMs is > desired. > > If the Beta nature of Managed VMs is not desirable, I'd suggest just > making the VPN connection through a regular Compute Engine instance. > > On Saturday, December 19, 2015 at 10:37:57 AM UTC-5, Piotr Krzepczak wrote: >> >> I have an app currently running in the sandboxed Google AppEngine. >> One of the modules has to have a VPN connection to the external VPN >> gateway. >> I wanted to use the Google Cloud VPN for this but I believe that I can't >> set it up as I do not have an IP address given at the app engine side. >> >> Given my requirement is it better to move this particular module to the >> Managed VM? >> Is it possible to set up VPN using Managed VM? >> >> If not what are other ways of tackling this problem? >> >> Thanks >> > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/35d956f9-3c00-4829-9a2a-c77f1add79fb%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
