App Engine to Compute Engine communication via internal IP

[Stephen Dunkley]

I have a Java Web application deployed on a Compute Engine instance connecting to MySql running on another Compute Engine instance in the same project. I am able to connect to MySql using the internal IP address (jdbc:mysql://10.240.0.4:3306/<db_name>).

If I deploy the same web application to an App Engine instance within the same project, I can only connect to the MySql instance via the extermal IP address (jdbc:mysql://104.196.148.141:3306/<db_name).

If I try to use the internal IP address, I get a Communication Link Failure, Permission Denied due to policy.

My question is how do I open up communication between an App Engine instance and a Compute Engine instance via an internal IP address? The performance is about 5 x faster when using the internal IP address.

Any help would be much appreciated

[Adam (Cloud Platform Support)]

You should be able to do this if you use a Flexible Environment instance, and specify the same network name in the app.yaml that your Compute Engine instance running MySQL is on. It won't work for Standard Environment instances as they are on separate, physical networks.

I say "should" as I haven't played around with this, and there's an additional layer of network routing from the Docker container the app lives in which also has its own local subnet.

[JITENDRA GANGWAR]

Thanks Adam for your answer , But  as per this documentation App Engine flexible environment is still in beta release , can it be used in production ?

[Nick (Cloud Platform Support)]

Hey Jitenda,

The Flexible Environment can be used by any user, although of course being a beta product, it isn't covered by the same SLA's as other products. You should check our documentation including the terms of service, service level agreements, and the explanation of launch stages.

Cheers,

Nick
Cloud Platform Community Support

[Lorne Kligerman]

As Adam mentioned, this is only possible right now with the flex.  However we do know this is a problem and are working towards a solution for standard, nothing more to report at this time.

[Robert Dyas]

Being able to have App Engine standard access my GCE instances via their internal IP addresses would help us greatly. Hopefully this will also solve some of the speed/latency issues between App Engine standard and GCE resources.

[AJ Ross]

Hey Lorne, thanks for the information. I have a "standard" instance and I'm migrating to "flex" in order to be able to open direct connections to a Kubernetes cluster. Good to know that this should work!

[Robert Dyas]

Now that GAE Std Java 8 is in beta, is there any update on when this might become available for testing?

On Wednesday, January 4, 2017 at 1:25:40 PM UTC-5, Lorne Kligerman wrote:

[Lorne Kligerman]

Not just yet.  We'll let you know when we're ready for early tests.

Thanks!

--
You received this message because you are subscribed to a topic in the Google Groups "Google App Engine" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-appengine/5RsoKIPWyTQ/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/b21223f6-8d58-4522-b369-a17744453b53%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Yang Yao]

Hi, Adam. I have tried using flexible instance to connect to a container engine which I created an internal load balancer. But this unfortunately does not work. (External load balancer does work.) Is there anyone could suggest? A detailed description of my troubleshooting process is posted here on stackoverflow.

[Daniel Florey]

Any news? I've spend a lot of time to find information on how to access Compute Engine vial URLFetch from App Engine standard using internal IP.

Is this simply not possible (yet)?

To unsubscribe from this group and all its topics, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.

Visit this group at https://groups.google.com/group/google-appengine.

[Niklas B]

Agreed, this would be very helpful. This would serve as a poor mans cloud functions until they get python and internal access. Looking for this on the Flexible environment.