Traffic to remote DB through VPN not being routed properly on Standard GAE

[Raphaël Antonmattei]

Hello,

We just migrated some of our services to the Php7.2 standard runtime. We were using Flex before. A few services use a MySQL database on Premise, so we had set up a VPN tunnel and everything was working just fine until we migrated. The traffic does not seem to be routed properly.

One thing I noticed in the VPN route details is that it does not apply to those new standard instances, they are not in the Applicable to instances list... From what I read, it looks like the VPN connectivity is only available with GAE Flex because of the VPC, etc. Is there is way to make standard instances communicate with an on Premise DB through VN tunnel?

Thanks in advance.

Raphael A.

[George (Cloud Platform Support)]

Hello Raphaël, 

You are right about VPN being unsupported in App Engine Standard, just  Compute Engine virtual machine (VM) instances, GKE clusters, and App Engine Flex instances. It is indeed about connecting to your Virtual Private Cloud (VPC) network, a feature not offered within the Standard Environment. There is no other way to set up a VPN, except to your VPC. Somewhat related information may be consulted in the "Networking and security" sub-chapter of the "Best Practices for Enterprise Organizations" online document.