CODEWITHSUNDEEP
postgresqlgoogle-cloud-platformcloud
Leonardo Assis
Leonardo Assis

Reputation: 3

Google Cloud Function access Cloud SQL PostgreSQL in another project

My Cloud Function can't connect to my Cloud SQL PostgreSQL instance. I'm receiving the error:

psycopg2.OperationalError: could not connect to server: Connection timed out
Is the server running on host "my.private.db.ip" and accepting
TCP/IP connections on port 5432?

There are 2 projects(A and B), connected via VPC Peering.

Is there restrictions on using this architecture?

Note: I'm trying to not use public ip for this connection.

Upvotes: 0

Views: 415

Answers (1)

guillaume blaquiere
guillaume blaquiere

Reputation: 75810

You can't access to the Cloud SQL instance because of VPC peering transitivity limitation. In fact, if you have a look to VPC peering limitation

Only directly peered networks can communicate. Transitive peering is not supported. In other words, if VPC network N1 is peered with N2 and N3, but N2 and N3 are not directly connected, VPC network N2 cannot communicate with VPC network N3 over VPC Network Peering.

In your case, you reach this limit. You have one peering from project A to Project B and another one from Cloud SQL to Project A.

Thus, you can't reach the Cloud SQL instance from Project B.

A workaround for this, is to create a VPN (and not a peering) between the project. Or to accept to have a public IP (without authorized network) on your Cloud SQL instance to accept Cloud SQL proxy connection.

I wrote an article on this recently.

Upvotes: 2

Related Questions