Help understanding Shared VPC, Private Service Access and Vertex AI Notebook

[dgnemo]

Hello,

Would anyone be able to explain me more about the networking configuration when dealing with:
Shared VPC, Private Service Access and Vertex AI Notebook ?

Vertex AI Managed Notebook allow you to select a Shared Network (see pic below)
and the tooltip seems to say that the notebook will receive an IP from the selected subnet.

 
Still when I try the configuration above, and execute `ifconfig` in the terminal inside the Vertex AI notebook, I never see an IP in that range.

Am I doing something wrong? Am I misunderstanding something?

Thanks!!

[jcskalant]

Hey @dgnemo 

If you are using a Managed notebook, one of the IPs you see in the terminal should be from the 
service producer network. This is a Google-managed project where your notebook/GCE is provisioned. This diagram is a good reference.

From that article: "... A resource in the service producer network is similar to other resources in your VPC network. For example, it's reachable through internal IP addresses by other resources in your VPC network. You can also create firewall rules in your VPC network to control access to the service producer's network..."

Your SharedVPC should have a VPC network peering connection to the producer project. This connection includes a destination CIDR range with routes for the resources to communicate. 

[dgnemo]

Thanks @jcskalant !

When I execute ifconfig in the managed notebook I indeed see an IP from the IP Range I reserved for the peering with the Google Managed Network.

Do you know if I should also see an IP from one of the VPC subnets ranges?

In the screenshot above, Google asks to select a specific subnet and the tooltip says:
"Assign the notebook an IP address from the subnetwork range."

Do you know how this should work? or why you HAVE to select a subnetwork when creating a managed notebook?

Thanks a lot!

[ambeshsingh]

Hi @dgnemo I am also stuck in similar issue where my managed notebook does not have public Ip and i need to install some packages(like langchain) from the internet. Were you able to solve your issue? any idea how can i let my managed notebook communicate to internet?

[dgnemo]

sorry, I could not find a solution, despite multiple support tickets 😞