Static IP outbound for cloud run function

[purna05]

Hi All,

I fetch data from source on daily basis with cloud function. here source system need to whitelist static IP of cloud run function. i was not familiar on this excise. Please help how to get cloud IP's for cloud run function.

[knet · Accepted solution]

Here's how you do this for Cloud Run:

https://cloud.google.com/run/docs/configuring/static-outbound-ip

Cloud Functions will be very similar since the egress settings work the same way. 

[knet · Accepted solution]

Here's how you do this for Cloud Run:

https://cloud.google.com/run/docs/configuring/static-outbound-ip

Cloud Functions will be very similar since the egress settings work the same way. 

[greb · Accepted solution]

Hi @purna05,

Cloud Run functions use dynamic IPs by default, which can be change. To work with systems that need IP whitelisting, you'll need a static IP. Here’s the guide that may help you to set it up:

1. Reserve a Static IP:
• Go to VPC Network > External IP addresses in the Google Cloud Console.
• Click Reserve static address, name it, choose your region, and click Reserve.
  
  
2. Create a VPC Connector:
• Visit VPC Network > Serverless VPC access.
• Click Create Connector, name it, select the same region as your Cloud Run service, and pick a CIDR range (e.g., 10.8.0.0/28). Click Create.
  
  
3. Set Up Cloud NAT:
• Go to VPC Network > NAT.
• Click Create NAT gateway, choose your VPC network and region.
• For Cloud NAT IP allocation, select Manual and pick the reserved static IP. Click Create.
  
  
4. Deploy or Update Your Cloud Run Service:

• Use this command to deploy with VPC connector:
  gcloud run deploy SERVICE --image IMAGE_URL --vpc-connector CONNECTOR_NAME
• To update an existing service:
  gcloud run services update SERVICE --vpc-connector CONNECTOR_NAME

For further configurations, you may check Deploying Cloud Run function and Cloud Run function Egress Settings.

In Addition you may consider check the following for smooth configuration:

• Firewall Rules: Ensure your VPC firewall allows traffic from the NAT gateway.
• Permissions: Make sure your Cloud Run service has the right permissions.
• Testing: Confirm the static IP is used for outbound connections.

These steps and resources might help you set up a static IP for your Cloud Run function. I hope the above information and guide is helpful.

[carcentrekz]

Dear, Greb

there is no VPC Network > NAT destination.

Cloud NAT is laying at Network Services (Network Services > Cloud NAT).

Therefore I am not able to go through the schema.

For example, I have reserved an ip-address at VPC Networks, but it did not appear in Cloud NAT creation form. I had to create it in form.

This schema is also has nothing about router. But NAT form requires it

Can you help me to update the instruction and perform all necessary actions?