Create a private connectivity configuration

In this page, you learn how to create a private connectivity configuration. This type of configuration contains information that Datastream uses to communicate with a data source over a private network (internally within Google Cloud, or with external sources connected over VPN or Interconnect). This communication happens through a Private Service Connect interface connection or a Virtual Private Cloud (VPC) peering connection.

A Private Service Connect interfaceconnection uses a virtual machine (VM) with a network interface that Datastream creates. The network interface then connects to your VPC network using the network attachment that you supply, with the IP address assigned from the network attachment subnetwork.

A VPC peeringconnection is a networking connection between two VPCs that lets you route traffic between them using internal, private IPv4 addresses. You need to provide the private IP addresses when setting up the private connectivity configuration because Datastream doesn't support Domain Name System (DNS) resolution in private connections.

Before you begin

Before you create your private connectivity configuration, review the prerequisites:

• For VPC peering, see VPC peering prerequisites .
• For Shared VPC, see Shared VPC prerequisites .
• For Private Service Connect interfaces, see Private Service Connect prerequisites .

Create the configuration

To create a private connectivity configuration, perform the following steps:

1. Go to the Private connectivity configurationspage in the Google Cloud console.

   Go to the Private connectivity configurations page

2. Click Create configuration.

3. Use the following table to populate the fields of the Configure private connectivitysection of the Create private connectivity configurationpage:

   Field	Description
   Configuration name	Enter the display name of the private connectivity configuration.
   Configuration ID	Datastream populates this field automatically based on the configuration name that you enter. You can keep the ID that's auto-generated or change it.
   Region	Select the region where the private connectivity configuration is stored.

4. In the Set up connectionsection, select an option from the Private connectivity methoddrop-down:

   • PSC interfaces: select this option to use Private Service Connect interface as your private connectivity method:

     Field	Description
     Project ID	Select the identifier of the project where the network attachment that you want to use is. By default, this is your current project. To change the value, click Changeand select a different project.
     Network attachment	Select the network attachment that you created for your VPC.
     Update allowlist	Click this button to allow connections from the Datastream IP addresses. You need to have the compute.networkAdmin role assigned to connect to the network attachment.

   • VPC peering: select this option to use VPC peering as your private connectivity method:

     Field	Description
     Authorized VPC network	Select the VPC network that you created.
     Allocate an IP range	Enter an available IP range on the VPC network.

5. Click CREATE.

After creating a private connectivity configuration, you can view high-level and detailed information about it.

What's next

• Learn how to view your private connectivity configuration .
• Find out how to delete a private connectivity configuration .
• Learn about the Private Service Connect interfaces private connectivity method.
• Learn about the VPC peering private connectivity method.