TLDR;关于这个问题有任何更新吗? Google App Engine 通过内部网络与 Compute Engine 通信
--
是否可以在同一个 Cloud Project 中的 App Engine 和 Compute Engine 实例之间启用 HTTP 流量?
显然拒绝来自其他来源的所有 HTTP 流量。
在 AWS EC2/RDS/Beanstalk 之间,这可以通过“安全组”来实现。
TLDR;关于这个问题有任何更新吗? Google App Engine 通过内部网络与 Compute Engine 通信
--
是否可以在同一个 Cloud Project 中的 App Engine 和 Compute Engine 实例之间启用 HTTP 流量?
显然拒绝来自其他来源的所有 HTTP 流量。
在 AWS EC2/RDS/Beanstalk 之间,这可以通过“安全组”来实现。
I think the best you can currently do is managed VMs (https://developers.google.com/cloud/managed-vms, early access right now). It's essentially managed VMs running custom code in the app engine project. I did not check if the managed VMs will be able to run together with other gce VMs in the same network - if they did one could just connect to the internal addresses of the other instances. There does not appear to be a configuration option to define a network so I'm leaning to guess that they won't be able to see each other on the network like that.
But as an answer to the general question, I don't think there is any way of referencing app engine runtimes as sources in gce network ACLs currently.
截至目前 2016 年 google cloud 已经推出了 google cloud 柔性环境 appengine/docs/flexible/。所以是的,现在有可能,因为现在两者app engine
都compute engine
存在于同一网络中,因此使用您可以访问的应用程序引擎compute engine by using their internal Ip
,如果您只想允许访问,还记得删除计算引擎的所有外部防火墙规则app engine
。
没有办法在 GCE 中引用 App Engine 资源。如果您尝试仅从 App Engine 应用程序访问 GCE,那么您可以在 GCE 中定义 ACL 以仅允许来自 AppEngine 外部 IP 的流量。