mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-13 00:18:35 +00:00
109 lines
3.7 KiB
Text
109 lines
3.7 KiB
Text
NAME
|
|
gcloud compute routers nats rules create - add a Rule to a Compute Engine
|
|
NAT
|
|
|
|
SYNOPSIS
|
|
gcloud compute routers nats rules create RULE_NUMBER --match=MATCH
|
|
--nat=NAT --router=ROUTER [--async] [--region=REGION]
|
|
[--source-nat-active-ips=IP_ADDRESS,[IP_ADDRESS,...]]
|
|
[--source-nat-active-ranges=SUBNETWORK,[SUBNETWORK,...]]
|
|
[GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
gcloud compute routers nats rules create is used to create a Rule on a
|
|
Compute Engine NAT.
|
|
|
|
EXAMPLES
|
|
Create a rule to use the IP Address address-1 to talk to destination IPs in
|
|
the CIDR Range "203.0.113.0/24".
|
|
|
|
$ gcloud compute routers nats rules create 1 --nat=my-nat \
|
|
--router=my-router --region=us-central1 \
|
|
--match='inIpRange(destination.ip, "203.0.113.0/24")' \
|
|
--source-nat-active-ips=a1
|
|
|
|
POSITIONAL ARGUMENTS
|
|
RULE_NUMBER
|
|
Number that uniquely identifies the Rule to create
|
|
|
|
REQUIRED FLAGS
|
|
--match=MATCH
|
|
CEL Expression used to identify traffic to which this rule applies.
|
|
|
|
◆ Supported attributes (Public NAT): destination.ip
|
|
◆ Supported attributes (Private NAT): nexthop.hub
|
|
◆ Supported methods (Public Nat): inIpRange
|
|
◆ Supported operators (Public NAT): ||, ==
|
|
◆ Supported operators (Private NAT): ==
|
|
|
|
Examples of allowed Match expressions (Public NAT):
|
|
◆ 'inIpRange(destination.ip, "203.0.113.0/24")''
|
|
◆ 'destination.ip == "203.0.113.7"'
|
|
◆ 'destination.ip == "203.0.113.7" || inIpRange(destination.ip,
|
|
"203.0.113.16/25")'
|
|
|
|
Example of allowed Match expression (Private NAT):
|
|
◆ nexthop.hub ==
|
|
"//networkconnectivity.googleapis.com/projects/p1/locations/global/hubs/h1"
|
|
|
|
--nat=NAT
|
|
Name of the NAT that contains the Rule
|
|
|
|
--router=ROUTER
|
|
The Router to use for NAT.
|
|
|
|
OPTIONAL FLAGS
|
|
--async
|
|
Return immediately, without waiting for the operation in progress to
|
|
complete.
|
|
|
|
--region=REGION
|
|
Region of the NAT to create. If not specified, you might be prompted to
|
|
select a region (interactive mode only).
|
|
|
|
To avoid prompting when this flag is omitted, you can set the
|
|
compute/region property:
|
|
|
|
$ gcloud config set compute/region REGION
|
|
|
|
A list of regions can be fetched by running:
|
|
|
|
$ gcloud compute regions list
|
|
|
|
To unset the property, run:
|
|
|
|
$ gcloud config unset compute/region
|
|
|
|
Alternatively, the region can be stored in the environment variable
|
|
CLOUDSDK_COMPUTE_REGION.
|
|
|
|
--source-nat-active-ips=IP_ADDRESS,[IP_ADDRESS,...]
|
|
External IP Addresses to use for connections matching this rule. This
|
|
flag is supported only for Public NAT and is required when creating a
|
|
Public NAT gateway.
|
|
|
|
These must be valid reserved external IP addresses in the same region.
|
|
|
|
--source-nat-active-ranges=SUBNETWORK,[SUBNETWORK,...]
|
|
Subnetworks from which addresses are used for connections matching this
|
|
rule. This flag is supported only for Private NAT and is required when
|
|
creating a Private NAT gateway.
|
|
|
|
These must be subnetwork resources in the same region, with purpose set
|
|
to PRIVATE_NAT.
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
NOTES
|
|
These variants are also available:
|
|
|
|
$ gcloud alpha compute routers nats rules create
|
|
|
|
$ gcloud beta compute routers nats rules create
|
|
|