Create a private connectivity configuration

A private connectivity configuration lets you connect Datastream to data sources over an internal Google Cloud network, VPN, or Cloud Interconnect. You can connect through a Private Service Connect interface attached to a network attachment subnetwork in your Virtual Private Cloud (VPC) network.

Alternatively, you can use VPC peering to route traffic between two VPC networks over an allocated internal IP range. Because Datastream doesn't support DNS resolution in private connections, you must specify private IPv4 addresses for your sources.

Note that Datastream automatically deletes private connectivity configurations that haven't been used for a period of six consecutive months. To retain your private connectivity configurations, make sure they are used in at least one active connection profile.

Before you begin

Before you create your private connectivity configuration, review the prerequisites:

Create the configuration

To create a private connectivity configuration, perform the following steps:

  1. Go to the Private connectivity configurations page in the Google Cloud console.

    Go to the Private connectivity configurations page

  2. Click Create configuration.

  3. Use the following table to populate the fields of the Configure private connectivity section of the Create private connectivity configuration page:

    FieldDescription
    Configuration nameEnter the display name of the private connectivity configuration.
    Configuration IDDatastream populates this field automatically based on the configuration name that you enter. You can keep the ID that's auto-generated or change it.
    Region

    Select the region where the private connectivity configuration is stored.

  4. In the Set up connection section, select an option from the Private connectivity method drop-down:

    • PSC interfaces: select this option to use Private Service Connect interface as your private connectivity method:
      FieldDescription
      Project IDSelect the identifier of the project where the network attachment that you want to use is. By default, this is your current project. To change the value, click Change and select a different project.
      Network attachmentSelect the network attachment that you created for your VPC.
      Update allowlistClick this button to allow connections from the Datastream IP addresses. You need to have the compute.networkAdmin role assigned to connect to the network attachment.
    • VPC peering: select this option to use VPC peering as your private connectivity method:
      FieldDescription
      Authorized VPC networkSelect the VPC network that you created.
      Allocate an IP rangeEnter an available IP range on the VPC network.

  5. Click CREATE.

After creating a private connectivity configuration, you can view high-level and detailed information about it.

What's next