Cloud VPN is now available in region
asia-southeast3 (Bangkok, Thailand).
For more information, see Global locations.
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN provides predefined dashboards in the Google Cloud console for a quick, single-view insight into system health and tunnel performance. These dashboards display key metrics that enable you to monitor project-wide health and conduct tunnel-specific diagnosis without manual configuration. This feature is Generally Available.
For more information, see View Monitoring dashboards
]]>Cloud VPN supports customizable cipher options for your VPN tunnels. You can configure ciphers as per your security requirements. This feature is Generally Available.
For more information, see Configure ciphers in Cloud VPN tunnel.
]]>Classic VPN full deprecation update
As of August 1, 2025, dynamic routing or Border Gateway Protocol (BGP) for Classic VPN tunnels is deprecated. If your workloads require BGP for VPN connectivity, you must use HA VPN.
Existing Classic VPN tunnels that use BGP will continue to function. However, they will no longer be supported and will operate without an availability SLA.
For more information, refer to Classic VPN dynamic routing deprecation.
]]>Cloud VPN supports customizable cipher options for your VPN tunnels. You can configure ciphers as per your security requirements. This feature is available in Public Preview.
For more information, see Configure ciphers in Cloud VPN tunnel.
]]>Cloud VPN is now available in region europe-north2 (Stockholm, Sweden). For more information, see Global locations.
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region northamerica-south1 (Queretaro, Mexico, North America).
For more information, see Global locations.
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN lets you connect two VPC networks in different regions by using HA VPN gateways.
For more information, see HA VPN topologies.
]]>Cloud VPN support for IPv6-only HA VPN gateways is available in General Availability. For more information, see IPv6 support.
]]>Cloud VPN is now available in region africa-south1 (Johannesburg, South Africa).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN support for IPv6-only HA VPN gateways is in Preview. For more information, see IPv6 support.
]]>Cloud VPN lets you connect an HA VPN gateway to Compute Engine virtual machine (VM) instances.
For more information, see HA VPN topologies.
]]>Cloud VPN is now available in region me-central2 (Dammam, Saudi Arabia).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region europe-west10 (Berlin, Germany).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region me-central1 (Doha, Qatar).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region europe-west12 (Turin, Italy).
Pricing is available on the Cloud VPN pricing page.
]]>HA VPN over Cloud Interconnect is generally available. With HA VPN over Cloud Interconnect, you can use Cloud VPN to encrypt your Cloud Interconnect traffic by deploying HA VPN tunnels over your VLAN attachments.
For more information, see the HA VPN over Cloud Interconnect overview.
]]>Cloud VPN supports dual-stack HA VPN gateways that allow both IPv4 and IPv6 traffic. By using Multiprotocol BGP (MP-BGP) sessions in Cloud Router, HA VPN can connect your peer networks to VPC networks with dual-stack subnets. This feature is generally available.
]]>Cloud VPN is now available in region me-west1 (Tel Aviv, Israel).
Pricing is available on the Cloud VPN pricing page.
]]>You can now download third-party peer VPN configuration templates for Cloud VPN from the Google Cloud console. Use these templates to configure HA VPN tunnels on your peer VPN device. Configuration templates are currently available for the following vendor platform and software versions:
For more information, see Download a peer VPN configuration template.
]]>Cloud VPN no longer checks a peer's IKE identity.
This change simplifies the configuration of your VPN peers, because you no longer need to explicitly set a peer's IKE identity to a specific value.
Note: Some Cloud VPN tunnels that were previously unestablished due to unmatched IKE identity might now become established.
If you don't want the affected tunnels to become established, delete them as needed on the Cloud VPN side, on the on-premises side, or on both sides.
If you want the affected tunnels to become established, no action is required on your part.
Previously, Cloud VPN required peers to use an IKE identity of type ID_IPV4_ADDR, which is equal to the peer's public IP address.
Removing this restriction enables easier interoperation with peers that don't support changing their IKE identity, especially when such peers are located behind NAT (Network Address Translation).
If you have any questions or require assistance, contact Google Cloud Support.
]]>Cloud VPN is available in region us-south1 (Dallas, US).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is available in region us-east5 (Columbus, US).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region europe-southwest1 (Madrid, Spain).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region europe-west9 (Paris, France).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region europe-west8 (Milan, Italy).
Pricing is available on the Cloud VPN pricing page.
]]>Cloud VPN is now available in region southamerica-west1 (Santiago, Chile).
Pricing is available on the Cloud VPN pricing page.
]]>Classic VPN partial deprecation update
Starting on March 31, 2022, you will no longer be able to create new Classic VPN tunnels that use dynamic routing (BGP) unless you are creating a specifically supported configuration.
On or after March 31, 2022, you can still create the following Classic VPN configurations:
This notice replaces any previous notice about the deprecation of static routing configurations in Classic VPN.
Although Google will not proactively disable existing connections on the deprecation date, deprecated Classic VPN configurations will only receive maintenance updates going forward.
For more information, see Classic VPN partial deprecation for a video tutorial and documentation to help you migrate to the more reliable High Availability Cloud VPN solution.
]]>Added Terraform examples to automate HA VPN gateway creation:
]]>Cloud VPN is now available in region northamerica-northeast2 (Toronto, Canada).
Pricing is available on the Cloud VPN pricing page.
]]>