Support for VPC Service Controls is generally available (GA).

Secure Web Proxy (SWP) uses a Cloud Network Address Translation (NAT) gateway to allow external communication between Google Cloud Platform (GCP) workloads and internet destinations. This NAT gateway is automatically provisioned when you set up your SWP instance.

To limit the number of IP addresses being used up, the Cloud NAT gateway now uses dynamic port allocation (DPA) for SWP. This feature is generally available (GA).

You can now configure your Secure Web Proxy (SWP) instance to be a next hop for routing web traffic within your network. To create a next hop, you can use either policy-based routes or static routes.

With the launch of this deployment mode, you now have the flexibility to deploy your SWP instance in explicit proxy mode, as a Private Service Connect (PSC) service attachment, or as a next hop. This feature is now generally available (GA).

The Direct VPC egress feature of Cloud Run now supports Secure Web Proxy. This feature is generally available (GA).

You can now publish Secure Web Proxy (SWP) as a Private Service Connect (PSC) service attachment. With this feature, you can centralize and apply security policies on your egress web traffic. This feature is now generally available (GA).

Secure Web Proxy is generally available (GA).

Cloud Secure Web Proxy supports TLS inspection, which helps you intercept the TLS traffic, inspect the encrypted request, and enforce security policies. This feature is supported in Preview.

Cloud SWG is available in Preview. Cloud SWG provides a secure web gateway that helps you secure egress web traffic (HTTP/S). Contact your sales representative to sign up and use Cloud SWG.