State(value)Type of states that are defined in the network state machine. Each step in the packet trace is in a specific state.
Enums |
|
|---|---|
| Name | Description |
STATE_UNSPECIFIED |
Unspecified state. |
START_FROM_INSTANCE |
Initial state: packet originating from a Compute Engine instance. An InstanceInfo is populated with starting instance information. |
START_FROM_INTERNET |
Initial state: packet originating from the internet. The endpoint information is populated. |
START_FROM_GOOGLE_SERVICE |
Initial state: packet originating from a Google service. The google_service information is populated. |
START_FROM_PRIVATE_NETWORK |
Initial state: packet originating from a VPC or on-premises network with internal source IP. If the source is a VPC network visible to the user, a NetworkInfo is populated with details of the network. |
START_FROM_GKE_MASTER |
Initial state: packet originating from a Google Kubernetes Engine cluster master. A GKEMasterInfo is populated with starting instance information. |
START_FROM_CLOUD_SQL_INSTANCE |
Initial state: packet originating from a Cloud SQL instance. A CloudSQLInstanceInfo is populated with starting instance information. |
START_FROM_GKE_POD |
Initial state: packet originating from a Google Kubernetes Engine Pod. A GkePodInfo is populated with starting Pod information. |
START_FROM_REDIS_INSTANCE |
Initial state: packet originating from a Redis instance. A RedisInstanceInfo is populated with starting instance information. |
START_FROM_REDIS_CLUSTER |
Initial state: packet originating from a Redis Cluster. A RedisClusterInfo is populated with starting Cluster information. |
START_FROM_CLOUD_FUNCTION |
Initial state: packet originating from a Cloud Function. A CloudFunctionInfo is populated with starting function information. |
START_FROM_APP_ENGINE_VERSION |
Initial state: packet originating from an App Engine service version. An AppEngineVersionInfo is populated with starting version information. |
START_FROM_CLOUD_RUN_REVISION |
Initial state: packet originating from a Cloud Run revision. A CloudRunRevisionInfo is populated with starting revision information. |
START_FROM_CLOUD_RUN_JOB |
Initial state: packet originating from a Cloud Run Job. A CloudRunJobInfo is populated with starting Job information. |
START_FROM_STORAGE_BUCKET |
Initial state: packet originating from a Storage Bucket. Used only for return traces. The storage_bucket information is populated. |
START_FROM_PSC_PUBLISHED_SERVICE |
Initial state: packet originating from a published service that uses Private Service Connect. Used only for return traces. |
START_FROM_SERVERLESS_NEG |
Initial state: packet originating from a serverless network endpoint group backend. Used only for return traces. The serverless_neg information is populated. |
START_FROM_DMS_PRIVATE_CONNECTION |
Initial state: packet originating from a DMS Private Connection. |
APPLY_INGRESS_FIREWALL_RULE |
Config checking state: verify ingress firewall rule. |
APPLY_EGRESS_FIREWALL_RULE |
Config checking state: verify egress firewall rule. |
APPLY_ROUTE |
Config checking state: verify route. |
APPLY_FORWARDING_RULE |
Config checking state: match forwarding rule. |
ANALYZE_LOAD_BALANCER_BACKEND |
Config checking state: verify load balancer backend configuration. |
SPOOFING_APPROVED |
Config checking state: packet sent or received under foreign IP address and allowed. |
ARRIVE_AT_INSTANCE |
Forwarding state: arriving at a Compute Engine instance. |
ARRIVE_AT_INTERNAL_LOAD_BALANCER |
Forwarding state: arriving at a Compute Engine internal load balancer. |
ARRIVE_AT_EXTERNAL_LOAD_BALANCER |
Forwarding state: arriving at a Compute Engine external load balancer. |
ARRIVE_AT_HYBRID_SUBNET |
Forwarding state: arriving at a hybrid subnet. Appropriate routing configuration will be determined here. |
ARRIVE_AT_VPN_GATEWAY |
Forwarding state: arriving at a Cloud VPN gateway. |
ARRIVE_AT_VPN_TUNNEL |
Forwarding state: arriving at a Cloud VPN tunnel. |
ARRIVE_AT_INTERCONNECT_ATTACHMENT |
Forwarding state: arriving at an interconnect attachment. |
ARRIVE_AT_VPC_CONNECTOR |
Forwarding state: arriving at a VPC connector. |
ARRIVE_AT_GKE_POD |
Forwarding state: arriving at a GKE Pod. |
DIRECT_VPC_EGRESS_CONNECTION |
Forwarding state: for packets originating from a serverless endpoint forwarded through Direct VPC egress. |
SERVERLESS_EXTERNAL_CONNECTION |
Forwarding state: for packets originating from a serverless endpoint forwarded through public (external) connectivity. |
NGFW_PACKET_INSPECTION |
Forwarding state: Layer 7 packet inspection by the firewall endpoint based on the configured security profile group. |
NAT |
Transition state: packet header translated. The `nat` field is populated with the translation information. |
SKIP_GKE_POD_IP_MASQUERADING |
Transition state: GKE Pod IP masquerading is skipped. The `ip_masquerading_skipped` field is populated with the reason. |
SKIP_GKE_INGRESS_NETWORK_POLICY |
Transition state: GKE Ingress Network Policy is skipped. The `gke_network_policy_skipped` field is populated with the reason. |
SKIP_GKE_EGRESS_NETWORK_POLICY |
Transition state: GKE Egress Network Policy is skipped. The `gke_network_policy_skipped` field is populated with the reason. |
APPLY_INGRESS_GKE_NETWORK_POLICY |
Config checking state: verify ingress GKE network policy. |
APPLY_EGRESS_GKE_NETWORK_POLICY |
Config checking state: verify egress GKE network policy. |
PROXY_CONNECTION |
Transition state: original connection is terminated and a new proxied connection is initiated. |
DELIVER |
Final state: packet could be delivered. |
DROP |
Final state: packet could be dropped. |
FORWARD |
Final state: packet could be forwarded to a network with an unknown configuration. |
ABORT |
Final state: analysis is aborted. |
VIEWER_PERMISSION_MISSING |
Special state: viewer of the test result does not have permission to see the configuration in this step. |