Class State (1.37.0)

State(value)

Type of states that are defined in the network state machine. Each step in the packet trace is in a specific state.

Enums

Name Description
STATE_UNSPECIFIED Unspecified state.
START_FROM_INSTANCE Initial state: packet originating from a Compute Engine instance. An InstanceInfo is populated with starting instance information.
START_FROM_INTERNET Initial state: packet originating from the internet. The endpoint information is populated.
START_FROM_GOOGLE_SERVICE Initial state: packet originating from a Google service. The google_service information is populated.
START_FROM_PRIVATE_NETWORK Initial state: packet originating from a VPC or on-premises network with internal source IP. If the source is a VPC network visible to the user, a NetworkInfo is populated with details of the network.
START_FROM_GKE_MASTER Initial state: packet originating from a Google Kubernetes Engine cluster master. A GKEMasterInfo is populated with starting instance information.
START_FROM_CLOUD_SQL_INSTANCE Initial state: packet originating from a Cloud SQL instance. A CloudSQLInstanceInfo is populated with starting instance information.
START_FROM_GKE_POD Initial state: packet originating from a Google Kubernetes Engine Pod. A GkePodInfo is populated with starting Pod information.
START_FROM_REDIS_INSTANCE Initial state: packet originating from a Redis instance. A RedisInstanceInfo is populated with starting instance information.
START_FROM_REDIS_CLUSTER Initial state: packet originating from a Redis Cluster. A RedisClusterInfo is populated with starting Cluster information.
START_FROM_CLOUD_FUNCTION Initial state: packet originating from a Cloud Function. A CloudFunctionInfo is populated with starting function information.
START_FROM_APP_ENGINE_VERSION Initial state: packet originating from an App Engine service version. An AppEngineVersionInfo is populated with starting version information.
START_FROM_CLOUD_RUN_REVISION Initial state: packet originating from a Cloud Run revision. A CloudRunRevisionInfo is populated with starting revision information.
START_FROM_CLOUD_RUN_JOB Initial state: packet originating from a Cloud Run Job. A CloudRunJobInfo is populated with starting Job information.
START_FROM_STORAGE_BUCKET Initial state: packet originating from a Storage Bucket. Used only for return traces. The storage_bucket information is populated.
START_FROM_PSC_PUBLISHED_SERVICE Initial state: packet originating from a published service that uses Private Service Connect. Used only for return traces.
START_FROM_SERVERLESS_NEG Initial state: packet originating from a serverless network endpoint group backend. Used only for return traces. The serverless_neg information is populated.
START_FROM_DMS_PRIVATE_CONNECTION Initial state: packet originating from a DMS Private Connection.
APPLY_INGRESS_FIREWALL_RULE Config checking state: verify ingress firewall rule.
APPLY_EGRESS_FIREWALL_RULE Config checking state: verify egress firewall rule.
APPLY_ROUTE Config checking state: verify route.
APPLY_FORWARDING_RULE Config checking state: match forwarding rule.
ANALYZE_LOAD_BALANCER_BACKEND Config checking state: verify load balancer backend configuration.
SPOOFING_APPROVED Config checking state: packet sent or received under foreign IP address and allowed.
ARRIVE_AT_INSTANCE Forwarding state: arriving at a Compute Engine instance.
ARRIVE_AT_INTERNAL_LOAD_BALANCER Forwarding state: arriving at a Compute Engine internal load balancer.
ARRIVE_AT_EXTERNAL_LOAD_BALANCER Forwarding state: arriving at a Compute Engine external load balancer.
ARRIVE_AT_HYBRID_SUBNET Forwarding state: arriving at a hybrid subnet. Appropriate routing configuration will be determined here.
ARRIVE_AT_VPN_GATEWAY Forwarding state: arriving at a Cloud VPN gateway.
ARRIVE_AT_VPN_TUNNEL Forwarding state: arriving at a Cloud VPN tunnel.
ARRIVE_AT_INTERCONNECT_ATTACHMENT Forwarding state: arriving at an interconnect attachment.
ARRIVE_AT_VPC_CONNECTOR Forwarding state: arriving at a VPC connector.
ARRIVE_AT_GKE_POD Forwarding state: arriving at a GKE Pod.
DIRECT_VPC_EGRESS_CONNECTION Forwarding state: for packets originating from a serverless endpoint forwarded through Direct VPC egress.
SERVERLESS_EXTERNAL_CONNECTION Forwarding state: for packets originating from a serverless endpoint forwarded through public (external) connectivity.
NGFW_PACKET_INSPECTION Forwarding state: Layer 7 packet inspection by the firewall endpoint based on the configured security profile group.
NAT Transition state: packet header translated. The `nat` field is populated with the translation information.
SKIP_GKE_POD_IP_MASQUERADING Transition state: GKE Pod IP masquerading is skipped. The `ip_masquerading_skipped` field is populated with the reason.
SKIP_GKE_INGRESS_NETWORK_POLICY Transition state: GKE Ingress Network Policy is skipped. The `gke_network_policy_skipped` field is populated with the reason.
SKIP_GKE_EGRESS_NETWORK_POLICY Transition state: GKE Egress Network Policy is skipped. The `gke_network_policy_skipped` field is populated with the reason.
APPLY_INGRESS_GKE_NETWORK_POLICY Config checking state: verify ingress GKE network policy.
APPLY_EGRESS_GKE_NETWORK_POLICY Config checking state: verify egress GKE network policy.
PROXY_CONNECTION Transition state: original connection is terminated and a new proxied connection is initiated.
DELIVER Final state: packet could be delivered.
DROP Final state: packet could be dropped.
FORWARD Final state: packet could be forwarded to a network with an unknown configuration.
ABORT Final state: analysis is aborted.
VIEWER_PERMISSION_MISSING Special state: viewer of the test result does not have permission to see the configuration in this step.