Enabling Secured connections to access Cloud Auth proxy from On-premise

51 views Asked by At

We have a requirement to connect the Cloud SQL Database via Cloud Auth proxy deployed on a GKE cluster from an on-premise application securely. on-premise -> cloud auth proxy (GKE) -> Cloud SQL Instance. This is working fine when the connections are made on port 8080 but we would like to make it a secured connection from On-premise to Cloud Auth proxy.

#GCP#CloudAuthProxy

We are expecting to connect the Cloud Auth proxy from on-premise servers securely.

#GCP#CloudAuthProxy

1

There are 1 answers

0
Jonathan Hess On

Jonathan from the Google Cloud SQL Proxy team here.

The Cloud SQL Auth Proxy is great for securing connections between a local application and Google Cloud. It is ONLY intended to be run on the same machine as the application.

To secure your connection between your on-prem application and your Cloud SQL instance, please deploy the Cloud SQL Proxy on the same machine as your on-prem application.

network diagram showing that it is safe to deploy the proxy on the same machine as your application, but unsafe to deploy the proxy on a different machine.