Enum DropInfo.Cause
- All Implemented Interfaces:
com.google.protobuf.Internal.EnumLite,com.google.protobuf.ProtocolMessageEnum,Serializable,Comparable<DropInfo.Cause>
- Enclosing class:
- DropInfo
public static enum DropInfo.Cause
extends Enum<DropInfo.Cause>
implements com.google.protobuf.ProtocolMessageEnum
Drop cause types:Protobuf enum
google.cloud.networkmanagement.v1beta1.DropInfo.Cause-
Enum Constant Summary
Enum ConstantsEnum ConstantDescriptionPacket is dropped due to a backend service named port not being defined on the instance group level.Cause is unspecified.Packet could be dropped because the Cloud Function is not in an active status.Packet sent to Cloud Nat without active NAT IPs.Packet is dropped by Cloud NAT due to using an unsupported protocol.Packet sent from a Cloud Run revision that is not ready.Packet was dropped because the Cloud SQL instance requires all connections to use Cloud SQL connectors and to target the Cloud SQL proxy port (3307).Packet was dropped because the Cloud SQL instance has neither a private nor a public IP address.Packet was dropped because there is no route from a Cloud SQL instance to a destination network.Packet sent from a Cloud SQL instance to an external IP address is not allowed.Packet sent from or to a Cloud SQL instance that is not in running state.Access to the Cloud SQL instance endpoint is not authorized.The packet is sent to the Private Service Connect backend (network endpoint group) targeting a Cloud SQL service attachment, but this configuration is not supported.Packet is dropped due to a destination IP range being part of a Private NAT IP range.Packet was dropped inside Cloud SQL Service.Packet was dropped inside Google Kubernetes Engine Service.Packet is dropped inside a Google-managed service due to being delivered in return trace to an endpoint that doesn't match the endpoint the packet was sent from in forward trace.Packet was dropped inside Private Service Connect service producer.Generic drop cause for a packet being dropped inside a Redis Cluster service project.Generic drop cause for a packet being dropped inside a Redis Instance service project.Firewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer.Dropped due to a firewall rule, unless allowed due to connection tracking.A Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.Forwarding rule's protocol and ports do not match the packet header.Forwarding rule does not have backends configured.Packet could be dropped because it was sent from a different region to a regional forwarding without global access.Packet sent from or to a GKE cluster that is not in running state.Packet was dropped because there is no route from a GKE cluster control plane to a destination network.Packet was dropped because a GKE cluster private endpoint is unreachable from a region different from the cluster's region.Access to Google Kubernetes Engine cluster master's endpoint is not authorized.Packet is dropped by GKE Network Policy.Packet sent from or to a GKE Pod that is not in running state.Packet was dropped because the GKE cluster uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.Packet was dropped because there is no peering between the originating network and the Google Managed Services Network.Packet was dropped because the Google-managed service uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.The packet sent from the hybrid NEG proxy matches a non-dynamic route, but such a configuration is not supported.The packet sent from the hybrid NEG proxy matches a dynamic route with a next hop in a different region, but such a configuration is not supported.Packet is dropped because no matching route was found in the hybrid subnet.Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.Matching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported.Packet is sent from or to a Compute Engine instance that is not in a running state.Packet is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.Packet is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.Packet is dropped due to using an unsupported protocol (any other than UDP) for L2 Interconnect.Packet is dropped due to a load balancer backend instance not having a network interface in the network expected by the load balancer.Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.Packet sent to a load balancer, which requires a proxy-only subnet and the subnet is not found.Packet could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix advertised via BGP by the Cloud Router.Packet is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.Endpoint with only an internal IP address tries to access external hosts, but there is no matching Cloud NAT gateway in the subnet.Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.Packet from the unknown peered network is dropped due to no known route from the source network to the destination IP address.Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.No NAT subnets are defined for the PSC service attachment.Dropped due to no matching routes.Packet is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.Packet is sent from the Internet to the private IPv4 address.Packet is sent from the Internet to the private IPv6 address.Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix included to the local traffic selector of the VPN tunnel.Packet is dropped because there is no valid matching route from the network of the Google-managed service to the destination.Endpoint with only an internal IP address tries to access Google API and services, but Private Google Access is not enabled in the subnet or is not applicable.Source endpoint tries to access Google API and services through the VPN tunnel to another network, but Private Google Access needs to be enabled in the source endpoint network.Sending packets processed by the Private NAT Gateways to the Private Service Connect endpoints is not supported.Packet with internal destination address sent to the internet gateway.The Private Service Connect endpoint is in a project that is not approved to connect to the service.The packet is sent to the Private Service Connect endpoint over the peering, but [it's not supported](https://cloud.google.com/vpc/docs/configure-private-service-connect-services#on-premises).The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule does not have global access enabled.The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule has multiple ports specified.Packet is sent to the PSC port mapping service, but its destination port does not match any port mapping rules.Sending packets directly to the PSC port mapping service without going through the PSC connection is not supported.PSC endpoint is accessed via NCC, but PSC transitivity configuration is not yet propagated.Packet sent from a Cloud SQL instance with only a public IP address to a private IP address.Packet sent from a public GKE cluster control plane to a private IP address.Redis Cluster does not have an external IP address.Packet sent from or to a Redis Cluster that is not in running state.Packet is dropped due to an unsupported port being used to connect to a Redis Cluster.Packet is dropped due to an unsupported protocol being used to connect to a Redis Cluster.Packet is dropped due to connecting from PUPI address to a PSA based Redis Instance.Redis Instance does not have an external IP address.Packet is dropped due to no route to the destination network.Packet sent from or to a Redis Instance that is not in running state.Packet is dropped due to an unsupported port being used to connect to a Redis Instance.Packet is dropped due to an unsupported protocol being used to connect to a Redis Instance.Dropped due to invalid route.Route's next hop forwarding rule doesn't match next hop IP address.Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).Route's next hop IP address is not a primary IP address of the next hop instance.Route's next hop instance doesn't have a NIC in the route's network.Route's next hop IP address cannot be resolved to a GCP resource.Route's next hop resource is not found.Route's next hop VPN tunnel is down (does not have valid IKE SAs).Packet is sent to a wrong (unintended) network.Packet is stuck in a routing loop.Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.The type of traffic is blocked and the user cannot configure a firewall rule to enable it.Destination external address cannot be resolved to a known target.Destination internal address cannot be resolved to a known target.Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.Packet could be dropped because the health check traffic to the VPC connector is not allowed.Packet could be dropped because the VPC connector is not in a running state.Packet could be dropped because no VPC connector is set.Packet could be dropped because the traffic from the serverless service to the VPC connector is not allowed.The packet does not match a policy-based VPN tunnel local selector.The packet does not match a policy-based VPN tunnel remote selector. -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final intPacket is dropped due to a backend service named port not being defined on the instance group level.static final intCause is unspecified.static final intPacket could be dropped because the Cloud Function is not in an active status.static final intPacket sent to Cloud Nat without active NAT IPs.static final intPacket is dropped by Cloud NAT due to using an unsupported protocol.static final intPacket sent from a Cloud Run revision that is not ready.static final intPacket was dropped because the Cloud SQL instance requires all connections to use Cloud SQL connectors and to target the Cloud SQL proxy port (3307).static final intPacket was dropped because the Cloud SQL instance has neither a private nor a public IP address.static final intPacket was dropped because there is no route from a Cloud SQL instance to a destination network.static final intPacket sent from a Cloud SQL instance to an external IP address is not allowed.static final intPacket sent from or to a Cloud SQL instance that is not in running state.static final intAccess to the Cloud SQL instance endpoint is not authorized.static final intThe packet is sent to the Private Service Connect backend (network endpoint group) targeting a Cloud SQL service attachment, but this configuration is not supported.static final intPacket is dropped due to a destination IP range being part of a Private NAT IP range.static final intPacket was dropped inside Cloud SQL Service.static final intPacket was dropped inside Google Kubernetes Engine Service.static final intPacket is dropped inside a Google-managed service due to being delivered in return trace to an endpoint that doesn't match the endpoint the packet was sent from in forward trace.static final intPacket was dropped inside Private Service Connect service producer.static final intGeneric drop cause for a packet being dropped inside a Redis Cluster service project.static final intGeneric drop cause for a packet being dropped inside a Redis Instance service project.static final intFirewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer.static final intDropped due to a firewall rule, unless allowed due to connection tracking.static final intA Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.static final intForwarding rule's protocol and ports do not match the packet header.static final intForwarding rule does not have backends configured.static final intPacket could be dropped because it was sent from a different region to a regional forwarding without global access.static final intPacket sent from or to a GKE cluster that is not in running state.static final intPacket was dropped because there is no route from a GKE cluster control plane to a destination network.static final intPacket was dropped because a GKE cluster private endpoint is unreachable from a region different from the cluster's region.static final intAccess to Google Kubernetes Engine cluster master's endpoint is not authorized.static final intPacket is dropped by GKE Network Policy.static final intPacket sent from or to a GKE Pod that is not in running state.static final intPacket was dropped because the GKE cluster uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.static final intPacket was dropped because there is no peering between the originating network and the Google Managed Services Network.static final intPacket was dropped because the Google-managed service uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.static final intThe packet sent from the hybrid NEG proxy matches a non-dynamic route, but such a configuration is not supported.static final intThe packet sent from the hybrid NEG proxy matches a dynamic route with a next hop in a different region, but such a configuration is not supported.static final intPacket is dropped because no matching route was found in the hybrid subnet.static final intPacket is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.static final intMatching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported.static final intPacket is sent from or to a Compute Engine instance that is not in a running state.static final intPacket is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.static final intPacket is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.static final intPacket is dropped due to using an unsupported protocol (any other than UDP) for L2 Interconnect.static final intPacket is dropped due to a load balancer backend instance not having a network interface in the network expected by the load balancer.static final intPacket is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.static final intPacket sent to a load balancer, which requires a proxy-only subnet and the subnet is not found.static final intPacket could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.static final intPacket from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix advertised via BGP by the Cloud Router.static final intPacket is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.static final intEndpoint with only an internal IP address tries to access external hosts, but there is no matching Cloud NAT gateway in the subnet.static final intPacket from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.static final intPacket from the unknown peered network is dropped due to no known route from the source network to the destination IP address.static final intPacket with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.static final intNo NAT subnets are defined for the PSC service attachment.static final intPacket is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.static final intPacket is sent from the Internet to the private IPv4 address.static final intPacket is sent from the Internet to the private IPv6 address.static final intDropped due to no matching routes.static final intPacket from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix included to the local traffic selector of the VPN tunnel.static final intPacket is dropped because there is no valid matching route from the network of the Google-managed service to the destination.static final intEndpoint with only an internal IP address tries to access Google API and services, but Private Google Access is not enabled in the subnet or is not applicable.static final intSource endpoint tries to access Google API and services through the VPN tunnel to another network, but Private Google Access needs to be enabled in the source endpoint network.static final intSending packets processed by the Private NAT Gateways to the Private Service Connect endpoints is not supported.static final intPacket with internal destination address sent to the internet gateway.static final intThe Private Service Connect endpoint is in a project that is not approved to connect to the service.static final intThe packet is sent to the Private Service Connect endpoint over the peering, but [it's not supported](https://cloud.google.com/vpc/docs/configure-private-service-connect-services#on-premises).static final intThe packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule does not have global access enabled.static final intThe packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule has multiple ports specified.static final intPacket is sent to the PSC port mapping service, but its destination port does not match any port mapping rules.static final intSending packets directly to the PSC port mapping service without going through the PSC connection is not supported.static final intPSC endpoint is accessed via NCC, but PSC transitivity configuration is not yet propagated.static final intPacket sent from a Cloud SQL instance with only a public IP address to a private IP address.static final intPacket sent from a public GKE cluster control plane to a private IP address.static final intRedis Cluster does not have an external IP address.static final intPacket sent from or to a Redis Cluster that is not in running state.static final intPacket is dropped due to an unsupported port being used to connect to a Redis Cluster.static final intPacket is dropped due to an unsupported protocol being used to connect to a Redis Cluster.static final intPacket is dropped due to connecting from PUPI address to a PSA based Redis Instance.static final intRedis Instance does not have an external IP address.static final intPacket is dropped due to no route to the destination network.static final intPacket sent from or to a Redis Instance that is not in running state.static final intPacket is dropped due to an unsupported port being used to connect to a Redis Instance.static final intPacket is dropped due to an unsupported protocol being used to connect to a Redis Instance.static final intDropped due to invalid route.static final intRoute's next hop forwarding rule doesn't match next hop IP address.static final intRoute's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).static final intRoute's next hop IP address is not a primary IP address of the next hop instance.static final intRoute's next hop instance doesn't have a NIC in the route's network.static final intRoute's next hop IP address cannot be resolved to a GCP resource.static final intRoute's next hop resource is not found.static final intRoute's next hop VPN tunnel is down (does not have valid IKE SAs).static final intPacket is sent to a wrong (unintended) network.static final intPacket is stuck in a routing loop.static final intPacket could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.static final intThe type of traffic is blocked and the user cannot configure a firewall rule to enable it.static final intDestination external address cannot be resolved to a known target.static final intDestination internal address cannot be resolved to a known target.static final intPacket with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.static final intPacket could be dropped because the health check traffic to the VPC connector is not allowed.static final intPacket could be dropped because the VPC connector is not in a running state.static final intPacket could be dropped because no VPC connector is set.static final intPacket could be dropped because the traffic from the serverless service to the VPC connector is not allowed.static final intThe packet does not match a policy-based VPN tunnel local selector.static final intThe packet does not match a policy-based VPN tunnel remote selector. -
Method Summary
Modifier and TypeMethodDescriptionstatic DropInfo.CauseforNumber(int value) static com.google.protobuf.Descriptors.EnumDescriptorfinal com.google.protobuf.Descriptors.EnumDescriptorfinal intfinal com.google.protobuf.Descriptors.EnumValueDescriptorstatic com.google.protobuf.Internal.EnumLiteMap<DropInfo.Cause>static DropInfo.CausevalueOf(int value) Deprecated.static DropInfo.CausevalueOf(com.google.protobuf.Descriptors.EnumValueDescriptor desc) Returns the enum constant of this type with the specified name.static DropInfo.CauseReturns the enum constant of this type with the specified name.static DropInfo.Cause[]values()Returns an array containing the constants of this enum type, in the order they are declared.
-
Enum Constant Details
-
CAUSE_UNSPECIFIED
Cause is unspecified.
CAUSE_UNSPECIFIED = 0; -
UNKNOWN_EXTERNAL_ADDRESS
Destination external address cannot be resolved to a known target. If the address is used in a Google Cloud project, provide the project ID as test input.
UNKNOWN_EXTERNAL_ADDRESS = 1; -
FOREIGN_IP_DISALLOWED
A Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.
FOREIGN_IP_DISALLOWED = 2; -
FIREWALL_RULE
Dropped due to a firewall rule, unless allowed due to connection tracking.
FIREWALL_RULE = 3; -
NO_ROUTE
Dropped due to no matching routes.
NO_ROUTE = 4; -
ROUTE_BLACKHOLE
Dropped due to invalid route. Route's next hop is a blackhole.
ROUTE_BLACKHOLE = 5; -
ROUTE_WRONG_NETWORK
Packet is sent to a wrong (unintended) network. Example: you trace a packet from VM1:Network1 to VM2:Network2, however, the route configured in Network1 sends the packet destined for VM2's IP address to Network3.
ROUTE_WRONG_NETWORK = 6; -
ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED
Route's next hop IP address cannot be resolved to a GCP resource.
ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED = 42; -
ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND
Route's next hop resource is not found.
ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND = 43; -
ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK
Route's next hop instance doesn't have a NIC in the route's network.
ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK = 49; -
ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP
Route's next hop IP address is not a primary IP address of the next hop instance.
ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP = 50; -
ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH
Route's next hop forwarding rule doesn't match next hop IP address.
ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH = 51; -
ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED
Route's next hop VPN tunnel is down (does not have valid IKE SAs).
ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED = 52; -
ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID
Route's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).
ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID = 53; -
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS
Packet is sent from the Internet to the private IPv6 address.
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS = 44; -
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS
Packet is sent from the Internet to the private IPv4 address.
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS = 109; -
NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS
Packet is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.
NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS = 98; -
VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH
The packet does not match a policy-based VPN tunnel local selector.
VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH = 45; -
VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH
The packet does not match a policy-based VPN tunnel remote selector.
VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH = 46; -
PRIVATE_TRAFFIC_TO_INTERNET
Packet with internal destination address sent to the internet gateway.
PRIVATE_TRAFFIC_TO_INTERNET = 7; -
PRIVATE_GOOGLE_ACCESS_DISALLOWED
Endpoint with only an internal IP address tries to access Google API and services, but Private Google Access is not enabled in the subnet or is not applicable.
PRIVATE_GOOGLE_ACCESS_DISALLOWED = 8; -
PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED
Source endpoint tries to access Google API and services through the VPN tunnel to another network, but Private Google Access needs to be enabled in the source endpoint network.
PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED = 47; -
NO_EXTERNAL_ADDRESS
Endpoint with only an internal IP address tries to access external hosts, but there is no matching Cloud NAT gateway in the subnet.
NO_EXTERNAL_ADDRESS = 9; -
UNKNOWN_INTERNAL_ADDRESS
Destination internal address cannot be resolved to a known target. If this is a shared VPC scenario, verify if the service project ID is provided as test input. Otherwise, verify if the IP address is being used in the project.
UNKNOWN_INTERNAL_ADDRESS = 10; -
FORWARDING_RULE_MISMATCH
Forwarding rule's protocol and ports do not match the packet header.
FORWARDING_RULE_MISMATCH = 11; -
FORWARDING_RULE_NO_INSTANCES
Forwarding rule does not have backends configured.
FORWARDING_RULE_NO_INSTANCES = 12; -
FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK
Firewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer. For more details, see [Health check firewall rules](https://cloud.google.com/load-balancing/docs/health-checks#firewall_rules).
FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK = 13; -
INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS
Matching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported. Behavior is undefined. https://cloud.google.com/run/docs/configuring/vpc-direct-vpc#limitations
INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS = 85; -
INSTANCE_NOT_RUNNING
Packet is sent from or to a Compute Engine instance that is not in a running state.
INSTANCE_NOT_RUNNING = 14; -
GKE_CLUSTER_NOT_RUNNING
Packet sent from or to a GKE cluster that is not in running state.
GKE_CLUSTER_NOT_RUNNING = 27; -
GKE_POD_NOT_RUNNING
Packet sent from or to a GKE Pod that is not in running state.
GKE_POD_NOT_RUNNING = 103; -
CLOUD_SQL_INSTANCE_NOT_RUNNING
Packet sent from or to a Cloud SQL instance that is not in running state.
CLOUD_SQL_INSTANCE_NOT_RUNNING = 28; -
REDIS_INSTANCE_NOT_RUNNING
Packet sent from or to a Redis Instance that is not in running state.
REDIS_INSTANCE_NOT_RUNNING = 68; -
REDIS_CLUSTER_NOT_RUNNING
Packet sent from or to a Redis Cluster that is not in running state.
REDIS_CLUSTER_NOT_RUNNING = 69; -
TRAFFIC_TYPE_BLOCKED
The type of traffic is blocked and the user cannot configure a firewall rule to enable it. See [Always blocked traffic](https://cloud.google.com/vpc/docs/firewalls#blockedtraffic) for more details.
TRAFFIC_TYPE_BLOCKED = 15; -
GKE_MASTER_UNAUTHORIZED_ACCESS
Access to Google Kubernetes Engine cluster master's endpoint is not authorized. See [Access to the cluster endpoints](https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters#access_to_the_cluster_endpoints) for more details.
GKE_MASTER_UNAUTHORIZED_ACCESS = 16; -
CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS
Access to the Cloud SQL instance endpoint is not authorized. See [Authorizing with authorized networks](https://cloud.google.com/sql/docs/mysql/authorize-networks) for more details.
CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS = 17; -
DROPPED_INSIDE_GKE_SERVICE
Packet was dropped inside Google Kubernetes Engine Service.
DROPPED_INSIDE_GKE_SERVICE = 18; -
DROPPED_INSIDE_CLOUD_SQL_SERVICE
Packet was dropped inside Cloud SQL Service.
DROPPED_INSIDE_CLOUD_SQL_SERVICE = 19; -
GOOGLE_MANAGED_SERVICE_NO_PEERING
Packet was dropped because there is no peering between the originating network and the Google Managed Services Network.
GOOGLE_MANAGED_SERVICE_NO_PEERING = 20; -
GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT
Packet was dropped because the Google-managed service uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.
GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT = 38; -
GKE_PSC_ENDPOINT_MISSING
Packet was dropped because the GKE cluster uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.
GKE_PSC_ENDPOINT_MISSING = 36; -
CLOUD_SQL_INSTANCE_NO_IP_ADDRESS
Packet was dropped because the Cloud SQL instance has neither a private nor a public IP address.
CLOUD_SQL_INSTANCE_NO_IP_ADDRESS = 21; -
GKE_CONTROL_PLANE_REGION_MISMATCH
Packet was dropped because a GKE cluster private endpoint is unreachable from a region different from the cluster's region.
GKE_CONTROL_PLANE_REGION_MISMATCH = 30; -
PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION
Packet sent from a public GKE cluster control plane to a private IP address.
PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION = 31; -
GKE_CONTROL_PLANE_NO_ROUTE
Packet was dropped because there is no route from a GKE cluster control plane to a destination network.
GKE_CONTROL_PLANE_NO_ROUTE = 32; -
CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC
Packet sent from a Cloud SQL instance to an external IP address is not allowed. The Cloud SQL instance is not configured to send packets to external IP addresses.
CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC = 33; -
PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION
Packet sent from a Cloud SQL instance with only a public IP address to a private IP address.
PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION = 34; -
CLOUD_SQL_INSTANCE_NO_ROUTE
Packet was dropped because there is no route from a Cloud SQL instance to a destination network.
CLOUD_SQL_INSTANCE_NO_ROUTE = 35; -
CLOUD_SQL_CONNECTOR_REQUIRED
Packet was dropped because the Cloud SQL instance requires all connections to use Cloud SQL connectors and to target the Cloud SQL proxy port (3307).
CLOUD_SQL_CONNECTOR_REQUIRED = 63; -
CLOUD_FUNCTION_NOT_ACTIVE
Packet could be dropped because the Cloud Function is not in an active status.
CLOUD_FUNCTION_NOT_ACTIVE = 22; -
VPC_CONNECTOR_NOT_SET
Packet could be dropped because no VPC connector is set.
VPC_CONNECTOR_NOT_SET = 23; -
VPC_CONNECTOR_NOT_RUNNING
Packet could be dropped because the VPC connector is not in a running state.
VPC_CONNECTOR_NOT_RUNNING = 24; -
VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED
Packet could be dropped because the traffic from the serverless service to the VPC connector is not allowed.
VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED = 60; -
VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED
Packet could be dropped because the health check traffic to the VPC connector is not allowed.
VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED = 61; -
FORWARDING_RULE_REGION_MISMATCH
Packet could be dropped because it was sent from a different region to a regional forwarding without global access.
FORWARDING_RULE_REGION_MISMATCH = 25; -
PSC_CONNECTION_NOT_ACCEPTED
The Private Service Connect endpoint is in a project that is not approved to connect to the service.
PSC_CONNECTION_NOT_ACCEPTED = 26; -
PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK
The packet is sent to the Private Service Connect endpoint over the peering, but [it's not supported](https://cloud.google.com/vpc/docs/configure-private-service-connect-services#on-premises).
PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK = 41; -
PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS
The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule does not have global access enabled.
PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS = 48; -
PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS
The packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule has multiple ports specified.
PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS = 54; -
CLOUD_SQL_PSC_NEG_UNSUPPORTED
The packet is sent to the Private Service Connect backend (network endpoint group) targeting a Cloud SQL service attachment, but this configuration is not supported.
CLOUD_SQL_PSC_NEG_UNSUPPORTED = 58; -
NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT
No NAT subnets are defined for the PSC service attachment.
NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT = 57; -
PSC_TRANSITIVITY_NOT_PROPAGATED
PSC endpoint is accessed via NCC, but PSC transitivity configuration is not yet propagated.
PSC_TRANSITIVITY_NOT_PROPAGATED = 64; -
HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED
The packet sent from the hybrid NEG proxy matches a non-dynamic route, but such a configuration is not supported.
HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED = 55; -
HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED
The packet sent from the hybrid NEG proxy matches a dynamic route with a next hop in a different region, but such a configuration is not supported.
HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED = 56; -
CLOUD_RUN_REVISION_NOT_READY
Packet sent from a Cloud Run revision that is not ready.
CLOUD_RUN_REVISION_NOT_READY = 29; -
DROPPED_INSIDE_PSC_SERVICE_PRODUCER
Packet was dropped inside Private Service Connect service producer.
DROPPED_INSIDE_PSC_SERVICE_PRODUCER = 37; -
LOAD_BALANCER_HAS_NO_PROXY_SUBNET
Packet sent to a load balancer, which requires a proxy-only subnet and the subnet is not found.
LOAD_BALANCER_HAS_NO_PROXY_SUBNET = 39; -
CLOUD_NAT_NO_ADDRESSES
Packet sent to Cloud Nat without active NAT IPs.
CLOUD_NAT_NO_ADDRESSES = 40; -
ROUTING_LOOP
Packet is stuck in a routing loop.
ROUTING_LOOP = 59; -
DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE
Packet is dropped inside a Google-managed service due to being delivered in return trace to an endpoint that doesn't match the endpoint the packet was sent from in forward trace. Used only for return traces.
DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE = 62; -
LOAD_BALANCER_BACKEND_INVALID_NETWORK
Packet is dropped due to a load balancer backend instance not having a network interface in the network expected by the load balancer.
LOAD_BALANCER_BACKEND_INVALID_NETWORK = 65; -
BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED
Packet is dropped due to a backend service named port not being defined on the instance group level.
BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED = 66; -
DESTINATION_IS_PRIVATE_NAT_IP_RANGE
Packet is dropped due to a destination IP range being part of a Private NAT IP range.
DESTINATION_IS_PRIVATE_NAT_IP_RANGE = 67; -
DROPPED_INSIDE_REDIS_INSTANCE_SERVICE
Generic drop cause for a packet being dropped inside a Redis Instance service project.
DROPPED_INSIDE_REDIS_INSTANCE_SERVICE = 70; -
REDIS_INSTANCE_UNSUPPORTED_PORT
Packet is dropped due to an unsupported port being used to connect to a Redis Instance. Port 6379 should be used to connect to a Redis Instance.
REDIS_INSTANCE_UNSUPPORTED_PORT = 71; -
REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS
Packet is dropped due to connecting from PUPI address to a PSA based Redis Instance.
REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS = 72; -
REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK
Packet is dropped due to no route to the destination network.
REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK = 73; -
REDIS_INSTANCE_NO_EXTERNAL_IP
Redis Instance does not have an external IP address.
REDIS_INSTANCE_NO_EXTERNAL_IP = 74; -
REDIS_INSTANCE_UNSUPPORTED_PROTOCOL
Packet is dropped due to an unsupported protocol being used to connect to a Redis Instance. Only TCP connections are accepted by a Redis Instance.
REDIS_INSTANCE_UNSUPPORTED_PROTOCOL = 78; -
DROPPED_INSIDE_REDIS_CLUSTER_SERVICE
Generic drop cause for a packet being dropped inside a Redis Cluster service project.
DROPPED_INSIDE_REDIS_CLUSTER_SERVICE = 75; -
REDIS_CLUSTER_UNSUPPORTED_PORT
Packet is dropped due to an unsupported port being used to connect to a Redis Cluster. Ports 6379 and 11000 to 13047 should be used to connect to a Redis Cluster.
REDIS_CLUSTER_UNSUPPORTED_PORT = 76; -
REDIS_CLUSTER_NO_EXTERNAL_IP
Redis Cluster does not have an external IP address.
REDIS_CLUSTER_NO_EXTERNAL_IP = 77; -
REDIS_CLUSTER_UNSUPPORTED_PROTOCOL
Packet is dropped due to an unsupported protocol being used to connect to a Redis Cluster. Only TCP connections are accepted by a Redis Cluster.
REDIS_CLUSTER_UNSUPPORTED_PROTOCOL = 79; -
NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION
Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix advertised via BGP by the Cloud Router.
NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION = 80; -
NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION
Packet from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix included to the local traffic selector of the VPN tunnel.
NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION = 81; -
NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION
Packet from the unknown peered network is dropped due to no known route from the source network to the destination IP address.
NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION = 82; -
PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED
Sending packets processed by the Private NAT Gateways to the Private Service Connect endpoints is not supported.
PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED = 83; -
PSC_PORT_MAPPING_PORT_MISMATCH
Packet is sent to the PSC port mapping service, but its destination port does not match any port mapping rules.
PSC_PORT_MAPPING_PORT_MISMATCH = 86; -
PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED
Sending packets directly to the PSC port mapping service without going through the PSC connection is not supported.
PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED = 87; -
UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION
Packet with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.
UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION = 88; -
TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED
Packet could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.
TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED = 89; -
NO_MATCHING_NAT64_GATEWAY
Packet with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.
NO_MATCHING_NAT64_GATEWAY = 90; -
NO_CONFIGURED_PRIVATE_NAT64_RULE
Packet is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.
NO_CONFIGURED_PRIVATE_NAT64_RULE = 107; -
LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH
Packet is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.
LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH = 96; -
NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION
Packet from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.
NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION = 97; -
CLOUD_NAT_PROTOCOL_UNSUPPORTED
Packet is dropped by Cloud NAT due to using an unsupported protocol.
CLOUD_NAT_PROTOCOL_UNSUPPORTED = 99; -
L2_INTERCONNECT_UNSUPPORTED_PROTOCOL
Packet is dropped due to using an unsupported protocol (any other than UDP) for L2 Interconnect.
L2_INTERCONNECT_UNSUPPORTED_PROTOCOL = 100; -
L2_INTERCONNECT_UNSUPPORTED_PORT
Packet is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.
L2_INTERCONNECT_UNSUPPORTED_PORT = 101; -
L2_INTERCONNECT_DESTINATION_IP_MISMATCH
Packet is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.
L2_INTERCONNECT_DESTINATION_IP_MISMATCH = 102; -
NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED
Packet could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.
NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED = 104; -
HYBRID_SUBNET_REGION_MISMATCH
Packet is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.
HYBRID_SUBNET_REGION_MISMATCH = 105; -
HYBRID_SUBNET_NO_ROUTE
Packet is dropped because no matching route was found in the hybrid subnet.
HYBRID_SUBNET_NO_ROUTE = 106; -
GKE_NETWORK_POLICY
Packet is dropped by GKE Network Policy.
GKE_NETWORK_POLICY = 108; -
NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION
Packet is dropped because there is no valid matching route from the network of the Google-managed service to the destination.
NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION = 110; -
UNRECOGNIZED
-
-
Field Details
-
CAUSE_UNSPECIFIED_VALUE
public static final int CAUSE_UNSPECIFIED_VALUECause is unspecified.
CAUSE_UNSPECIFIED = 0;- See Also:
-
UNKNOWN_EXTERNAL_ADDRESS_VALUE
public static final int UNKNOWN_EXTERNAL_ADDRESS_VALUEDestination external address cannot be resolved to a known target. If the address is used in a Google Cloud project, provide the project ID as test input.
UNKNOWN_EXTERNAL_ADDRESS = 1;- See Also:
-
FOREIGN_IP_DISALLOWED_VALUE
public static final int FOREIGN_IP_DISALLOWED_VALUEA Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.
FOREIGN_IP_DISALLOWED = 2;- See Also:
-
FIREWALL_RULE_VALUE
public static final int FIREWALL_RULE_VALUEDropped due to a firewall rule, unless allowed due to connection tracking.
FIREWALL_RULE = 3;- See Also:
-
NO_ROUTE_VALUE
public static final int NO_ROUTE_VALUEDropped due to no matching routes.
NO_ROUTE = 4;- See Also:
-
ROUTE_BLACKHOLE_VALUE
public static final int ROUTE_BLACKHOLE_VALUEDropped due to invalid route. Route's next hop is a blackhole.
ROUTE_BLACKHOLE = 5;- See Also:
-
ROUTE_WRONG_NETWORK_VALUE
public static final int ROUTE_WRONG_NETWORK_VALUEPacket is sent to a wrong (unintended) network. Example: you trace a packet from VM1:Network1 to VM2:Network2, however, the route configured in Network1 sends the packet destined for VM2's IP address to Network3.
ROUTE_WRONG_NETWORK = 6;- See Also:
-
ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED_VALUE
public static final int ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED_VALUERoute's next hop IP address cannot be resolved to a GCP resource.
ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED = 42;- See Also:
-
ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND_VALUE
public static final int ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND_VALUERoute's next hop resource is not found.
ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND = 43;- See Also:
-
ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK_VALUE
public static final int ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK_VALUERoute's next hop instance doesn't have a NIC in the route's network.
ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK = 49;- See Also:
-
ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP_VALUE
public static final int ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP_VALUERoute's next hop IP address is not a primary IP address of the next hop instance.
ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP = 50;- See Also:
-
ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH_VALUE
public static final int ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH_VALUERoute's next hop forwarding rule doesn't match next hop IP address.
ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH = 51;- See Also:
-
ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED_VALUE
public static final int ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED_VALUERoute's next hop VPN tunnel is down (does not have valid IKE SAs).
ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED = 52;- See Also:
-
ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID_VALUE
public static final int ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID_VALUERoute's next hop forwarding rule type is invalid (it's not a forwarding rule of the internal passthrough load balancer).
ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID = 53;- See Also:
-
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS_VALUE
public static final int NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS_VALUEPacket is sent from the Internet to the private IPv6 address.
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS = 44;- See Also:
-
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS_VALUE
public static final int NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS_VALUEPacket is sent from the Internet to the private IPv4 address.
NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS = 109;- See Also:
-
NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS_VALUE
public static final int NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS_VALUEPacket is sent from the external IPv6 source address of an instance to the private IPv6 address of an instance.
NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS = 98;- See Also:
-
VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH_VALUE
public static final int VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH_VALUEThe packet does not match a policy-based VPN tunnel local selector.
VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH = 45;- See Also:
-
VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH_VALUE
public static final int VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH_VALUEThe packet does not match a policy-based VPN tunnel remote selector.
VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH = 46;- See Also:
-
PRIVATE_TRAFFIC_TO_INTERNET_VALUE
public static final int PRIVATE_TRAFFIC_TO_INTERNET_VALUEPacket with internal destination address sent to the internet gateway.
PRIVATE_TRAFFIC_TO_INTERNET = 7;- See Also:
-
PRIVATE_GOOGLE_ACCESS_DISALLOWED_VALUE
public static final int PRIVATE_GOOGLE_ACCESS_DISALLOWED_VALUEEndpoint with only an internal IP address tries to access Google API and services, but Private Google Access is not enabled in the subnet or is not applicable.
PRIVATE_GOOGLE_ACCESS_DISALLOWED = 8;- See Also:
-
PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED_VALUE
public static final int PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED_VALUESource endpoint tries to access Google API and services through the VPN tunnel to another network, but Private Google Access needs to be enabled in the source endpoint network.
PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED = 47;- See Also:
-
NO_EXTERNAL_ADDRESS_VALUE
public static final int NO_EXTERNAL_ADDRESS_VALUEEndpoint with only an internal IP address tries to access external hosts, but there is no matching Cloud NAT gateway in the subnet.
NO_EXTERNAL_ADDRESS = 9;- See Also:
-
UNKNOWN_INTERNAL_ADDRESS_VALUE
public static final int UNKNOWN_INTERNAL_ADDRESS_VALUEDestination internal address cannot be resolved to a known target. If this is a shared VPC scenario, verify if the service project ID is provided as test input. Otherwise, verify if the IP address is being used in the project.
UNKNOWN_INTERNAL_ADDRESS = 10;- See Also:
-
FORWARDING_RULE_MISMATCH_VALUE
public static final int FORWARDING_RULE_MISMATCH_VALUEForwarding rule's protocol and ports do not match the packet header.
FORWARDING_RULE_MISMATCH = 11;- See Also:
-
FORWARDING_RULE_NO_INSTANCES_VALUE
public static final int FORWARDING_RULE_NO_INSTANCES_VALUEForwarding rule does not have backends configured.
FORWARDING_RULE_NO_INSTANCES = 12;- See Also:
-
FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK_VALUE
public static final int FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK_VALUEFirewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer. For more details, see [Health check firewall rules](https://cloud.google.com/load-balancing/docs/health-checks#firewall_rules).
FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK = 13;- See Also:
-
INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS_VALUE
public static final int INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS_VALUEMatching ingress firewall rules by network tags for packets sent via serverless VPC direct egress is unsupported. Behavior is undefined. https://cloud.google.com/run/docs/configuring/vpc-direct-vpc#limitations
INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS = 85;- See Also:
-
INSTANCE_NOT_RUNNING_VALUE
public static final int INSTANCE_NOT_RUNNING_VALUEPacket is sent from or to a Compute Engine instance that is not in a running state.
INSTANCE_NOT_RUNNING = 14;- See Also:
-
GKE_CLUSTER_NOT_RUNNING_VALUE
public static final int GKE_CLUSTER_NOT_RUNNING_VALUEPacket sent from or to a GKE cluster that is not in running state.
GKE_CLUSTER_NOT_RUNNING = 27;- See Also:
-
GKE_POD_NOT_RUNNING_VALUE
public static final int GKE_POD_NOT_RUNNING_VALUEPacket sent from or to a GKE Pod that is not in running state.
GKE_POD_NOT_RUNNING = 103;- See Also:
-
CLOUD_SQL_INSTANCE_NOT_RUNNING_VALUE
public static final int CLOUD_SQL_INSTANCE_NOT_RUNNING_VALUEPacket sent from or to a Cloud SQL instance that is not in running state.
CLOUD_SQL_INSTANCE_NOT_RUNNING = 28;- See Also:
-
REDIS_INSTANCE_NOT_RUNNING_VALUE
public static final int REDIS_INSTANCE_NOT_RUNNING_VALUEPacket sent from or to a Redis Instance that is not in running state.
REDIS_INSTANCE_NOT_RUNNING = 68;- See Also:
-
REDIS_CLUSTER_NOT_RUNNING_VALUE
public static final int REDIS_CLUSTER_NOT_RUNNING_VALUEPacket sent from or to a Redis Cluster that is not in running state.
REDIS_CLUSTER_NOT_RUNNING = 69;- See Also:
-
TRAFFIC_TYPE_BLOCKED_VALUE
public static final int TRAFFIC_TYPE_BLOCKED_VALUEThe type of traffic is blocked and the user cannot configure a firewall rule to enable it. See [Always blocked traffic](https://cloud.google.com/vpc/docs/firewalls#blockedtraffic) for more details.
TRAFFIC_TYPE_BLOCKED = 15;- See Also:
-
GKE_MASTER_UNAUTHORIZED_ACCESS_VALUE
public static final int GKE_MASTER_UNAUTHORIZED_ACCESS_VALUEAccess to Google Kubernetes Engine cluster master's endpoint is not authorized. See [Access to the cluster endpoints](https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters#access_to_the_cluster_endpoints) for more details.
GKE_MASTER_UNAUTHORIZED_ACCESS = 16;- See Also:
-
CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS_VALUE
public static final int CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS_VALUEAccess to the Cloud SQL instance endpoint is not authorized. See [Authorizing with authorized networks](https://cloud.google.com/sql/docs/mysql/authorize-networks) for more details.
CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS = 17;- See Also:
-
DROPPED_INSIDE_GKE_SERVICE_VALUE
public static final int DROPPED_INSIDE_GKE_SERVICE_VALUEPacket was dropped inside Google Kubernetes Engine Service.
DROPPED_INSIDE_GKE_SERVICE = 18;- See Also:
-
DROPPED_INSIDE_CLOUD_SQL_SERVICE_VALUE
public static final int DROPPED_INSIDE_CLOUD_SQL_SERVICE_VALUEPacket was dropped inside Cloud SQL Service.
DROPPED_INSIDE_CLOUD_SQL_SERVICE = 19;- See Also:
-
GOOGLE_MANAGED_SERVICE_NO_PEERING_VALUE
public static final int GOOGLE_MANAGED_SERVICE_NO_PEERING_VALUEPacket was dropped because there is no peering between the originating network and the Google Managed Services Network.
GOOGLE_MANAGED_SERVICE_NO_PEERING = 20;- See Also:
-
GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT_VALUE
public static final int GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT_VALUEPacket was dropped because the Google-managed service uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.
GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT = 38;- See Also:
-
GKE_PSC_ENDPOINT_MISSING_VALUE
public static final int GKE_PSC_ENDPOINT_MISSING_VALUEPacket was dropped because the GKE cluster uses Private Service Connect (PSC), but the PSC endpoint is not found in the project.
GKE_PSC_ENDPOINT_MISSING = 36;- See Also:
-
CLOUD_SQL_INSTANCE_NO_IP_ADDRESS_VALUE
public static final int CLOUD_SQL_INSTANCE_NO_IP_ADDRESS_VALUEPacket was dropped because the Cloud SQL instance has neither a private nor a public IP address.
CLOUD_SQL_INSTANCE_NO_IP_ADDRESS = 21;- See Also:
-
GKE_CONTROL_PLANE_REGION_MISMATCH_VALUE
public static final int GKE_CONTROL_PLANE_REGION_MISMATCH_VALUEPacket was dropped because a GKE cluster private endpoint is unreachable from a region different from the cluster's region.
GKE_CONTROL_PLANE_REGION_MISMATCH = 30;- See Also:
-
PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION_VALUE
public static final int PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION_VALUEPacket sent from a public GKE cluster control plane to a private IP address.
PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION = 31;- See Also:
-
GKE_CONTROL_PLANE_NO_ROUTE_VALUE
public static final int GKE_CONTROL_PLANE_NO_ROUTE_VALUEPacket was dropped because there is no route from a GKE cluster control plane to a destination network.
GKE_CONTROL_PLANE_NO_ROUTE = 32;- See Also:
-
CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC_VALUE
public static final int CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC_VALUEPacket sent from a Cloud SQL instance to an external IP address is not allowed. The Cloud SQL instance is not configured to send packets to external IP addresses.
CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC = 33;- See Also:
-
PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION_VALUE
public static final int PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION_VALUEPacket sent from a Cloud SQL instance with only a public IP address to a private IP address.
PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION = 34;- See Also:
-
CLOUD_SQL_INSTANCE_NO_ROUTE_VALUE
public static final int CLOUD_SQL_INSTANCE_NO_ROUTE_VALUEPacket was dropped because there is no route from a Cloud SQL instance to a destination network.
CLOUD_SQL_INSTANCE_NO_ROUTE = 35;- See Also:
-
CLOUD_SQL_CONNECTOR_REQUIRED_VALUE
public static final int CLOUD_SQL_CONNECTOR_REQUIRED_VALUEPacket was dropped because the Cloud SQL instance requires all connections to use Cloud SQL connectors and to target the Cloud SQL proxy port (3307).
CLOUD_SQL_CONNECTOR_REQUIRED = 63;- See Also:
-
CLOUD_FUNCTION_NOT_ACTIVE_VALUE
public static final int CLOUD_FUNCTION_NOT_ACTIVE_VALUEPacket could be dropped because the Cloud Function is not in an active status.
CLOUD_FUNCTION_NOT_ACTIVE = 22;- See Also:
-
VPC_CONNECTOR_NOT_SET_VALUE
public static final int VPC_CONNECTOR_NOT_SET_VALUEPacket could be dropped because no VPC connector is set.
VPC_CONNECTOR_NOT_SET = 23;- See Also:
-
VPC_CONNECTOR_NOT_RUNNING_VALUE
public static final int VPC_CONNECTOR_NOT_RUNNING_VALUEPacket could be dropped because the VPC connector is not in a running state.
VPC_CONNECTOR_NOT_RUNNING = 24;- See Also:
-
VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED_VALUE
public static final int VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED_VALUEPacket could be dropped because the traffic from the serverless service to the VPC connector is not allowed.
VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED = 60;- See Also:
-
VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED_VALUE
public static final int VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED_VALUEPacket could be dropped because the health check traffic to the VPC connector is not allowed.
VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED = 61;- See Also:
-
FORWARDING_RULE_REGION_MISMATCH_VALUE
public static final int FORWARDING_RULE_REGION_MISMATCH_VALUEPacket could be dropped because it was sent from a different region to a regional forwarding without global access.
FORWARDING_RULE_REGION_MISMATCH = 25;- See Also:
-
PSC_CONNECTION_NOT_ACCEPTED_VALUE
public static final int PSC_CONNECTION_NOT_ACCEPTED_VALUEThe Private Service Connect endpoint is in a project that is not approved to connect to the service.
PSC_CONNECTION_NOT_ACCEPTED = 26;- See Also:
-
PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK_VALUE
public static final int PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK_VALUEThe packet is sent to the Private Service Connect endpoint over the peering, but [it's not supported](https://cloud.google.com/vpc/docs/configure-private-service-connect-services#on-premises).
PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK = 41;- See Also:
-
PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS_VALUE
public static final int PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS_VALUEThe packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule does not have global access enabled.
PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS = 48;- See Also:
-
PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS_VALUE
public static final int PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS_VALUEThe packet is sent to the Private Service Connect backend (network endpoint group), but the producer PSC forwarding rule has multiple ports specified.
PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS = 54;- See Also:
-
CLOUD_SQL_PSC_NEG_UNSUPPORTED_VALUE
public static final int CLOUD_SQL_PSC_NEG_UNSUPPORTED_VALUEThe packet is sent to the Private Service Connect backend (network endpoint group) targeting a Cloud SQL service attachment, but this configuration is not supported.
CLOUD_SQL_PSC_NEG_UNSUPPORTED = 58;- See Also:
-
NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT_VALUE
public static final int NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT_VALUENo NAT subnets are defined for the PSC service attachment.
NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT = 57;- See Also:
-
PSC_TRANSITIVITY_NOT_PROPAGATED_VALUE
public static final int PSC_TRANSITIVITY_NOT_PROPAGATED_VALUEPSC endpoint is accessed via NCC, but PSC transitivity configuration is not yet propagated.
PSC_TRANSITIVITY_NOT_PROPAGATED = 64;- See Also:
-
HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED_VALUE
public static final int HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED_VALUEThe packet sent from the hybrid NEG proxy matches a non-dynamic route, but such a configuration is not supported.
HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED = 55;- See Also:
-
HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED_VALUE
public static final int HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED_VALUEThe packet sent from the hybrid NEG proxy matches a dynamic route with a next hop in a different region, but such a configuration is not supported.
HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED = 56;- See Also:
-
CLOUD_RUN_REVISION_NOT_READY_VALUE
public static final int CLOUD_RUN_REVISION_NOT_READY_VALUEPacket sent from a Cloud Run revision that is not ready.
CLOUD_RUN_REVISION_NOT_READY = 29;- See Also:
-
DROPPED_INSIDE_PSC_SERVICE_PRODUCER_VALUE
public static final int DROPPED_INSIDE_PSC_SERVICE_PRODUCER_VALUEPacket was dropped inside Private Service Connect service producer.
DROPPED_INSIDE_PSC_SERVICE_PRODUCER = 37;- See Also:
-
LOAD_BALANCER_HAS_NO_PROXY_SUBNET_VALUE
public static final int LOAD_BALANCER_HAS_NO_PROXY_SUBNET_VALUEPacket sent to a load balancer, which requires a proxy-only subnet and the subnet is not found.
LOAD_BALANCER_HAS_NO_PROXY_SUBNET = 39;- See Also:
-
CLOUD_NAT_NO_ADDRESSES_VALUE
public static final int CLOUD_NAT_NO_ADDRESSES_VALUEPacket sent to Cloud Nat without active NAT IPs.
CLOUD_NAT_NO_ADDRESSES = 40;- See Also:
-
ROUTING_LOOP_VALUE
public static final int ROUTING_LOOP_VALUEPacket is stuck in a routing loop.
ROUTING_LOOP = 59;- See Also:
-
DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE_VALUE
public static final int DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE_VALUEPacket is dropped inside a Google-managed service due to being delivered in return trace to an endpoint that doesn't match the endpoint the packet was sent from in forward trace. Used only for return traces.
DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE = 62;- See Also:
-
LOAD_BALANCER_BACKEND_INVALID_NETWORK_VALUE
public static final int LOAD_BALANCER_BACKEND_INVALID_NETWORK_VALUEPacket is dropped due to a load balancer backend instance not having a network interface in the network expected by the load balancer.
LOAD_BALANCER_BACKEND_INVALID_NETWORK = 65;- See Also:
-
BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED_VALUE
public static final int BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED_VALUEPacket is dropped due to a backend service named port not being defined on the instance group level.
BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED = 66;- See Also:
-
DESTINATION_IS_PRIVATE_NAT_IP_RANGE_VALUE
public static final int DESTINATION_IS_PRIVATE_NAT_IP_RANGE_VALUEPacket is dropped due to a destination IP range being part of a Private NAT IP range.
DESTINATION_IS_PRIVATE_NAT_IP_RANGE = 67;- See Also:
-
DROPPED_INSIDE_REDIS_INSTANCE_SERVICE_VALUE
public static final int DROPPED_INSIDE_REDIS_INSTANCE_SERVICE_VALUEGeneric drop cause for a packet being dropped inside a Redis Instance service project.
DROPPED_INSIDE_REDIS_INSTANCE_SERVICE = 70;- See Also:
-
REDIS_INSTANCE_UNSUPPORTED_PORT_VALUE
public static final int REDIS_INSTANCE_UNSUPPORTED_PORT_VALUEPacket is dropped due to an unsupported port being used to connect to a Redis Instance. Port 6379 should be used to connect to a Redis Instance.
REDIS_INSTANCE_UNSUPPORTED_PORT = 71;- See Also:
-
REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS_VALUE
public static final int REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS_VALUEPacket is dropped due to connecting from PUPI address to a PSA based Redis Instance.
REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS = 72;- See Also:
-
REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK_VALUE
public static final int REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK_VALUEPacket is dropped due to no route to the destination network.
REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK = 73;- See Also:
-
REDIS_INSTANCE_NO_EXTERNAL_IP_VALUE
public static final int REDIS_INSTANCE_NO_EXTERNAL_IP_VALUERedis Instance does not have an external IP address.
REDIS_INSTANCE_NO_EXTERNAL_IP = 74;- See Also:
-
REDIS_INSTANCE_UNSUPPORTED_PROTOCOL_VALUE
public static final int REDIS_INSTANCE_UNSUPPORTED_PROTOCOL_VALUEPacket is dropped due to an unsupported protocol being used to connect to a Redis Instance. Only TCP connections are accepted by a Redis Instance.
REDIS_INSTANCE_UNSUPPORTED_PROTOCOL = 78;- See Also:
-
DROPPED_INSIDE_REDIS_CLUSTER_SERVICE_VALUE
public static final int DROPPED_INSIDE_REDIS_CLUSTER_SERVICE_VALUEGeneric drop cause for a packet being dropped inside a Redis Cluster service project.
DROPPED_INSIDE_REDIS_CLUSTER_SERVICE = 75;- See Also:
-
REDIS_CLUSTER_UNSUPPORTED_PORT_VALUE
public static final int REDIS_CLUSTER_UNSUPPORTED_PORT_VALUEPacket is dropped due to an unsupported port being used to connect to a Redis Cluster. Ports 6379 and 11000 to 13047 should be used to connect to a Redis Cluster.
REDIS_CLUSTER_UNSUPPORTED_PORT = 76;- See Also:
-
REDIS_CLUSTER_NO_EXTERNAL_IP_VALUE
public static final int REDIS_CLUSTER_NO_EXTERNAL_IP_VALUERedis Cluster does not have an external IP address.
REDIS_CLUSTER_NO_EXTERNAL_IP = 77;- See Also:
-
REDIS_CLUSTER_UNSUPPORTED_PROTOCOL_VALUE
public static final int REDIS_CLUSTER_UNSUPPORTED_PROTOCOL_VALUEPacket is dropped due to an unsupported protocol being used to connect to a Redis Cluster. Only TCP connections are accepted by a Redis Cluster.
REDIS_CLUSTER_UNSUPPORTED_PROTOCOL = 79;- See Also:
-
NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION_VALUE
public static final int NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION_VALUEPacket from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix advertised via BGP by the Cloud Router.
NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION = 80;- See Also:
-
NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION_VALUE
public static final int NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION_VALUEPacket from the non-GCP (on-prem) or unknown GCP network is dropped due to the destination IP address not belonging to any IP prefix included to the local traffic selector of the VPN tunnel.
NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION = 81;- See Also:
-
NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION_VALUE
public static final int NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION_VALUEPacket from the unknown peered network is dropped due to no known route from the source network to the destination IP address.
NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION = 82;- See Also:
-
PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED_VALUE
public static final int PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED_VALUESending packets processed by the Private NAT Gateways to the Private Service Connect endpoints is not supported.
PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED = 83;- See Also:
-
PSC_PORT_MAPPING_PORT_MISMATCH_VALUE
public static final int PSC_PORT_MAPPING_PORT_MISMATCH_VALUEPacket is sent to the PSC port mapping service, but its destination port does not match any port mapping rules.
PSC_PORT_MAPPING_PORT_MISMATCH = 86;- See Also:
-
PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED_VALUE
public static final int PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED_VALUESending packets directly to the PSC port mapping service without going through the PSC connection is not supported.
PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED = 87;- See Also:
-
UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION_VALUE
public static final int UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION_VALUEPacket with destination IP address within the reserved NAT64 range is dropped due to matching a route of an unsupported type.
UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION = 88;- See Also:
-
TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED_VALUE
public static final int TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED_VALUEPacket could be dropped because hybrid endpoint like a VPN gateway or Interconnect is not allowed to send traffic to the Internet.
TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED = 89;- See Also:
-
NO_MATCHING_NAT64_GATEWAY_VALUE
public static final int NO_MATCHING_NAT64_GATEWAY_VALUEPacket with destination IP address within the reserved NAT64 range is dropped due to no matching NAT gateway in the subnet.
NO_MATCHING_NAT64_GATEWAY = 90;- See Also:
-
NO_CONFIGURED_PRIVATE_NAT64_RULE_VALUE
public static final int NO_CONFIGURED_PRIVATE_NAT64_RULE_VALUEPacket is dropped due to matching a Private NAT64 gateway with no rules for source IPv6 addresses.
NO_CONFIGURED_PRIVATE_NAT64_RULE = 107;- See Also:
-
LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH_VALUE
public static final int LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH_VALUEPacket is dropped due to being sent to a backend of a passthrough load balancer that doesn't use the same IP version as the frontend.
LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH = 96;- See Also:
-
NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION_VALUE
public static final int NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION_VALUEPacket from the unknown NCC network is dropped due to no known route from the source network to the destination IP address.
NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION = 97;- See Also:
-
CLOUD_NAT_PROTOCOL_UNSUPPORTED_VALUE
public static final int CLOUD_NAT_PROTOCOL_UNSUPPORTED_VALUEPacket is dropped by Cloud NAT due to using an unsupported protocol.
CLOUD_NAT_PROTOCOL_UNSUPPORTED = 99;- See Also:
-
L2_INTERCONNECT_UNSUPPORTED_PROTOCOL_VALUE
public static final int L2_INTERCONNECT_UNSUPPORTED_PROTOCOL_VALUEPacket is dropped due to using an unsupported protocol (any other than UDP) for L2 Interconnect.
L2_INTERCONNECT_UNSUPPORTED_PROTOCOL = 100;- See Also:
-
L2_INTERCONNECT_UNSUPPORTED_PORT_VALUE
public static final int L2_INTERCONNECT_UNSUPPORTED_PORT_VALUEPacket is dropped due to using an unsupported port (any other than 6081) for L2 Interconnect.
L2_INTERCONNECT_UNSUPPORTED_PORT = 101;- See Also:
-
L2_INTERCONNECT_DESTINATION_IP_MISMATCH_VALUE
public static final int L2_INTERCONNECT_DESTINATION_IP_MISMATCH_VALUEPacket is dropped due to destination IP not matching the appliance mapping IPs configured on the L2 Interconnect attachment.
L2_INTERCONNECT_DESTINATION_IP_MISMATCH = 102;- See Also:
-
NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED_VALUE
public static final int NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED_VALUEPacket could be dropped because it matches a route associated with an NCC spoke in the hybrid subnet context, but such a configuration is not supported.
NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED = 104;- See Also:
-
HYBRID_SUBNET_REGION_MISMATCH_VALUE
public static final int HYBRID_SUBNET_REGION_MISMATCH_VALUEPacket is dropped because the region of the hybrid subnet is different from the region of the next hop of the route matched within this hybrid subnet.
HYBRID_SUBNET_REGION_MISMATCH = 105;- See Also:
-
HYBRID_SUBNET_NO_ROUTE_VALUE
public static final int HYBRID_SUBNET_NO_ROUTE_VALUEPacket is dropped because no matching route was found in the hybrid subnet.
HYBRID_SUBNET_NO_ROUTE = 106;- See Also:
-
GKE_NETWORK_POLICY_VALUE
public static final int GKE_NETWORK_POLICY_VALUEPacket is dropped by GKE Network Policy.
GKE_NETWORK_POLICY = 108;- See Also:
-
NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION_VALUE
public static final int NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION_VALUEPacket is dropped because there is no valid matching route from the network of the Google-managed service to the destination.
NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION = 110;- See Also:
-
-
Method Details
-
values
Returns an array containing the constants of this enum type, in the order they are declared.- Returns:
- an array containing the constants of this enum type, in the order they are declared
-
valueOf
Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)- Parameters:
name- the name of the enum constant to be returned.- Returns:
- the enum constant with the specified name
- Throws:
IllegalArgumentException- if this enum type has no constant with the specified nameNullPointerException- if the argument is null
-
getNumber
public final int getNumber()- Specified by:
getNumberin interfacecom.google.protobuf.Internal.EnumLite- Specified by:
getNumberin interfacecom.google.protobuf.ProtocolMessageEnum
-
valueOf
Deprecated.Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)- Parameters:
value- the name of the enum constant to be returned.- Returns:
- the enum constant with the specified name
- Throws:
IllegalArgumentException- if this enum type has no constant with the specified nameNullPointerException- if the argument is null
-
forNumber
- Parameters:
value- The numeric wire value of the corresponding enum entry.- Returns:
- The enum associated with the given numeric wire value.
-
internalGetValueMap
-
getValueDescriptor
public final com.google.protobuf.Descriptors.EnumValueDescriptor getValueDescriptor()- Specified by:
getValueDescriptorin interfacecom.google.protobuf.ProtocolMessageEnum
-
getDescriptorForType
public final com.google.protobuf.Descriptors.EnumDescriptor getDescriptorForType()- Specified by:
getDescriptorForTypein interfacecom.google.protobuf.ProtocolMessageEnum
-
getDescriptor
public static com.google.protobuf.Descriptors.EnumDescriptor getDescriptor() -
valueOf
Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)- Parameters:
desc- the name of the enum constant to be returned.- Returns:
- the enum constant with the specified name
- Throws:
IllegalArgumentException- if this enum type has no constant with the specified nameNullPointerException- if the argument is null
-