Module: Google::Cloud::NetworkManagement::V1::DropInfo::Cause

Defined in:: proto_docs/google/cloud/networkmanagement/v1/trace.rb

Overview

Drop cause types:

Constant Summary collapse

CAUSE_UNSPECIFIED = Cause is unspecified.

UNKNOWN_EXTERNAL_ADDRESS = Destination external address cannot be resolved to a known target. If the address is used in a Google Cloud project, provide the project ID as test input.

FOREIGN_IP_DISALLOWED = A Compute Engine instance can only send or receive a packet with a foreign IP address if ip_forward is enabled.

FIREWALL_RULE = Dropped due to a firewall rule, unless allowed due to connection tracking.

NO_ROUTE = Dropped due to no routes.

ROUTE_BLACKHOLE = Dropped due to invalid route. Route's next hop is a blackhole.

ROUTE_WRONG_NETWORK = Packet is sent to a wrong (unintended) network. Example: you trace a packet from VM1:Network1 to VM2:Network2, however, the route configured in Network1 sends the packet destined for VM2's IP addresss to Network3.

PRIVATE_TRAFFIC_TO_INTERNET = Packet with internal destination address sent to the internet gateway.

PRIVATE_GOOGLE_ACCESS_DISALLOWED = Instance with only an internal IP address tries to access Google API and services, but private Google access is not enabled.

NO_EXTERNAL_ADDRESS = Instance with only an internal IP address tries to access external hosts, but Cloud NAT is not enabled in the subnet, unless special configurations on a VM allow this connection. For more details, see Special configurations for VM instances.

UNKNOWN_INTERNAL_ADDRESS = Destination internal address cannot be resolved to a known target. If this is a shared VPC scenario, verify if the service project ID is provided as test input. Otherwise, verify if the IP address is being used in the project.

FORWARDING_RULE_MISMATCH = Forwarding rule's protocol and ports do not match the packet header.

FORWARDING_RULE_NO_INSTANCES = Forwarding rule does not have backends configured.

FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK = Firewalls block the health check probes to the backends and cause the backends to be unavailable for traffic from the load balancer. For more details, see Health check firewall rules.

INSTANCE_NOT_RUNNING = Packet is sent from or to a Compute Engine instance that is not in a running state.

TRAFFIC_TYPE_BLOCKED = The type of traffic is blocked and the user cannot configure a firewall rule to enable it. See Always blocked traffic for more details.

GKE_MASTER_UNAUTHORIZED_ACCESS = Access to Google Kubernetes Engine cluster master's endpoint is not authorized. See Access to the cluster endpoints for more details.

CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS = Access to the Cloud SQL instance endpoint is not authorized. See Authorizing with authorized networks for more details.

DROPPED_INSIDE_GKE_SERVICE = Packet was dropped inside Google Kubernetes Engine Service.

DROPPED_INSIDE_CLOUD_SQL_SERVICE = Packet was dropped inside Cloud SQL Service.

GOOGLE_MANAGED_SERVICE_NO_PEERING = Packet was dropped because there is no peering between the originating network and the Google Managed Services Network.

CLOUD_SQL_INSTANCE_NO_IP_ADDRESS = Packet was dropped because the Cloud SQL instance has neither a private nor a public IP address.