Question

A network engineer runs a Connectivity Test between a Compute Engine VM and an on-premises host reachable over HA VPN. The test result reports 'Reachable' based on configuration analysis, but users still report that actual traffic is failing intermittently. The engineer needs the test to also verify whether packets are truly being delivered across the live data plane, not just that the configuration permits the flow. What should the engineer do?

Accepted Answer

Enable the live data plane analysis (dynamic verification) option; note that for a non-Google destination such as an on-prem host over HA VPN it verifies delivery only as far as the Google network edge, sending probe packets along the in-scope path

Answer

Increase the VPC Flow Logs sampling rate to 1.0 on the source subnet and re-run the Connectivity Test

Answer

Enable Firewall Rules Logging on all rules in the path so the Connectivity Test can incorporate hit counts

Answer

Switch the Connectivity Test protocol from TCP to ICMP so the tool automatically pings the destination