Question

Your company runs a proprietary licensing application behind an internal passthrough Network Load Balancer in a producer VPC. Several partner organizations, each in their own separate VPC and Google Cloud project, need to consume this application privately without any IP address overlap concerns and without you having to manage VPC Network Peering to every partner. As the network engineer for the producer, what should you configure to publish this service?

Accepted Answer

Create a Private Service Connect service attachment that references the internal load balancer's forwarding rule, backed by a dedicated NAT subnet, and share the attachment URI with the partners

Answer

Establish VPC Network Peering between the producer VPC and each partner VPC, then export custom routes to reach the load balancer

Answer

Enable Private Google Access on the producer subnet so partners can reach the internal load balancer through Google APIs

Answer

Create a Private Service Connect endpoint in the producer VPC pointing to the internal load balancer and give partners the endpoint IP address