This page shows you how to configure and manage static internal IPv4 or IPv6 addresses for your Compute Engine virtual machine (VM) and bare metal instances.
If an instance requires a fixed internal IP address that does not change, you can obtain a static internal IP address for that instance by using one of the following options:
To learn how to manage secondary internal IP addresses, read Alias IP ranges.
In Compute Engine, each VM instance can have multiple network interfaces. Each interface can have one external IP address, one primary internal IP address, and one or more secondary internal IP addresses. To learn about IP addresses, read the IP addresses documentation.
With static internal IP addresses, you can always use the same IP address for a VM, even if you have to delete and recreate the VM.
To configure a static external IP address instead of an internal IP address, see Configure static external IP addresses.
Before you beginSelect the tab for how you plan to use the samples on this page:
ConsoleWhen you use the Google Cloud console to access Google Cloud services and APIs, you don't need to set up authentication.
gcloudInstall the Google Cloud CLI. After installation, initialize the Google Cloud CLI by running the following command:
gcloud init
If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity.
Note: If you installed the gcloud CLI previously, make sure you have the latest version by runninggcloud components update
.To use the Terraform samples on this page in a local development environment, install and initialize the gcloud CLI, and then set up Application Default Credentials with your user credentials.
Install the Google Cloud CLI.
If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity.
Note: If you installed the gcloud CLI previously, make sure you have the latest version by runninggcloud components update
.
If you're using a local shell, then create local authentication credentials for your user account:
gcloud auth application-default login
You don't need to do this if you're using Cloud Shell.
If an authentication error is returned, and you are using an external identity provider (IdP), confirm that you have signed in to the gcloud CLI with your federated identity.
For more information, see Set up authentication for a local development environment.
RESTTo use the REST API samples on this page in a local development environment, you use the credentials you provide to the gcloud CLI.
Install the Google Cloud CLI.
If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity.
For more information, see Authenticate for using REST in the Google Cloud authentication documentation.
To get the permissions that you need to configure and manage static IP addresses, ask your administrator to grant you the following IAM roles on your project:
roles/compute.instanceAdmin.v1
)For more information about granting roles, see Manage access to projects, folders, and organizations.
These predefined roles contain the permissions required to configure and manage static IP addresses. To see the exact permissions that are required, expand the Required permissions section:
Required permissionsThe following permissions are required to configure and manage static IP addresses:
compute.instances.update
on the VM instancecompute.instances.updateNetworkInterface
on the VM instancecompute.instances.addAccessConfig
on the VM instancecompute.instances.deleteAccessConfig
on the VM instancecompute.networks.list
on the networkcompute.subnetworks.use
on the subnetcompute.subnetworks.list
on the subnetcompute.instances.create
on the projectcompute.images.useReadOnly
on the imagecompute.snapshots.useReadOnly
on the snapshotcompute.instanceTemplates.useReadOnly
on the instance templatecompute.networks.use
on the projectcompute.addresses.use
on the projectcompute.networks.useExternalIp
on the projectcompute.subnetworks.use
on the project or on the chosen subnetcompute.subnetworks.useExternalIp
on the project or on the chosen subnetcompute.instances.setMetadata
on the projectcompute.instances.setTags
on the VMcompute.instances.setLabels
on the VMcompute.instances.setServiceAccount
on the VMcompute.disks.create
on the projectcompute.disks.use
on the diskcompute.disks.useReadOnly
on the diskYou might also be able to get these permissions with custom roles or other predefined roles.
LimitationsThe number of static internal IP addresses that you can reserve cannot exceed your project's quota. For more information, see the per-project quotas in the VPC documentation.
Only one resource at a time can use a static internal IP address.
Reserving a static internal IP address is only supported for VPC networks. It is not supported for legacy mode networks.
Deleting a resource does not automatically release a static internal IP address. You must manually release static internal IP addresses when you no longer require them.
Each VM can have multiple network interfaces, and each interface can have the following IP addresses assigned according to its stack type:
/96
IPv6 address range, either internal or external, but not both (required)/96
IPv6 address range, either internal or external, but not both (required)You can't unassign or change the following:
You can, however, promote an ephemeral internal IP address of a resource to a static internal IP address so that the address remains reserved even after the resource is deleted.
You cannot change the name of a static IP address.
Static internal IP addresses are regional, meaning they are restricted to the region in which they are reserved. For example, if there is a reserved static internal IP address in Region A
, you can only use the IP address in Region A
.
You can reserve a static internal IP address, and then specify the reserved address when creating an instance. You can also create the VM with an ephemeral internal IP address and then promote that ephemeral IP address to a static internal IP address.
To use a static internal IP address, you must have a VPC network in place for your project. To view the VPC networks in your project, see View VPC networks.
Reserve a static internal IPv4 or IPv6 address and then associate it with a specific VM
In this scenario, you separately reserve a static internal IP address and then assign it to an instance:
Choose a subnet in your VPC network. For IPv6 addresses, make sure that it is a subnet with an internal IPv6 address range.
Reserve an internal IP address from the subnet's primary IP range. This step creates a named internal IP address resource that contains that specific internal IP address. Reserving the IP address prevents Google Cloud from automatically allocating that address as an ephemeral address.
Use the reserved internal IP address by associating it with an instance when you create the VM resource.
Specify an ephemeral internal IPv4 or IPv6 address for an instance and then promote the address
In this scenario, you promote an ephemeral internal IPv4 or IPv6 address that is still attached to an instance:
Choose a subnet in your VPC network. For IPv6 addresses, make sure that it is a subnet with an IPv6 address range.
Create an instance with either an automatically allocated ephemeral IPv4 or IPv6 address or a custom IPv4 or IPv6 address.
Promote the ephemeral internal IP address to a static address.
To view all your existing static internal IP addresses, complete the following steps.
ConsoleIn the Google Cloud console, go to the IP addresses page.
Click Internal IP addresses.
Use the gcloud compute addresses list
command:
gcloud compute addresses listAPI
Use the addresses.list
method:
GET https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/regions/REGION/addresses
Replace the following:
PROJECT_ID
: the project ID for this requestREGION
: the name of the region for this requestTo list all the addresses in all regions, use the addresses.aggregatedList
method:
GET https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/aggregated/addressesHow internal IP addresses are assigned
The network interfaces for an instance are assigned IP addresses from the subnet that they are connected to. Each IPv4-only or dual-stack network interface has one primary internal IPv4 address that is assigned from the subnet's primary IPv4 range. Each IPv6-only or dual-stack network interface connected to a subnet with an internal IPv6 address range is assigned an internal IPv6 address.
Internal IPv4 addresses can be assigned in the following ways:
Internal IPv6 addresses can be assigned in the following ways:
/96
range from the IPv6 subnet range automatically./96
range from the subnet's internal IPv6 range when you create an instance, or you can reserve a static internal IPv6 address range from the subnet's internal IPv6 range and assign it to the network interface of an instance.After you reserve a static internal IP address, you can assign the reserved address when creating an instance or an internal load balancer.
The following procedures describe how to use static internal IP addresses when creating resources:
When you create an instance that is connected to a dual-stack or IPv6-only subnet with an internal IPv6 range, and you don't specify a custom ephemeral internal IPv6 address or reserved static internal IPv6 address, Compute Engine automatically assigns the instance an ephemeral internal IPv6 address from the subnet's IPv6 range.
ConsoleIn the Google Cloud console, go to the Create a VM instance page.
Expand the Advanced options section.
Expand the Networking section.
To assign an internal IPv4 address, do the following:
Alternatively, select Reserve static internal IP address and reserve a new static internal IPv4 address.
To assign an internal IPv6 address, do the following:
INTERNAL
IPv6 access type.Alternatively, select Reserve static internal IPv6 address and reserve a new static internal IPv6 address.
To finish modifying the default network interface, click Done.
Continue with the instance creation process.
Click Create.
Use the instances create
command to create an instance with a reserved internal IPv4 address, and use the --private-network-ip
flag to specify the IP address:
gcloud compute instances create INSTANCE_NAME \ --private-network-ip IP_ADDRESS
Replace the following:
INSTANCE_NAME
: the name of the instance that you want to createIP_ADDRESS
: the IP address that you want to assignIf you're using a custom subnet mode network, you must also specify the subnet by using the --subnet SUBNET
parameter.
To create an instance with a reserved internal IPv6 address, use the --internal-ipv6-address
flag to specify the IP address:
gcloud compute instances create INSTANCE_NAME \ --subnet SUBNETWORK \ --stack-type STACK_TYPE \ --internal-ipv6-address INTERNAL_IPV6_ADDRESS \ --zone ZONE
Replace the following:
INSTANCE_NAME
: the name of the instance that you want to createSUBNETWORK
: the subnet for the internal IPv6 addressSTACK_TYPE
: the stack type for the instance, either IPV4_IPV6
or IPv6_ONLY
.INTERNAL_IPV6_ADDRESS
: the /96
IPv6 address, the IP address name, or the URI of the address resource. The IP address must be reserved before you can use it.ZONE
: the zone to create the instance in.To create an instance with a static internal IP address, use the instances.insert
method.
For internal IPv4 addresses, explicitly provide the networkInterfaces[].networkIP
property with the internal IPv4 address that you want to assign for the instance.
For example:
POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances { "name": "INSTANCE_NAME", "machineType": "zones/us-central1-f/machineTypes/e2-micro", "networkInterfaces": [{ "accessConfigs": [{ "type": "ONE_TO_ONE_NAT", "name": "External NAT", }], "network": "global/networks/default", "networkIP": "IPV4_ADDRESS" }], "disks": [{ "autoDelete": "true", "boot": "true", "type": "PERSISTENT", "initializeParams": { "sourceImage": "projects/debian-cloud/global/images/v20150818" } }] }
Replace the following:
PROJECT_ID
: the ID of the project to create the instance inZONE
: the zone to create the instance inINSTANCE_NAME
: the name of the virtual machineIPV4_ADDRESS
: the internal IPv4 address to assign to the instanceFor internal IPv6 addresses, explicitly specify the values for the following properties:
networkInterfaces[].stackType
networkInterfaces[].ipv6Address
networkInterfaces[].internalIpv6PrefixLength
networkInterfaces[].ipv6AccessType
For example:
POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances { "name": "INSTANCE_NAME", "machineType": "zones/us-central1-f/machineTypes/n4-standard-2", "networkInterfaces": [{ "network": "global/networks/default", "stackType": "STACK_TYPE" "ipv6Address": "IPV6_ADDRESS", "internalIpv6PrefixLength": 96 }], "disks": [{ "autoDelete": "true", "boot": "true", "type": "PERSISTENT", "initializeParams": { "sourceImage": "projects/debian-cloud/global/images/debian-11-bullseye-v20241009" } }] }
Replace the following:
PROJECT_ID
: the ID of the project to create the instance in.ZONE
: the zone to create the instance in.INSTANCE_NAME
: the name of the instance.STACK_TYPE
: the stack type for the instance, either IPV4_IPV6
or IPv6_ONLY
.IPV6_ADDRESS
: the internal IPv6 address to assign to the instance.If you delete an instance with an ephemeral IP address, the address goes back into the unallocated address pool. If you need an internal IP address to persist beyond the life of the instance, you can reserve a static internal IP address.
Assign a static internal address to an instance's secondary network interfaceWhen you create an instance with multiple network interfaces, you can use a reserved static internal IPv4 or IPv6 address for both primary and secondary network interfaces.
To use a static internal IPv4 or IPv6 address for a secondary network interface, see Create instances with multiple network interfaces.
Change or assign an internal IPv6 address to an existing instanceYou can change or assign an internal IPv6 address for an existing dual-stack instance. If the instance is IPv4-only and you want to assign an IPv6 address, you must first change its stack type to dual-stack.
If the instance already has an internal IPv6 address assigned to it, you must first unassign that address. Then, assign a new address to the instance by using the instance's network interface.
Note: If you need to update the IP address of a forwarding rule, see Change the IP address of a forwarding rule.To change or assign a static internal IPv6 address to an existing instance, complete the following steps.
ConsoleIn the Google Cloud console, go to the VM instances page.
Click the name of the instance whose internal IPv6 address you want to change.
On the Instance details page, complete the following steps:
Click Save.
Use the compute instances network-interfaces update
command.
gcloud compute instances network-interfaces update INSTANCE_NAME \ --network-interface NIC \ --ipv6-network-tier PREMIUM \ --stack-type STACK_TYPE \ --internal-ipv6-address INTERNAL_IPV6_ADDRESS \ --zone ZONE
Replace the following:
INSTANCE_NAME
: the name of the instance that you want to createNIC
: the name of the network interface to updateSTACK_TYPE
: the stack type for the instance, which must be IPV4_IPV6
INTERNAL_IPV6_ADDRESS
: the /96
internal IPv6 address to be assigned to the interface, the IP address name, or the URI of the address resourceZONE
: the zone for the instanceUse the instances.update
method. Update the networkInterfaces[].ipv6Address
property with the internal IPv6 address that you want to assign.
For example:
POST https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances/INSTANCE_NAME { ... "networkInterfaces": [{ "accessConfigs": [{ "type": "ONE_TO_ONE_NAT", "name": "External NAT", }], "stackType": "STACK_TYPE" "ipv6Address": "IPV6_ADDRESS", "internalIpv6PrefixLength": 96 "subnetwork": "regions/REGION/subnetworks/SUBNETWORK", }], "disks": [{ "autoDelete": "true", "boot": "true", "type": "PERSISTENT", "initializeParams": { "sourceImage": "projects/debian-cloud/global/images/debian-11-bullseye-v20241009" } }] }
Replace the following:
PROJECT_ID
: the ID of the project the instance is inZONE
: the zone to create the instance inINSTANCE_NAME
: the name of the instanceSTACK_TYPE
: the stack type for the instance, which must be IPV4_IPV6
IPV6_ADDRESS
: the internal IPv6 address to assign to the instance
If you specify the URI of the internal IPv6 address resource or an IPv6 address range as the value for IPV6_ADDRESS
, then you must leave the value of internalIpv6PrefixLength
blank.
The following procedures let you manage static internal IP addresses for your instances:
Static and ephemeral internal IP addresses behave and appear the same in most contexts. However, with static internal IP addresses, you can use the same IP address for the same resource even if you delete and re-create the resource. In general, an ephemeral IP address is released if you stop or delete the resource.
To determine if an address is static or ephemeral, do the following:
In the Google Cloud console, go to the IP addresses page.
Find the address in the list and check the Type column for the type of IP address.
You can unassign a static internal IPv6 address from a dual-stack instance by updating the stack type for the instance's network interface or by deleting the instance to which the address is assigned.
When you unassign an internal IPv6 address, the system removes it from the resource but keeps the address reserved for your project. You can later reassign the address to another resource.
To unassign a static internal IPv6 address from an instance, complete the following steps.
ConsoleIn the Google Cloud console, go to the VM instances page.
Click the name of the instance whose internal IPv6 address you want to unassign.
On the Instance details page, complete the following steps:
Click Save.
Use the compute instances network-interfaces update
command with the --stack-type
flag set to IPV4_ONLY
:
gcloud compute instances network-interfaces update INSTANCE_NAME \ --network-interface=NIC \ --stack-type=IPV4_ONLY \ --zone=ZONE
Replace the following:
INSTANCE_NAME
: the name of the instance whose network interface you want to updateNIC
: the name of the network interface to updateZONE
: the zone for the instanceCheck that your static internal IPv6 address is now available and marked as RESERVED
instead of IN_USE
:
gcloud compute addresses list \ --filter="region=REGION AND name=INSTANCE_NAME"REST
Update the instance stack type of the network interface where the internal IPv6 address is attached:
PATCH
request to the instances.updateNetworkInterface
method.In the request body, update the value of the stackType
field to IPV4_ONLY
.
For example:
PATCH https://compute.googleapis.com/compute/v1/projects/PROJECT_ID/zones/ZONE/instances/INSTANCE_NAME/updateNetworkInterface { "networkInterfaces": [{ ... "stackType" : "IPV4_ONLY" ... }] }
Replace the following:
PROJECT_ID
: the ID of the project that the instance is inZONE
: the zone to create the instance inINSTANCE_NAME
: the name of the instanceIf you no longer need a static internal IPv4 or IPv6 IP address, you can release the IP address by deleting the IP address resource. Deleting an instance doesn't automatically release a static external IP address. You must manually release static external IP addresses when you no longer require them.
To release a static internal IP address, see Release a static internal IPv4 or IPv6 address in the VPC documentation.
What's nextRetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4