What are the network requirements for Private Google Access?

Network requirements for Private Google Access:

- Because Private Google Access is enabled on a per-subnet basis, you must use a VPC

network. Legacy networks are not supported because they don't support subnets.

- Private Google Access does not automatically enable any API. You must separately enable the

Google APIs you need to use via the APIs & services page in the Google Cloud Console.

- If you use the private.googleapis.com or the restricted.googleapis.com domain names, you'll need

to create DNS records to direct traffic to the IP addresses associated with those domains.

- Your network must have appropriate routes for the destination IP ranges used by Google APIs and

services. These routes must use the default internet gateway next hop. If you use

the private.googleapis.com or the restricted.googleapis.com domain names, you only need one

route (per domain). Otherwise, you'll need to create multiple routes.

- Egress firewalls must permit traffic to the IP address ranges used by Google APIs and services. The

implied allow egress firewall rule satisfies this requirement. For other ways to meet the firewall

requirement.