-
Notifications
You must be signed in to change notification settings - Fork 0
Networking
Module flag: networking
Enabled by default: yes
The Networking module provides visibility into GCP network infrastructure: load balancers, URL maps, Network Endpoint Groups (NEGs), API Gateways, VPC networks, subnets, and Private Service Connect consumer endpoints.
GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules networkinggcloud services enable compute.googleapis.com apigateway.googleapis.com| Role | Tools that need it |
|---|---|
roles/compute.networkViewer |
All Compute networking tools |
roles/apigateway.viewer |
gcp_apigateway_list |
Lists global and regional forwarding rules (load balancers).
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
region |
no | Filter by region; omit for global + all regions |
Returns: Forwarding rule name, IP address, protocol, ports, load balancing scheme, target, region.
Lists URL maps (routing rules for HTTP(S) load balancers).
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
region |
no | Filter by region; omit for global + all regions |
Returns: URL map name, default backend service, host rules (host → path matchers), path matchers.
Lists Network Endpoint Groups.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
region |
no | Filter by region |
Returns: NEG name, type (SERVERLESS / GCE_VM_IP_PORT / INTERNET / PRIVATE_SERVICE_CONNECT), size, region, linked Cloud Run service (for SERVERLESS NEGs).
Lists API Gateway instances.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
Returns: Gateway name, state (RUNNING / CREATING / FAILED), API config ID, hostname, labels.
Lists VPC networks in the project.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
Returns: Network name, auto-create subnets mode, subnet count, peering count, routing mode, labels.
Lists subnets across regions.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
network |
no | Filter to subnets in a specific VPC |
region |
no | Filter by region |
Returns: Subnet name, region, network, IP CIDR range, secondary ranges, private Google access, flow logs enabled.
Lists Private Service Connect consumer endpoints.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
Returns: Endpoint name, target service, IP address, network, subnetwork, connection status.
Load balancer inventory
"List all load balancers in project my-project and their IP addresses."
NEG audit
"Which Cloud Run services in project my-project have a SERVERLESS NEG configured?"
Subnet IP space check
"Show me all subnets in the
defaultVPC of project my-project and their CIDR ranges."
Private connectivity
"List all Private Service Connect endpoints in project my-project."
| Module flag | Why you'd combine it |
|---|---|
cloudrun |
Match SERVERLESS NEGs to their Cloud Run services |
gke |
Find GKE cluster network and subnetwork configuration |
vpcaccess |
Find Serverless VPC Access connectors on the same networks |
archgraph |
Include networking in the full architecture graph |