--- title: "POST /v1/{+parent}/connectivityTests" method: POST path: "/v1/{+parent}/connectivityTests" tags: ["projects"] --- # POST /v1/{+parent}/connectivityTests `POST /v1/{+parent}/connectivityTests` Creates a new Connectivity Test. After you create a test, the reachability analysis is performed as part of the long running operation, which completes when the analysis completes. If the endpoint specifications in `ConnectivityTest` are invalid (for example, containing non-existent resources in the network, or you don't have read permissions to the network configurations of listed projects), then the reachability result returns a value of `UNKNOWN`. If the endpoint specifications in `ConnectivityTest` are incomplete, the reachability result returns a value of AMBIGUOUS. For more information, see the Connectivity Test documentation. ## Path parameters - `parent` string, required ## Query parameters - `testId` string ## Request body - ConnectivityTest — A Connectivity Test for a network reachability analysis. - `name` string — Identifier. Unique name of the resource using the form: `projects/{project_id}/locations/global/connectivityTests/{test_id}` - `roundTrip` boolean — Whether run analysis for the return path from destination to source. Default value is false. - `relatedProjects` string[] — Other projects that may be relevant for reachability analysis. This is applicable to scenarios where a test can cross project boundaries. - `probingDetails` ProbingDetails — Results of active probing from the last run of the test. - `probedAllDevices` boolean — Whether all relevant edge devices were probed. - `sentProbeCount` integer — Number of probes sent. - `abortCause` 'PROBING_ABORT_CAUSE_UNSPECIFIED' | 'PERMISSION_DENIED' | 'NO_SOURCE_LOCATION' — The reason probing was aborted. - `endpointInfo` EndpointInfo — For display only. The specification of the endpoints for the test. EndpointInfo is derived from source and destination Endpoint and validated by the backend data plane model. - `destinationPort` integer — Destination port. Only valid when protocol is TCP or UDP. - `destinationNetworkUri` string — URI of the network where this packet is sent to. Format: `projects/{project_id}/global/networks/{network_id}` - `sourceIp` string — Source IP address. - `sourcePort` integer — Source port. Only valid when protocol is TCP or UDP. - `sourceAgentUri` string — URI of the source telemetry agent this packet originates from. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `destinationIp` string — Destination IP address. - `sourceNetworkUri` string — URI of the network where this packet originates from. Format: `projects/{project_id}/global/networks/{network_id}` - `error` Status — The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). - `code` integer — The status code, which should be an enum value of google.rpc.Code. - `message` string — A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. - `details` object[] — A list of messages that carry the error details. There is a common set of message types for APIs to use. - `edgeResponses` SingleEdgeResponse[] — Probing results for all edge devices. - `destinationRouter` string — Router name in the format '{router}.{metroshard}'. For example: pf01.aaa01, pr02.aaa01. - `successfulProbeCount` integer — Number of probes that reached the destination. - `sentProbeCount` integer — Number of probes sent. - `probingLatency` LatencyDistribution — Describes measured latency distribution. - `latencyPercentiles` LatencyPercentile[] — Representative latency percentiles. - `percent` integer — Percentage of samples this data point applies to. - `latencyMicros` string, int64 — percent-th percentile of latency observed, in microseconds. Fraction of percent/100 of samples have latency lower or equal to the value of this field. - `result` 'PROBING_RESULT_UNSPECIFIED' | 'REACHABLE' | 'UNREACHABLE' | 'REACHABILITY_INCONSISTENT' | 'UNDETERMINED' — The overall result of active probing for this egress device. - `destinationEgressLocation` EdgeLocation — Representation of a network edge location as per https://cloud.google.com/vpc/docs/edge-locations. - `metropolitanArea` string — Name of the metropolitan area. - `result` 'PROBING_RESULT_UNSPECIFIED' | 'REACHABLE' | 'UNREACHABLE' | 'REACHABILITY_INCONSISTENT' | 'UNDETERMINED' — The overall result of active probing. - `destinationEgressLocation` EdgeLocation — Representation of a network edge location as per https://cloud.google.com/vpc/docs/edge-locations. - `metropolitanArea` string — Name of the metropolitan area. - `probingLatency` LatencyDistribution — Describes measured latency distribution. - `latencyPercentiles` LatencyPercentile[] — Representative latency percentiles. - `percent` integer — Percentage of samples this data point applies to. - `latencyMicros` string, int64 — percent-th percentile of latency observed, in microseconds. Fraction of percent/100 of samples have latency lower or equal to the value of this field. - `successfulProbeCount` integer — Number of probes that reached the destination. - `verifyTime` string, google-datetime — The time that reachability was assessed through active probing. - `labels` object — Resource labels to represent user-provided metadata. - `source` Endpoint — Source or destination of the Connectivity Test. - `forwardingRuleTarget` 'FORWARDING_RULE_TARGET_UNSPECIFIED' | 'INSTANCE' | 'LOAD_BALANCER' | 'VPN_GATEWAY' | 'PSC' — Output only. Specifies the type of the target of the forwarding rule. - `cloudFunction` CloudFunctionEndpoint — Wrapper for Cloud Function attributes. - `uri` string — A [Cloud Function](https://cloud.google.com/functions) name. - `networkType` 'NETWORK_TYPE_UNSPECIFIED' | 'GCP_NETWORK' | 'NON_GCP_NETWORK' | 'INTERNET' — For source endpoints, type of the network where the endpoint is located. Not relevant for destination endpoints. - `loadBalancerId` string — Output only. ID of the load balancer the forwarding rule points to. Empty for forwarding rules not related to load balancers. - `forwardingRule` string — A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud load balancer. Forwarding rules are also used for protocol forwarding, Private Service Connect and other network services to provide forwarding information in the control plane. Applicable only to destination endpoint. Format: `projects/{project}/global/forwardingRules/{id}` or `projects/{project}/regions/{region}/forwardingRules/{id}` - `redisInstance` string — A [Redis Instance](https://cloud.google.com/memorystore/docs/redis) URI. Applicable only to destination endpoint. - `cloudRunRevision` CloudRunRevisionEndpoint — Wrapper for Cloud Run revision attributes. - `uri` string — A [Cloud Run](https://cloud.google.com/run) [revision](https://cloud.google.com/run/docs/reference/rest/v1/namespaces.revisions/get) URI. The format is: projects/{project}/locations/{location}/revisions/{revision} - `serviceUri` string — Output only. The URI of the Cloud Run service that the revision belongs to. The format is: projects/{project}/locations/{location}/services/{service} - `ipAddress` string — The IP address of the endpoint, which can be an external or internal IP. - `cloudRunJob` string — A [Cloud Run](https://cloud.google.com/run) [job](https://docs.cloud.google.com/run/docs/reference/rest/v2/projects.locations.jobs#Job) URI. Applicable only to source endpoint. The format is: projects/{project}/locations/{location}/jobs/{job} - `loadBalancerType` 'LOAD_BALANCER_TYPE_UNSPECIFIED' | 'HTTPS_ADVANCED_LOAD_BALANCER' | 'HTTPS_LOAD_BALANCER' | 'REGIONAL_HTTPS_LOAD_BALANCER' | 'INTERNAL_HTTPS_LOAD_BALANCER' | 'SSL_PROXY_LOAD_BALANCER' | 'TCP_PROXY_LOAD_BALANCER' | 'INTERNAL_TCP_PROXY_LOAD_BALANCER' | 'NETWORK_LOAD_BALANCER' | 'LEGACY_NETWORK_LOAD_BALANCER' | 'TCP_UDP_INTERNAL_LOAD_BALANCER' — Output only. Type of the load balancer the forwarding rule points to. - `gkeMasterCluster` string — A cluster URI for [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture). - `redisCluster` string — A [Redis Cluster](https://cloud.google.com/memorystore/docs/cluster) URI. Applicable only to destination endpoint. - `port` integer — The IP protocol port of the endpoint. Only applicable when protocol is TCP or UDP. - `appEngineVersion` AppEngineVersionEndpoint — Wrapper for the App Engine service version attributes. - `uri` string — An [App Engine](https://cloud.google.com/appengine) [service version](https://cloud.google.com/appengine/docs/admin-api/reference/rest/v1/apps.services.versions) name. - `cloudSqlInstance` string — A [Cloud SQL](https://cloud.google.com/sql) instance URI. - `projectId` string — For source endpoints, endpoint project ID. Used according to the `network_type`. Not relevant for destination endpoints. - `gkePod` string — A [GKE Pod](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) URI. - `instance` string — A Compute Engine instance URI. - `dmsPrivateConnection` string — A [DMS Private Connection](https://docs.cloud.google.com/database-migration/docs/reference/rest/v1/projects.locations.privateConnections) name format: projects/{project}/locations/{location}/privateConnections/{privateConnection}. - `network` string — A VPC network URI. For source endpoints, used according to the `network_type`. For destination endpoints, used only when the source is an external IP address endpoint, and the destination is an internal IP address endpoint. - `fqdn` string — DNS endpoint of [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture). Requires gke_master_cluster to be set, can't be used simultaneoulsly with ip_address or network. Applicable only to destination endpoint. - `updateTime` string, google-datetime — Output only. The time the test's configuration was updated. - `returnReachabilityDetails` ReachabilityDetails — Results of the configuration analysis from the last run of the test. - `result` 'RESULT_UNSPECIFIED' | 'REACHABLE' | 'UNREACHABLE' | 'AMBIGUOUS' | 'UNDETERMINED' — The overall result of the test's configuration analysis. - `verifyTime` string, google-datetime — The time of the configuration analysis. - `traces` Trace[] — Result may contain a list of traces if a test has multiple possible paths in the network, such as when destination endpoint is a load balancer with multiple backends. - `forwardTraceId` integer — ID of trace. For forward traces, this ID is unique for each trace. For return traces, it matches ID of associated forward trace. A single forward trace can be associated with none, one or more than one return trace. - `endpointInfo` EndpointInfo — For display only. The specification of the endpoints for the test. EndpointInfo is derived from source and destination Endpoint and validated by the backend data plane model. - `destinationPort` integer — Destination port. Only valid when protocol is TCP or UDP. - `destinationNetworkUri` string — URI of the network where this packet is sent to. Format: `projects/{project_id}/global/networks/{network_id}` - `sourceIp` string — Source IP address. - `sourcePort` integer — Source port. Only valid when protocol is TCP or UDP. - `sourceAgentUri` string — URI of the source telemetry agent this packet originates from. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `destinationIp` string — Destination IP address. - `sourceNetworkUri` string — URI of the network where this packet originates from. Format: `projects/{project_id}/global/networks/{network_id}` - `steps` Step[] — A trace of a test contains multiple steps from the initial state to the final state (delivered, dropped, forwarded, or aborted). The steps are ordered by the processing sequence within the simulated network state machine. It is critical to preserve the order of the steps and avoid reordering or sorting them. - `cloudSqlInstance` CloudSQLInstanceInfo — For display only. Metadata associated with a Cloud SQL instance. - `internalIp` string — Internal IP address of a Cloud SQL instance. - `uri` string — URI of a Cloud SQL instance in format "projects/{project}/instances/{instance}" - `externalIp` string — External IP address of a Cloud SQL instance. - `displayName` string — Name of a Cloud SQL instance. - `region` string — Region in which the Cloud SQL instance is running. - `networkUri` string — URI of a Cloud SQL instance network or empty string if the instance does not have one. In format "projects/{project}/global/networks/{network}". - `appEngineVersion` AppEngineVersionInfo — For display only. Metadata associated with an App Engine version. - `displayName` string — Name of an App Engine version. - `uri` string — URI of the App Engine version. Format: `apps/{app_id}/services/{service_id}/versions/{version_id}` - `runtime` string — Runtime of the App Engine version. - `environment` string — App Engine execution environment for a version. - `redisCluster` RedisClusterInfo — For display only. Metadata associated with a Redis Cluster. - `location` string — Name of the region in which the Redis Cluster is defined. For example, "us-central1". - `secondaryEndpointIpAddress` string — Secondary endpoint IP address of a Redis Cluster. - `uri` string — URI of a Redis Cluster in format "projects/{project_id}/locations/{location}/clusters/{cluster_id}" - `discoveryEndpointIpAddress` string — Discovery endpoint IP address of a Redis Cluster. - `networkUri` string — URI of the network containing the Redis Cluster endpoints in format "projects/{project_id}/global/networks/{network_id}". - `displayName` string — Name of a Redis Cluster. - `forward` ForwardInfo — Details of the final state "forward" and associated resource. - `target` 'TARGET_UNSPECIFIED' | 'PEERING_VPC' | 'VPN_GATEWAY' | 'INTERCONNECT' | 'GKE_MASTER' | 'IMPORTED_CUSTOM_ROUTE_NEXT_HOP' | 'CLOUD_SQL_INSTANCE' | 'ANOTHER_PROJECT' | 'NCC_HUB' | 'ROUTER_APPLIANCE' | 'SECURE_WEB_PROXY_GATEWAY' — Target type where this packet is forwarded to. - `resourceUri` string — URI of the resource that the packet is forwarded to. Format: * `projects/{project_id}/global/networks/{network_id}` (VPC peering network) * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (VPN gateway) - `ipAddress` string — IP address of the target (if applicable). - `redisInstance` RedisInstanceInfo — For display only. Metadata associated with a Cloud Redis Instance. - `displayName` string — Name of a Cloud Redis Instance. - `readEndpointIp` string — Read endpoint IP address of a Cloud Redis Instance (if applicable). - `region` string — Region in which the Cloud Redis Instance is defined. - `networkUri` string — URI of a Cloud Redis Instance network in format "projects/{project}/global/networks/{network}". - `uri` string — URI of a Cloud Redis Instance in format "projects/{project}/locations/{location}/instances/{instance}" - `primaryEndpointIp` string — Primary endpoint IP address of a Cloud Redis Instance. - `vpnGateway` VpnGatewayInfo — For display only. Metadata associated with a Compute Engine VPN gateway. - `networkUri` string — URI of the VPC network where the VPN gateway is configured. Format: `projects/{project_id}/global/networks/{network_id}` - `displayName` string — Name of a VPN gateway. - `region` string — Name of a Google Cloud region where this VPN gateway is configured. - `vpnTunnelUri` string — URI of the VPN tunnel associated with the VPN gateway. There may be multiple VPN tunnels configured on a VPN gateway, and only the one relevant to the test is displayed. Format: `projects/{project_id}/regions/{region}/vpnTunnels/{vpn_tunnel_id}` - `ipAddress` string — IP address of the VPN gateway. - `uri` string — URI of the VPN gateway. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (HA VPN gateway) * `projects/{project_id}/regions/{region}/targetVpnGateways/{target_vpn_gateway_id}` (Classic VPN gateway) - `abort` AbortInfo — Details of the final state "abort" and associated resource. - `projectsMissingPermission` string[] — List of project IDs the user specified in the request but lacks access to. In this case, analysis is aborted with the PERMISSION_DENIED cause. - `resourceUri` string — URI of the resource that caused the abort. Format: * `projects/{project_id}/global/networks/{network_id}` (VPC network) * `projects/{project_id}/zones/{zone}/instances/{instance_id}` (VM instance) - `cause` 'CAUSE_UNSPECIFIED' | 'UNKNOWN_NETWORK' | 'UNKNOWN_PROJECT' | 'NO_EXTERNAL_IP' | 'UNINTENDED_DESTINATION' | 'SOURCE_ENDPOINT_NOT_FOUND' | 'MISMATCHED_SOURCE_NETWORK' | 'DESTINATION_ENDPOINT_NOT_FOUND' | 'MISMATCHED_DESTINATION_NETWORK' | 'UNKNOWN_IP' | 'GOOGLE_MANAGED_SERVICE_UNKNOWN_IP' | 'SOURCE_IP_ADDRESS_NOT_IN_SOURCE_NETWORK' | 'PERMISSION_DENIED' | 'PERMISSION_DENIED_NO_CLOUD_NAT_CONFIGS' | 'PERMISSION_DENIED_NO_NEG_ENDPOINT_CONFIGS' | 'PERMISSION_DENIED_NO_CLOUD_ROUTER_CONFIGS' | 'NO_SOURCE_LOCATION' | 'NO_SOURCE_GCP_NETWORK_LOCATION' | 'NO_SOURCE_NON_GCP_NETWORK_LOCATION' | 'NO_SOURCE_INTERNET_LOCATION' | 'INVALID_ARGUMENT' | 'TRACE_TOO_LONG' | 'INTERNAL_ERROR' | 'UNSUPPORTED' | 'MISMATCHED_IP_VERSION' | 'GKE_KONNECTIVITY_PROXY_UNSUPPORTED' | 'RESOURCE_CONFIG_NOT_FOUND' | 'VM_INSTANCE_CONFIG_NOT_FOUND' | 'NETWORK_CONFIG_NOT_FOUND' | 'FIREWALL_CONFIG_NOT_FOUND' | 'ROUTE_CONFIG_NOT_FOUND' | 'GOOGLE_MANAGED_SERVICE_AMBIGUOUS_PSC_ENDPOINT' | 'GOOGLE_MANAGED_SERVICE_AMBIGUOUS_ENDPOINT' | 'SOURCE_PSC_CLOUD_SQL_UNSUPPORTED' | 'SOURCE_EXTERNAL_CLOUD_SQL_UNSUPPORTED' | 'SOURCE_REDIS_CLUSTER_UNSUPPORTED' | 'SOURCE_REDIS_INSTANCE_UNSUPPORTED' | 'SOURCE_FORWARDING_RULE_UNSUPPORTED' | 'NON_ROUTABLE_IP_ADDRESS' | 'UNKNOWN_ISSUE_IN_GOOGLE_MANAGED_PROJECT' | 'UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG' | 'NO_SERVERLESS_IP_RANGES' | 'IP_VERSION_PROTOCOL_MISMATCH' | 'GKE_POD_UNKNOWN_ENDPOINT_LOCATION' | 'RESPONSE_TOO_LARGE' — Causes that the analysis is aborted. - `ipAddress` string — IP address that caused the abort. - `cloudFunction` CloudFunctionInfo — For display only. Metadata associated with a Cloud Function. - `location` string — Location in which the Cloud Function is deployed. - `versionId` string, int64 — Latest successfully deployed version id of the Cloud Function. - `uri` string — URI of the Cloud Function. Format: `projects/{project_id}/locations/{location}/functions/{function_id}` - `displayName` string — Name of a Cloud Function. - `state` 'STATE_UNSPECIFIED' | 'START_FROM_INSTANCE' | 'START_FROM_INTERNET' | 'START_FROM_GOOGLE_SERVICE' | 'START_FROM_PRIVATE_NETWORK' | 'START_FROM_GKE_MASTER' | 'START_FROM_CLOUD_SQL_INSTANCE' | 'START_FROM_GKE_POD' | 'START_FROM_REDIS_INSTANCE' | 'START_FROM_REDIS_CLUSTER' | 'START_FROM_CLOUD_FUNCTION' | 'START_FROM_APP_ENGINE_VERSION' | 'START_FROM_CLOUD_RUN_REVISION' | 'START_FROM_CLOUD_RUN_JOB' | 'START_FROM_STORAGE_BUCKET' | 'START_FROM_PSC_PUBLISHED_SERVICE' | 'START_FROM_SERVERLESS_NEG' | 'START_FROM_DMS_PRIVATE_CONNECTION' | 'START_FROM_DATASTREAM_PRIVATE_CONNECTION' | 'APPLY_INGRESS_FIREWALL_RULE' | 'APPLY_EGRESS_FIREWALL_RULE' | 'APPLY_ROUTE' | 'APPLY_FORWARDING_RULE' | 'ANALYZE_LOAD_BALANCER_BACKEND' | 'SPOOFING_APPROVED' | 'ARRIVE_AT_INSTANCE' | 'ARRIVE_AT_INTERNAL_LOAD_BALANCER' | 'ARRIVE_AT_EXTERNAL_LOAD_BALANCER' | 'ARRIVE_AT_HYBRID_SUBNET' | 'ARRIVE_AT_VPN_GATEWAY' | 'ARRIVE_AT_VPN_TUNNEL' | 'ARRIVE_AT_INTERCONNECT_ATTACHMENT' | 'ARRIVE_AT_VPC_CONNECTOR' | 'ARRIVE_AT_GKE_POD' | 'DIRECT_VPC_EGRESS_CONNECTION' | 'SERVERLESS_EXTERNAL_CONNECTION' | 'NGFW_PACKET_INSPECTION' | 'NAT' | 'SKIP_GKE_POD_IP_MASQUERADING' | 'SKIP_GKE_INGRESS_NETWORK_POLICY' | 'SKIP_GKE_EGRESS_NETWORK_POLICY' | 'APPLY_INGRESS_GKE_NETWORK_POLICY' | 'APPLY_EGRESS_GKE_NETWORK_POLICY' | 'PROXY_CONNECTION' | 'DELIVER' | 'DROP' | 'FORWARD' | 'ABORT' | 'VIEWER_PERMISSION_MISSING' — Each step is in one of the pre-defined states. - `network` NetworkInfo — For display only. Metadata associated with a Compute Engine network. - `matchedIpRange` string — The IP range of the subnet matching the source IP address of the test. - `displayName` string — Name of a Compute Engine network. - `region` string — The region of the subnet matching the source IP address of the test. - `matchedSubnetUri` string — URI of the subnet matching the source IP address of the test in format "projects/{project}/regions/{region}/subnetworks/{subnetwork}" - `uri` string — URI of a Compute Engine network in format "projects/{project}/global/networks/{network}" - `vpcConnector` VpcConnectorInfo — For display only. Metadata associated with a VPC connector. - `location` string — Location in which the VPC connector is deployed. - `uri` string — URI of a VPC connector. Format: `projects/{project_id}/locations/{location}/connectors/{connector_id}` - `displayName` string — Name of a VPC connector. - `gkeNetworkPolicySkipped` GkeNetworkPolicySkippedInfo — For display only. Contains information about why GKE Network Policy evaluation was skipped. - `reason` 'REASON_UNSPECIFIED' | 'NETWORK_POLICY_DISABLED' | 'INGRESS_SOURCE_ON_SAME_NODE' | 'EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD' | 'NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC' | 'NETWORK_POLICY_ANALYSIS_UNSUPPORTED' — Reason why Network Policy evaluation was skipped. - `instance` InstanceInfo — For display only. Metadata associated with a Compute Engine instance. - `pscNetworkAttachmentUri` string — URI of the PSC network attachment the NIC is attached to (if relevant) in format "projects/{project}/regions/{region}/networkAttachments/{network_attachment}" - `serviceAccount` string — Service account authorized for the instance. - `running` boolean — Indicates whether the Compute Engine instance is running. Deprecated: use the `status` field instead. - `networkTags` string[] — Network tags configured on the instance. - `interface` string — Name of the network interface of a Compute Engine instance. - `internalIp` string — Internal IP address of the network interface. - `networkUri` string — URI of a Compute Engine network in format "projects/{project}/global/networks/{network}" - `displayName` string — Name of a Compute Engine instance. - `status` 'STATUS_UNSPECIFIED' | 'RUNNING' | 'NOT_RUNNING' — The status of the instance. - `uri` string — URI of a Compute Engine instance in format "projects/{project}/zones/{zone}/instances/{instance}" - `externalIp` string — External IP address of the network interface. - `dmsPrivateConnection` PrivateConnectionInfo — For display only. Metadata associated with a Private Connection. - `uri` string — URI of the Private Connection in format "projects/{project_id}/locations/{location}/privateConnections/{private_connection_id}" - `endpoint` EndpointInfo — For display only. The specification of the endpoints for the test. EndpointInfo is derived from source and destination Endpoint and validated by the backend data plane model. - `destinationPort` integer — Destination port. Only valid when protocol is TCP or UDP. - `destinationNetworkUri` string — URI of the network where this packet is sent to. Format: `projects/{project_id}/global/networks/{network_id}` - `sourceIp` string — Source IP address. - `sourcePort` integer — Source port. Only valid when protocol is TCP or UDP. - `sourceAgentUri` string — URI of the source telemetry agent this packet originates from. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `destinationIp` string — Destination IP address. - `sourceNetworkUri` string — URI of the network where this packet originates from. Format: `projects/{project_id}/global/networks/{network_id}` - `gkeMaster` GKEMasterInfo — For display only. Metadata associated with a Google Kubernetes Engine (GKE) cluster master. - `clusterUri` string — URI of the GKE cluster. Format: * `projects/{project_id}/locations/{location}/clusters/{cluster_id}` (regional cluster) * `projects/{project_id}/zones/{zone}/clusters/{cluster_id}` (zonal cluster) - `clusterNetworkUri` string — URI of the GKE cluster network. Format: `projects/{project_id}/global/networks/{network_id}` - `externalIp` string — External IP address of a GKE cluster control plane. - `internalIp` string — Internal IP address of a GKE cluster control plane. - `dnsEndpoint` string — DNS endpoint of a GKE cluster control plane. - `loadBalancerBackendInfo` LoadBalancerBackendInfo — For display only. Metadata associated with the load balancer backend. - `instanceUri` string — URI of the backend instance (if applicable) in format "projects/{project}/zones/{zone}/instances/{instance}". Populated for instance group backends, and zonal NEG backends. - `networkEndpointGroupUri` string — URI of the network endpoint group this backend belongs to (if applicable) Format: * `projects/{project_id}/zones/{zone}/networkEndpointGroups/{neg_id}` (zonal NEG) * `projects/{project_id}/regions/{region}/networkEndpointGroups/{neg_id}` (regional NEG) * `projects/{project_id}/global/networkEndpointGroups/{neg_id}` (global NEG) - `instanceGroupUri` string — URI of the instance group this backend belongs to (if applicable) in format "projects/{project}/zones/{zone}/instanceGroups/{instance_group}". - `pscGoogleApiTarget` string — PSC Google API target this PSC NEG backend targets (if applicable). - `backendServiceUri` string — URI of the backend service this backend belongs to (if applicable) in format "projects/{project}/regions/{region}/backendServices/{backend_service}" (regional) or "projects/{project}/global/backendServices/{backend_service}" (global). - `pscServiceAttachmentUri` string — URI of the PSC service attachment this PSC NEG backend targets (if applicable) in format "projects/{project}/regions/{region}/serviceAttachments/{service_attachment}". - `healthCheckUri` string — URI of the health check attached to this backend (if applicable). Format: * `projects/{project_id}/global/healthChecks/{health_check_id}` * `projects/{project_id}/regions/{region}/healthChecks/{health_check_id}` * `projects/{project_id}/global/httpHealthChecks/{health_check_id}` (legacy) - `backendBucketUri` string — URI of the backend bucket this backend targets (if applicable) in format "projects/{project}/global/backendBuckets/{backend_bucket}". - `name` string — Display name of the backend. For example, it might be an instance name for the instance group backends, or an IP address and port for zonal network endpoint group backends. - `healthCheckFirewallsConfigState` 'HEALTH_CHECK_FIREWALLS_CONFIG_STATE_UNSPECIFIED' | 'FIREWALLS_CONFIGURED' | 'FIREWALLS_PARTIALLY_CONFIGURED' | 'FIREWALLS_NOT_CONFIGURED' | 'FIREWALLS_UNSUPPORTED' — Output only. Health check firewalls configuration state for the backend. This is a result of the static firewall analysis (verifying that health check traffic from required IP ranges to the backend is allowed or not). The backend might still be unhealthy even if these firewalls are configured. Please refer to the documentation for more information: https://cloud.google.com/load-balancing/docs/firewall-rules - `googleService` GoogleServiceInfo — For display only. Details of a Google Service sending packets to a VPC network. Although the source IP might be a publicly routable address, some Google Services use special routes within Google production infrastructure to reach Compute Engine Instances. https://cloud.google.com/vpc/docs/routes#special_return_paths - `googleServiceType` 'GOOGLE_SERVICE_TYPE_UNSPECIFIED' | 'IAP' | 'GFE_PROXY_OR_HEALTH_CHECK_PROBER' | 'CLOUD_DNS' | 'GOOGLE_API' | 'GOOGLE_API_PSC' | 'GOOGLE_API_VPC_SC' | 'SERVERLESS_VPC_ACCESS' — Recognized type of a Google Service. - `sourceIp` string — Source IP address. - `drop` DropInfo — Details of the final state "drop" and associated resource. - `cause` 'CAUSE_UNSPECIFIED' | 'UNKNOWN_EXTERNAL_ADDRESS' | 'FOREIGN_IP_DISALLOWED' | 'FIREWALL_RULE' | 'NO_ROUTE' | 'ROUTE_BLACKHOLE' | 'ROUTE_WRONG_NETWORK' | 'ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED' | 'ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND' | 'ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK' | 'ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP' | 'ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH' | 'ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED' | 'ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID' | 'NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS' | 'NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS' | 'NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS' | 'VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH' | 'VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH' | 'PRIVATE_TRAFFIC_TO_INTERNET' | 'PRIVATE_GOOGLE_ACCESS_DISALLOWED' | 'PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED' | 'NO_EXTERNAL_ADDRESS' | 'UNKNOWN_INTERNAL_ADDRESS' | 'FORWARDING_RULE_MISMATCH' | 'FORWARDING_RULE_NO_INSTANCES' | 'FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK' | 'FIREWALL_BLOCKING_LOAD_BALANCER_ENVOY_PROXY_HEALTH_CHECK' | 'INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS' | 'INSTANCE_NOT_RUNNING' | 'GKE_CLUSTER_NOT_RUNNING' | 'GKE_POD_NOT_RUNNING' | 'CLOUD_SQL_INSTANCE_NOT_RUNNING' | 'REDIS_INSTANCE_NOT_RUNNING' | 'REDIS_CLUSTER_NOT_RUNNING' | 'TRAFFIC_TYPE_BLOCKED' | 'GKE_MASTER_UNAUTHORIZED_ACCESS' | 'CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS' | 'DROPPED_INSIDE_GKE_SERVICE' | 'DROPPED_INSIDE_CLOUD_SQL_SERVICE' | 'DROPPED_INSIDE_DMS_PRIVATE_CONNECTION' | 'DROPPED_INSIDE_DATASTREAM_PRIVATE_CONNECTION' | 'GOOGLE_MANAGED_SERVICE_NO_PEERING' | 'GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT' | 'GKE_PSC_ENDPOINT_MISSING' | 'CLOUD_SQL_INSTANCE_NO_IP_ADDRESS' | 'GKE_CONTROL_PLANE_REGION_MISMATCH' | 'PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION' | 'GKE_CONTROL_PLANE_NO_ROUTE' | 'CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC' | 'PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION' | 'CLOUD_SQL_INSTANCE_NO_ROUTE' | 'CLOUD_SQL_CONNECTOR_REQUIRED' | 'CLOUD_FUNCTION_NOT_ACTIVE' | 'VPC_CONNECTOR_NOT_SET' | 'VPC_CONNECTOR_NOT_RUNNING' | 'VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED' | 'VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED' | 'FORWARDING_RULE_REGION_MISMATCH' | 'PSC_CONNECTION_NOT_ACCEPTED' | 'PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK' | 'PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS' | 'PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS' | 'CLOUD_SQL_PSC_NEG_UNSUPPORTED' | 'NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT' | 'PSC_TRANSITIVITY_NOT_PROPAGATED' | 'HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED' | 'HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED' | 'CLOUD_RUN_REVISION_NOT_READY' | 'CLOUD_RUN_JOB_NOT_READY' | 'DROPPED_INSIDE_PSC_SERVICE_PRODUCER' | 'LOAD_BALANCER_HAS_NO_PROXY_SUBNET' | 'CLOUD_NAT_NO_ADDRESSES' | 'ROUTING_LOOP' | 'DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE' | 'LOAD_BALANCER_BACKEND_INVALID_NETWORK' | 'BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED' | 'DESTINATION_IS_PRIVATE_NAT_IP_RANGE' | 'DROPPED_INSIDE_REDIS_INSTANCE_SERVICE' | 'REDIS_INSTANCE_UNSUPPORTED_PORT' | 'REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS' | 'REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK' | 'REDIS_INSTANCE_NO_EXTERNAL_IP' | 'REDIS_INSTANCE_UNSUPPORTED_PROTOCOL' | 'DROPPED_INSIDE_REDIS_CLUSTER_SERVICE' | 'REDIS_CLUSTER_UNSUPPORTED_PORT' | 'REDIS_CLUSTER_NO_EXTERNAL_IP' | 'REDIS_CLUSTER_UNSUPPORTED_PROTOCOL' | 'NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION' | 'NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION' | 'NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION' | 'PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED' | 'PSC_PORT_MAPPING_PORT_MISMATCH' | 'PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED' | 'UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION' | 'TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED' | 'NO_MATCHING_NAT64_GATEWAY' | 'NO_CONFIGURED_PRIVATE_NAT64_RULE' | 'LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH' | 'NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION' | 'CLOUD_NAT_PROTOCOL_UNSUPPORTED' | 'L2_INTERCONNECT_UNSUPPORTED_PROTOCOL' | 'L2_INTERCONNECT_UNSUPPORTED_PORT' | 'L2_INTERCONNECT_DESTINATION_IP_MISMATCH' | 'NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED' | 'HYBRID_SUBNET_REGION_MISMATCH' | 'HYBRID_SUBNET_NO_ROUTE' | 'GKE_NETWORK_POLICY' | 'NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION' | 'PRIVATE_CONNECTION_NO_RUNNING_INSTANCE' — Cause that the packet is dropped. - `region` string — Region of the dropped packet (if relevant). - `sourceGeolocationCode` string — Geolocation (region code) of the source IP address (if relevant). - `destinationIp` string — Destination IP address of the dropped packet (if relevant). - `resourceUri` string — URI of the resource that caused the drop. Format: * `projects/{project_id}/global/firewalls/{firewall_id}` (firewall rule) * `projects/{project_id}/global/routes/{route_id}` (route) - `sourceIp` string — Source IP address of the dropped packet (if relevant). - `destinationGeolocationCode` string — Geolocation (region code) of the destination IP address (if relevant). - `loadBalancer` LoadBalancerInfo — For display only. Metadata associated with a load balancer. - `loadBalancerType` 'LOAD_BALANCER_TYPE_UNSPECIFIED' | 'INTERNAL_TCP_UDP' | 'NETWORK_TCP_UDP' | 'HTTP_PROXY' | 'TCP_PROXY' | 'SSL_PROXY' — Type of the load balancer. - `backendUri` string — URI of the backend associated with the load balancer. Format: * `projects/{project_id}/regions/{region}/backendServices/{backend_service_id}` * `projects/{project_id}/global/backendServices/{backend_service_id}` * `projects/{project_id}/regions/{region}/targetPools/{target_pool_id}` * `projects/{project_id}/zones/{zone}/targetInstances/{target_instance_id}` - `backends` LoadBalancerBackend[] — Information for the loadbalancer backends. - `healthCheckFirewallState` 'HEALTH_CHECK_FIREWALL_STATE_UNSPECIFIED' | 'CONFIGURED' | 'MISCONFIGURED' — State of the health check firewall configuration. - `uri` string — URI of the backend instance or network endpoint. Format: * `projects/{project_id}/zones/{zone}/instances/{instance_id}` (instance) * `projects/{project_id}/zones/{zone}/networkEndpointGroups/{neg_id}` (zonal NEG) * `projects/{project_id}/regions/{region}/networkEndpointGroups/{neg_id}` (regional NEG) * `projects/{project_id}/global/networkEndpointGroups/{neg_id}` (global NEG) - `healthCheckBlockingFirewallRules` string[] — A list of firewall rule URIs blocking probes from health check IP ranges. - `displayName` string — Name of a Compute Engine instance or network endpoint. - `healthCheckAllowingFirewallRules` string[] — A list of firewall rule URIs allowing probes from health check IP ranges. - `backendType` 'BACKEND_TYPE_UNSPECIFIED' | 'BACKEND_SERVICE' | 'TARGET_POOL' | 'TARGET_INSTANCE' — Type of load balancer's backend configuration. - `healthCheckUri` string — URI of the health check for the load balancer. Deprecated and no longer populated as different load balancer backends might have different health checks. - `interconnectAttachment` InterconnectAttachmentInfo — For display only. Metadata associated with an Interconnect attachment. - `uri` string — URI of the Interconnect attachment. Format: `projects/{project_id}/regions/{region}/interconnectAttachments/{attachment_id}` - `interconnectUri` string — URI of the Interconnect. Format: `projects/{project_id}/global/interconnects/{interconnect_id}` - `type` 'TYPE_UNSPECIFIED' | 'DEDICATED' | 'PARTNER' | 'PARTNER_PROVIDER' | 'L2_DEDICATED' — The type of interconnect attachment this is. - `displayName` string — Name of an Interconnect attachment. - `region` string — Name of a Google Cloud region where the Interconnect attachment is configured. - `l2AttachmentMatchedIpAddress` string — Appliance IP address that was matched for L2_DEDICATED attachments. - `cloudRouterUri` string — URI of the Cloud Router to be used for dynamic routing. Format: `projects/{project_id}/regions/{region}/routers/{router_id}` - `deliver` DeliverInfo — Details of the final state "deliver" and associated resource. - `target` 'TARGET_UNSPECIFIED' | 'INSTANCE' | 'INTERNET' | 'GOOGLE_API' | 'GKE_MASTER' | 'CLOUD_SQL_INSTANCE' | 'PSC_PUBLISHED_SERVICE' | 'PSC_GOOGLE_API' | 'PSC_VPC_SC' | 'SERVERLESS_NEG' | 'STORAGE_BUCKET' | 'PRIVATE_NETWORK' | 'CLOUD_FUNCTION' | 'APP_ENGINE_VERSION' | 'CLOUD_RUN_REVISION' | 'GOOGLE_MANAGED_SERVICE' | 'REDIS_INSTANCE' | 'REDIS_CLUSTER' | 'GKE_POD' | 'CLOUD_RUN_JOB' | 'DMS_PRIVATE_CONNECTION' | 'DATASTREAM_PRIVATE_CONNECTION' — Target type where the packet is delivered to. - `googleServiceType` 'GOOGLE_SERVICE_TYPE_UNSPECIFIED' | 'IAP' | 'GFE_PROXY_OR_HEALTH_CHECK_PROBER' | 'CLOUD_DNS' | 'PRIVATE_GOOGLE_ACCESS' | 'SERVERLESS_VPC_ACCESS' — Recognized type of a Google Service the packet is delivered to (if applicable). - `storageBucket` string — Name of the Cloud Storage Bucket the packet is delivered to (if applicable). - `pscGoogleApiTarget` string — PSC Google API target the packet is delivered to (if applicable). - `ipAddress` string — IP address of the target (if applicable). - `resourceUri` string — URI of the resource that the packet is delivered to. For example: * `"projects/{project}/zones/{zone}/instances/{instance}"` * `"projects/{project}/regions/{region}/networkEndpointGroups/{network_endpoint_group}"` - `cloudRunJob` CloudRunJobInfo — For display only. Metadata associated with a Cloud Run job. - `location` string — Location in which this job is deployed. - `displayName` string — Name of a Cloud Run job. - `uri` string — URI of the Cloud Run job. Format: `projects/{project_id}/locations/{location}/jobs/{job_id}` - `cloudRunRevision` CloudRunRevisionInfo — For display only. Metadata associated with a Cloud Run revision. - `location` string — Location in which this revision is deployed. - `serviceUri` string — URI of Cloud Run service this revision belongs to. Format: `projects/{project_id}/locations/{location}/services/{service_id}` - `displayName` string — Name of a Cloud Run revision. - `uri` string — URI of the Cloud Run revision. Format: `projects/{project_id}/locations/{location}/revisions/{revision_id}` - `forwardingRule` ForwardingRuleInfo — For display only. Metadata associated with a Compute Engine forwarding rule. - `uri` string — URI of the forwarding rule in format "projects/{project}/global/forwardingRules/{forwarding_rule}" (global) or "projects/{project}/regions/{region}/forwardingRules/{forwarding_rule}" (regional). - `vip` string — VIP of the forwarding rule. - `matchedProtocol` string — Protocol defined in the forwarding rule that matches the packet. - `loadBalancerName` string — Name of the load balancer the forwarding rule belongs to. Empty for forwarding rules not related to load balancers (like PSC forwarding rules). - `displayName` string — Name of the forwarding rule. - `target` string — Target type of the forwarding rule. - `networkUri` string — URI of a VPC network where the forwarding rule is located in format "projects/{project}/global/networks/{network}". - `region` string — Region of the forwarding rule. Set only for regional forwarding rules. - `pscGoogleApiTarget` string — PSC Google API target this forwarding rule targets (if applicable). - `pscServiceAttachmentUri` string — URI of the PSC service attachment this forwarding rule targets (if applicable) in format "projects/{project}/regions/{region}/serviceAttachments/{service_attachment}". - `matchedPortRange` string — Port range defined in the forwarding rule that matches the packet. - `causesDrop` boolean — This is a step that leads to the final state Drop. - `route` RouteInfo — For display only. Metadata associated with a Compute Engine route. - `protocols` string[] — Protocols of the route. POLICY_BASED routes only. - `nccHubUri` string — URI of the NCC Hub the route is advertised by in format "projects/{project}/locations/global/hubs/{hub}". PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub only. - `nccHubRouteUri` string — For PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub, the URI of the corresponding route in NCC Hub's routing table. Format: `projects/{project_id}/locations/global/hubs/{hub_id}/routeTables/{route_table_id}/routes/{route_id}` - `advertisedRouteNextHopUri` string — For ADVERTISED routes, the URI of their next hop, i.e. the URI of the hybrid endpoint (VPN tunnel, Interconnect attachment, NCC router appliance) the advertised prefix is advertised through, or URI of the source peered network. Deprecated in favor of the next_hop_uri field, not used in new tests. - `destIpRange` string — Destination IP range of the route. - `nextHopType` 'NEXT_HOP_TYPE_UNSPECIFIED' | 'NEXT_HOP_IP' | 'NEXT_HOP_INSTANCE' | 'NEXT_HOP_NETWORK' | 'NEXT_HOP_PEERING' | 'NEXT_HOP_INTERCONNECT' | 'NEXT_HOP_VPN_TUNNEL' | 'NEXT_HOP_VPN_GATEWAY' | 'NEXT_HOP_INTERNET_GATEWAY' | 'NEXT_HOP_BLACKHOLE' | 'NEXT_HOP_ILB' | 'NEXT_HOP_ROUTER_APPLIANCE' | 'NEXT_HOP_NCC_HUB' | 'SECURE_WEB_PROXY_GATEWAY' — Type of next hop. - `routeScope` 'ROUTE_SCOPE_UNSPECIFIED' | 'NETWORK' | 'NCC_HUB' — Indicates where route is applicable. Deprecated, routes with NCC_HUB scope are not included in the trace in new tests. - `nccSpokeUri` string — URI of the destination NCC Spoke in format "projects/{project}/locations/{location}/spokes/{spoke}" (regional) or "projects/{project}/locations/global/spokes/{spoke}" (global). PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub only. - `srcPortRanges` string[] — Source port ranges of the route. POLICY_BASED routes only. - `originatingRouteUri` string — For PEERING_SUBNET and PEERING_STATIC routes, the URI of the originating SUBNET/STATIC route. Format: `projects/{project_id}/global/routes/{route_id}` - `originatingRouteDisplayName` string — For PEERING_SUBNET, PEERING_STATIC and PEERING_DYNAMIC routes, the name of the originating SUBNET/STATIC/DYNAMIC route. - `region` string — Region of the route. DYNAMIC, PEERING_DYNAMIC, POLICY_BASED and ADVERTISED routes only. If set for POLICY_BASED route, this is a region of VLAN attachments for Cloud Interconnect the route applies to. If set to "all" for POLICY_BASED route, the route applies to VLAN attachments of Cloud Interconnect in all regions. - `advertisedRouteSourceRouterUri` string — For ADVERTISED dynamic routes, the URI of the Cloud Router that advertised the corresponding IP prefix in format "projects/{project}/regions/{region}/routers/{router}". - `instanceTags` string[] — Instance tags of the route. - `destPortRanges` string[] — Destination port ranges of the route. POLICY_BASED routes only. - `routeType` 'ROUTE_TYPE_UNSPECIFIED' | 'SUBNET' | 'STATIC' | 'DYNAMIC' | 'PEERING_SUBNET' | 'PEERING_STATIC' | 'PEERING_DYNAMIC' | 'POLICY_BASED' | 'ADVERTISED' — Type of route. - `nextHop` string — String type of the next hop of the route (for example, "VPN tunnel"). Deprecated in favor of the next_hop_type and next_hop_uri fields, not used in new tests. - `displayName` string — Name of a route. - `networkUri` string — URI of a VPC network where route is located in format "projects/{project}/global/networks/{network}". - `priority` integer — Priority of the route. - `uri` string — URI of a route in format "projects/{project}/global/routes/{route}". SUBNET, STATIC, PEERING_SUBNET (only for peering network) and POLICY_BASED routes only. - `srcIpRange` string — Source IP address range of the route. POLICY_BASED routes only. - `nextHopNetworkUri` string — URI of a VPC network where the next hop resource is located in format "projects/{project}/global/networks/{network}". - `nextHopUri` string — URI of the next hop resource. - `firewall` FirewallInfo — For display only. Metadata associated with a VPC firewall rule, an implied VPC firewall rule, or a firewall policy rule. - `networkUri` string — The URI of the VPC network that the firewall rule is associated with in format "projects/{project}/global/networks/{network}". This field is not applicable to hierarchical firewall policy rules. - `displayName` string — The display name of the firewall rule. This field might be empty for firewall policy rules. - `policyPriority` integer — The priority of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. - `priority` integer — The priority of the firewall rule. - `targetTags` string[] — The target tags defined by the VPC firewall rule. This field is not applicable to firewall policy rules. - `uri` string — The URI of the firewall rule in format "projects/{project}/global/firewalls/{firewall}". This field is not applicable to implied VPC firewall rules. - `policyUri` string — The URI of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. Format: * `locations/global/firewallPolicies/{policy_id}` (hierarchical policy) * `projects/{project_id}/global/firewallPolicies/{policy_id}` (global network firewall policy) * `projects/{project_id}/regions/{region}/firewallPolicies/{policy_id}` (regional network firewall policy) - `policy` string — The name of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. - `targetType` 'TARGET_TYPE_UNSPECIFIED' | 'INSTANCES' | 'INTERNAL_MANAGED_LB' — Target type of the firewall rule. - `action` string — Possible values: ALLOW, DENY, APPLY_SECURITY_PROFILE_GROUP - `direction` string — Possible values: INGRESS, EGRESS - `firewallRuleType` 'FIREWALL_RULE_TYPE_UNSPECIFIED' | 'HIERARCHICAL_FIREWALL_POLICY_RULE' | 'VPC_FIREWALL_RULE' | 'IMPLIED_VPC_FIREWALL_RULE' | 'SERVERLESS_VPC_ACCESS_MANAGED_FIREWALL_RULE' | 'NETWORK_FIREWALL_POLICY_RULE' | 'NETWORK_REGIONAL_FIREWALL_POLICY_RULE' | 'SYSTEM_NETWORK_FIREWALL_POLICY_RULE' | 'SYSTEM_REGIONAL_NETWORK_FIREWALL_POLICY_RULE' | 'UNSUPPORTED_FIREWALL_POLICY_RULE' | 'TRACKING_STATE' | 'ANALYSIS_SKIPPED' — The firewall rule's type. - `targetServiceAccounts` string[] — The target service accounts specified by the firewall rule. - `vpnTunnel` VpnTunnelInfo — For display only. Metadata associated with a Compute Engine VPN tunnel. - `remoteGateway` string — URI of a VPN gateway at remote end of the tunnel. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (GCP HA VPN gateway) * `projects/{project_id}/global/peerVpnGateways/{peer_vpn_gateway_id}` (GCP peer VPN gateway) - `region` string — Name of a Google Cloud region where this VPN tunnel is configured. - `sourceGatewayIp` string — Local VPN gateway's IP address. - `sourceGateway` string — URI of the VPN gateway at local end of the tunnel. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (HA VPN gateway) * `projects/{project_id}/regions/{region}/targetVpnGateways/{target_vpn_gateway_id}` (Classic VPN gateway) - `displayName` string — Name of a VPN tunnel. - `remoteGatewayIp` string — Remote VPN gateway's IP address. - `networkUri` string — URI of the VPC network where the VPN tunnel is configured. Format: `projects/{project_id}/global/networks/{network_id}` - `uri` string — URI of the VPN tunnel. Format: `projects/{project_id}/regions/{region}/vpnTunnels/{vpn_tunnel_id}` - `routingType` 'ROUTING_TYPE_UNSPECIFIED' | 'ROUTE_BASED' | 'POLICY_BASED' | 'DYNAMIC' — Type of the routing policy. - `proxyConnection` ProxyConnectionInfo — For display only. Metadata associated with ProxyConnection. - `newDestinationIp` string — Destination IP address of a new connection. - `networkUri` string — URI of the VPC network where connection is proxied. Format: `projects/{project_id}/global/networks/{network_id}` - `newSourceIp` string — Source IP address of a new connection. - `oldDestinationIp` string — Destination IP address of an original connection - `oldSourcePort` integer — Source port of an original connection. Only valid when protocol is TCP or UDP. - `oldDestinationPort` integer — Destination port of an original connection. Only valid when protocol is TCP or UDP. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `oldSourceIp` string — Source IP address of an original connection. - `newSourcePort` integer — Source port of a new connection. Only valid when protocol is TCP or UDP. - `newDestinationPort` integer — Destination port of a new connection. Only valid when protocol is TCP or UDP. - `subnetUri` string — URI of the proxy subnet. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `serverlessNeg` ServerlessNegInfo — For display only. Metadata associated with the serverless network endpoint group backend. - `negUri` string — URI of the serverless network endpoint group in format "projects/{project}/regions/{region}/networkEndpointGroups/{network_endpoint_group}". - `description` string — A description of the step. Usually this is a summary of the state. - `hybridSubnet` HybridSubnetInfo — For display only. Metadata associated with a hybrid subnet. - `uri` string — URI of the hybrid subnet. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `displayName` string — Name of a hybrid subnet. - `region` string — Name of a Google Cloud region where the hybrid subnet is configured. - `gkeNetworkPolicy` GkeNetworkPolicyInfo — For display only. Metadata associated with a GKE Network Policy. - `direction` string — Possible values: INGRESS, EGRESS - `action` string — Possible values: ALLOW, DENY - `uri` string — The URI of the Network Policy. Format for a Network Policy in a zonal cluster: `projects//zones//clusters//k8s/namespaces//networking.k8s.io/networkpolicies/` Format for a Network Policy in a regional cluster: `projects//locations//clusters//k8s/namespaces//networking.k8s.io/networkpolicies/` - `displayName` string — The name of the Network Policy. - `storageBucket` StorageBucketInfo — For display only. Metadata associated with Storage Bucket. - `bucket` string — Cloud Storage Bucket name. - `datastreamPrivateConnection` PrivateConnectionInfo — For display only. Metadata associated with a Private Connection. - `uri` string — URI of the Private Connection in format "projects/{project_id}/locations/{location}/privateConnections/{private_connection_id}" - `serverlessExternalConnection` ServerlessExternalConnectionInfo — For display only. Metadata associated with a serverless public connection. - `selectedIpAddress` string — Selected starting IP address, from the Google dynamic address pool. - `gkePod` GkePodInfo — For display only. Metadata associated with a Google Kubernetes Engine (GKE) Pod. - `ipAddress` string — IP address of a GKE Pod. If the Pod is dual-stack, this is the IP address relevant to the trace. - `networkUri` string — URI of the network containing the GKE Pod. Format: `projects/{project_id}/global/networks/{network_id}` - `podUri` string — URI of a GKE Pod. For Pods in regional Clusters, the URI format is: `projects/{project}/locations/{location}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` For Pods in zonal Clusters, the URI format is: `projects/{project}/zones/{zone}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` - `nat` NatInfo — For display only. Metadata associated with NAT. - `oldDestinationIp` string — Destination IP address before NAT translation. - `type` 'TYPE_UNSPECIFIED' | 'INTERNAL_TO_EXTERNAL' | 'EXTERNAL_TO_INTERNAL' | 'CLOUD_NAT' | 'PRIVATE_SERVICE_CONNECT' | 'GKE_POD_IP_MASQUERADING' — Type of NAT. - `newDestinationIp` string — Destination IP address after NAT translation. - `networkUri` string — URI of the VPC network where NAT translation takes place. Format: `projects/{project_id}/global/networks/{network_id}` - `newDestinationPort` integer — Destination port after NAT translation. Only valid when protocol is TCP or UDP. - `natGatewayName` string — The name of Cloud NAT Gateway. Only valid when type is CLOUD_NAT. - `newSourcePort` integer — Source port after NAT translation. Only valid when protocol is TCP or UDP. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `cloudNatGatewayType` 'CLOUD_NAT_GATEWAY_TYPE_UNSPECIFIED' | 'PUBLIC_NAT44' | 'PUBLIC_NAT64' | 'PRIVATE_NAT_NCC' | 'PRIVATE_NAT_HYBRID' | 'PRIVATE_NAT64' — Type of Cloud NAT gateway. Only valid when `type` is CLOUD_NAT. - `oldSourcePort` integer — Source port before NAT translation. Only valid when protocol is TCP or UDP. - `oldDestinationPort` integer — Destination port before NAT translation. Only valid when protocol is TCP or UDP. - `newSourceIp` string — Source IP address after NAT translation. - `routerUri` string — URI of the Cloud Router. Only valid when type is CLOUD_NAT. Format: `projects/{project_id}/regions/{region}/routers/{router_id}` - `oldSourceIp` string — Source IP address before NAT translation. - `projectId` string — Project ID that contains the configuration this step is validating. - `directVpcEgressConnection` DirectVpcEgressConnectionInfo — For display only. Metadata associated with a serverless direct VPC egress connection. - `selectedIpRange` string — Selected IP range. - `region` string — Region in which the Direct VPC egress is deployed. - `networkUri` string — URI of the VPC network for direct egress. Format: `projects/{project_id}/global/networks/{network_id}` - `selectedIpAddress` string — Selected starting IP address, from the selected IP range. - `subnetworkUri` string — URI of the subnetwork for direct egress. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `ipMasqueradingSkipped` IpMasqueradingSkippedInfo — For display only. Contains information about why IP masquerading was skipped for the packet. - `reason` 'REASON_UNSPECIFIED' | 'DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE' | 'DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE' | 'DESTINATION_ON_SAME_NODE' | 'DEFAULT_SNAT_DISABLED' | 'NO_MASQUERADING_FOR_IPV6' | 'POD_USES_NODE_NETWORK_NAMESPACE' | 'NO_MASQUERADING_FOR_RETURN_PACKET' — Reason why IP masquerading was not applied. - `nonMasqueradeRange` string — The matched non-masquerade IP range. Only set if reason is DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE or DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE. - `ngfwPacketInspection` NgfwPacketInspectionInfo — For display only. Metadata associated with a layer 7 packet inspection by the firewall. - `securityProfileGroupUri` string — URI of the security profile group associated with this firewall packet inspection. Format: `organizations/{organization_id}/locations/global/securityProfileGroups/{security_profile_group_id}` - `error` Status — The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). - `code` integer — The status code, which should be an enum value of google.rpc.Code. - `message` string — A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. - `details` object[] — A list of messages that carry the error details. There is a common set of message types for APIs to use. - `reachabilityDetails` ReachabilityDetails — Results of the configuration analysis from the last run of the test. - `result` 'RESULT_UNSPECIFIED' | 'REACHABLE' | 'UNREACHABLE' | 'AMBIGUOUS' | 'UNDETERMINED' — The overall result of the test's configuration analysis. - `verifyTime` string, google-datetime — The time of the configuration analysis. - `traces` Trace[] — Result may contain a list of traces if a test has multiple possible paths in the network, such as when destination endpoint is a load balancer with multiple backends. - `forwardTraceId` integer — ID of trace. For forward traces, this ID is unique for each trace. For return traces, it matches ID of associated forward trace. A single forward trace can be associated with none, one or more than one return trace. - `endpointInfo` EndpointInfo — For display only. The specification of the endpoints for the test. EndpointInfo is derived from source and destination Endpoint and validated by the backend data plane model. - `destinationPort` integer — Destination port. Only valid when protocol is TCP or UDP. - `destinationNetworkUri` string — URI of the network where this packet is sent to. Format: `projects/{project_id}/global/networks/{network_id}` - `sourceIp` string — Source IP address. - `sourcePort` integer — Source port. Only valid when protocol is TCP or UDP. - `sourceAgentUri` string — URI of the source telemetry agent this packet originates from. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `destinationIp` string — Destination IP address. - `sourceNetworkUri` string — URI of the network where this packet originates from. Format: `projects/{project_id}/global/networks/{network_id}` - `steps` Step[] — A trace of a test contains multiple steps from the initial state to the final state (delivered, dropped, forwarded, or aborted). The steps are ordered by the processing sequence within the simulated network state machine. It is critical to preserve the order of the steps and avoid reordering or sorting them. - `cloudSqlInstance` CloudSQLInstanceInfo — For display only. Metadata associated with a Cloud SQL instance. - `internalIp` string — Internal IP address of a Cloud SQL instance. - `uri` string — URI of a Cloud SQL instance in format "projects/{project}/instances/{instance}" - `externalIp` string — External IP address of a Cloud SQL instance. - `displayName` string — Name of a Cloud SQL instance. - `region` string — Region in which the Cloud SQL instance is running. - `networkUri` string — URI of a Cloud SQL instance network or empty string if the instance does not have one. In format "projects/{project}/global/networks/{network}". - `appEngineVersion` AppEngineVersionInfo — For display only. Metadata associated with an App Engine version. - `displayName` string — Name of an App Engine version. - `uri` string — URI of the App Engine version. Format: `apps/{app_id}/services/{service_id}/versions/{version_id}` - `runtime` string — Runtime of the App Engine version. - `environment` string — App Engine execution environment for a version. - `redisCluster` RedisClusterInfo — For display only. Metadata associated with a Redis Cluster. - `location` string — Name of the region in which the Redis Cluster is defined. For example, "us-central1". - `secondaryEndpointIpAddress` string — Secondary endpoint IP address of a Redis Cluster. - `uri` string — URI of a Redis Cluster in format "projects/{project_id}/locations/{location}/clusters/{cluster_id}" - `discoveryEndpointIpAddress` string — Discovery endpoint IP address of a Redis Cluster. - `networkUri` string — URI of the network containing the Redis Cluster endpoints in format "projects/{project_id}/global/networks/{network_id}". - `displayName` string — Name of a Redis Cluster. - `forward` ForwardInfo — Details of the final state "forward" and associated resource. - `target` 'TARGET_UNSPECIFIED' | 'PEERING_VPC' | 'VPN_GATEWAY' | 'INTERCONNECT' | 'GKE_MASTER' | 'IMPORTED_CUSTOM_ROUTE_NEXT_HOP' | 'CLOUD_SQL_INSTANCE' | 'ANOTHER_PROJECT' | 'NCC_HUB' | 'ROUTER_APPLIANCE' | 'SECURE_WEB_PROXY_GATEWAY' — Target type where this packet is forwarded to. - `resourceUri` string — URI of the resource that the packet is forwarded to. Format: * `projects/{project_id}/global/networks/{network_id}` (VPC peering network) * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (VPN gateway) - `ipAddress` string — IP address of the target (if applicable). - `redisInstance` RedisInstanceInfo — For display only. Metadata associated with a Cloud Redis Instance. - `displayName` string — Name of a Cloud Redis Instance. - `readEndpointIp` string — Read endpoint IP address of a Cloud Redis Instance (if applicable). - `region` string — Region in which the Cloud Redis Instance is defined. - `networkUri` string — URI of a Cloud Redis Instance network in format "projects/{project}/global/networks/{network}". - `uri` string — URI of a Cloud Redis Instance in format "projects/{project}/locations/{location}/instances/{instance}" - `primaryEndpointIp` string — Primary endpoint IP address of a Cloud Redis Instance. - `vpnGateway` VpnGatewayInfo — For display only. Metadata associated with a Compute Engine VPN gateway. - `networkUri` string — URI of the VPC network where the VPN gateway is configured. Format: `projects/{project_id}/global/networks/{network_id}` - `displayName` string — Name of a VPN gateway. - `region` string — Name of a Google Cloud region where this VPN gateway is configured. - `vpnTunnelUri` string — URI of the VPN tunnel associated with the VPN gateway. There may be multiple VPN tunnels configured on a VPN gateway, and only the one relevant to the test is displayed. Format: `projects/{project_id}/regions/{region}/vpnTunnels/{vpn_tunnel_id}` - `ipAddress` string — IP address of the VPN gateway. - `uri` string — URI of the VPN gateway. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (HA VPN gateway) * `projects/{project_id}/regions/{region}/targetVpnGateways/{target_vpn_gateway_id}` (Classic VPN gateway) - `abort` AbortInfo — Details of the final state "abort" and associated resource. - `projectsMissingPermission` string[] — List of project IDs the user specified in the request but lacks access to. In this case, analysis is aborted with the PERMISSION_DENIED cause. - `resourceUri` string — URI of the resource that caused the abort. Format: * `projects/{project_id}/global/networks/{network_id}` (VPC network) * `projects/{project_id}/zones/{zone}/instances/{instance_id}` (VM instance) - `cause` 'CAUSE_UNSPECIFIED' | 'UNKNOWN_NETWORK' | 'UNKNOWN_PROJECT' | 'NO_EXTERNAL_IP' | 'UNINTENDED_DESTINATION' | 'SOURCE_ENDPOINT_NOT_FOUND' | 'MISMATCHED_SOURCE_NETWORK' | 'DESTINATION_ENDPOINT_NOT_FOUND' | 'MISMATCHED_DESTINATION_NETWORK' | 'UNKNOWN_IP' | 'GOOGLE_MANAGED_SERVICE_UNKNOWN_IP' | 'SOURCE_IP_ADDRESS_NOT_IN_SOURCE_NETWORK' | 'PERMISSION_DENIED' | 'PERMISSION_DENIED_NO_CLOUD_NAT_CONFIGS' | 'PERMISSION_DENIED_NO_NEG_ENDPOINT_CONFIGS' | 'PERMISSION_DENIED_NO_CLOUD_ROUTER_CONFIGS' | 'NO_SOURCE_LOCATION' | 'NO_SOURCE_GCP_NETWORK_LOCATION' | 'NO_SOURCE_NON_GCP_NETWORK_LOCATION' | 'NO_SOURCE_INTERNET_LOCATION' | 'INVALID_ARGUMENT' | 'TRACE_TOO_LONG' | 'INTERNAL_ERROR' | 'UNSUPPORTED' | 'MISMATCHED_IP_VERSION' | 'GKE_KONNECTIVITY_PROXY_UNSUPPORTED' | 'RESOURCE_CONFIG_NOT_FOUND' | 'VM_INSTANCE_CONFIG_NOT_FOUND' | 'NETWORK_CONFIG_NOT_FOUND' | 'FIREWALL_CONFIG_NOT_FOUND' | 'ROUTE_CONFIG_NOT_FOUND' | 'GOOGLE_MANAGED_SERVICE_AMBIGUOUS_PSC_ENDPOINT' | 'GOOGLE_MANAGED_SERVICE_AMBIGUOUS_ENDPOINT' | 'SOURCE_PSC_CLOUD_SQL_UNSUPPORTED' | 'SOURCE_EXTERNAL_CLOUD_SQL_UNSUPPORTED' | 'SOURCE_REDIS_CLUSTER_UNSUPPORTED' | 'SOURCE_REDIS_INSTANCE_UNSUPPORTED' | 'SOURCE_FORWARDING_RULE_UNSUPPORTED' | 'NON_ROUTABLE_IP_ADDRESS' | 'UNKNOWN_ISSUE_IN_GOOGLE_MANAGED_PROJECT' | 'UNSUPPORTED_GOOGLE_MANAGED_PROJECT_CONFIG' | 'NO_SERVERLESS_IP_RANGES' | 'IP_VERSION_PROTOCOL_MISMATCH' | 'GKE_POD_UNKNOWN_ENDPOINT_LOCATION' | 'RESPONSE_TOO_LARGE' — Causes that the analysis is aborted. - `ipAddress` string — IP address that caused the abort. - `cloudFunction` CloudFunctionInfo — For display only. Metadata associated with a Cloud Function. - `location` string — Location in which the Cloud Function is deployed. - `versionId` string, int64 — Latest successfully deployed version id of the Cloud Function. - `uri` string — URI of the Cloud Function. Format: `projects/{project_id}/locations/{location}/functions/{function_id}` - `displayName` string — Name of a Cloud Function. - `state` 'STATE_UNSPECIFIED' | 'START_FROM_INSTANCE' | 'START_FROM_INTERNET' | 'START_FROM_GOOGLE_SERVICE' | 'START_FROM_PRIVATE_NETWORK' | 'START_FROM_GKE_MASTER' | 'START_FROM_CLOUD_SQL_INSTANCE' | 'START_FROM_GKE_POD' | 'START_FROM_REDIS_INSTANCE' | 'START_FROM_REDIS_CLUSTER' | 'START_FROM_CLOUD_FUNCTION' | 'START_FROM_APP_ENGINE_VERSION' | 'START_FROM_CLOUD_RUN_REVISION' | 'START_FROM_CLOUD_RUN_JOB' | 'START_FROM_STORAGE_BUCKET' | 'START_FROM_PSC_PUBLISHED_SERVICE' | 'START_FROM_SERVERLESS_NEG' | 'START_FROM_DMS_PRIVATE_CONNECTION' | 'START_FROM_DATASTREAM_PRIVATE_CONNECTION' | 'APPLY_INGRESS_FIREWALL_RULE' | 'APPLY_EGRESS_FIREWALL_RULE' | 'APPLY_ROUTE' | 'APPLY_FORWARDING_RULE' | 'ANALYZE_LOAD_BALANCER_BACKEND' | 'SPOOFING_APPROVED' | 'ARRIVE_AT_INSTANCE' | 'ARRIVE_AT_INTERNAL_LOAD_BALANCER' | 'ARRIVE_AT_EXTERNAL_LOAD_BALANCER' | 'ARRIVE_AT_HYBRID_SUBNET' | 'ARRIVE_AT_VPN_GATEWAY' | 'ARRIVE_AT_VPN_TUNNEL' | 'ARRIVE_AT_INTERCONNECT_ATTACHMENT' | 'ARRIVE_AT_VPC_CONNECTOR' | 'ARRIVE_AT_GKE_POD' | 'DIRECT_VPC_EGRESS_CONNECTION' | 'SERVERLESS_EXTERNAL_CONNECTION' | 'NGFW_PACKET_INSPECTION' | 'NAT' | 'SKIP_GKE_POD_IP_MASQUERADING' | 'SKIP_GKE_INGRESS_NETWORK_POLICY' | 'SKIP_GKE_EGRESS_NETWORK_POLICY' | 'APPLY_INGRESS_GKE_NETWORK_POLICY' | 'APPLY_EGRESS_GKE_NETWORK_POLICY' | 'PROXY_CONNECTION' | 'DELIVER' | 'DROP' | 'FORWARD' | 'ABORT' | 'VIEWER_PERMISSION_MISSING' — Each step is in one of the pre-defined states. - `network` NetworkInfo — For display only. Metadata associated with a Compute Engine network. - `matchedIpRange` string — The IP range of the subnet matching the source IP address of the test. - `displayName` string — Name of a Compute Engine network. - `region` string — The region of the subnet matching the source IP address of the test. - `matchedSubnetUri` string — URI of the subnet matching the source IP address of the test in format "projects/{project}/regions/{region}/subnetworks/{subnetwork}" - `uri` string — URI of a Compute Engine network in format "projects/{project}/global/networks/{network}" - `vpcConnector` VpcConnectorInfo — For display only. Metadata associated with a VPC connector. - `location` string — Location in which the VPC connector is deployed. - `uri` string — URI of a VPC connector. Format: `projects/{project_id}/locations/{location}/connectors/{connector_id}` - `displayName` string — Name of a VPC connector. - `gkeNetworkPolicySkipped` GkeNetworkPolicySkippedInfo — For display only. Contains information about why GKE Network Policy evaluation was skipped. - `reason` 'REASON_UNSPECIFIED' | 'NETWORK_POLICY_DISABLED' | 'INGRESS_SOURCE_ON_SAME_NODE' | 'EGRESS_FROM_NODE_NETWORK_NAMESPACE_POD' | 'NETWORK_POLICY_NOT_APPLIED_TO_RESPONSE_TRAFFIC' | 'NETWORK_POLICY_ANALYSIS_UNSUPPORTED' — Reason why Network Policy evaluation was skipped. - `instance` InstanceInfo — For display only. Metadata associated with a Compute Engine instance. - `pscNetworkAttachmentUri` string — URI of the PSC network attachment the NIC is attached to (if relevant) in format "projects/{project}/regions/{region}/networkAttachments/{network_attachment}" - `serviceAccount` string — Service account authorized for the instance. - `running` boolean — Indicates whether the Compute Engine instance is running. Deprecated: use the `status` field instead. - `networkTags` string[] — Network tags configured on the instance. - `interface` string — Name of the network interface of a Compute Engine instance. - `internalIp` string — Internal IP address of the network interface. - `networkUri` string — URI of a Compute Engine network in format "projects/{project}/global/networks/{network}" - `displayName` string — Name of a Compute Engine instance. - `status` 'STATUS_UNSPECIFIED' | 'RUNNING' | 'NOT_RUNNING' — The status of the instance. - `uri` string — URI of a Compute Engine instance in format "projects/{project}/zones/{zone}/instances/{instance}" - `externalIp` string — External IP address of the network interface. - `dmsPrivateConnection` PrivateConnectionInfo — For display only. Metadata associated with a Private Connection. - `uri` string — URI of the Private Connection in format "projects/{project_id}/locations/{location}/privateConnections/{private_connection_id}" - `endpoint` EndpointInfo — For display only. The specification of the endpoints for the test. EndpointInfo is derived from source and destination Endpoint and validated by the backend data plane model. - `destinationPort` integer — Destination port. Only valid when protocol is TCP or UDP. - `destinationNetworkUri` string — URI of the network where this packet is sent to. Format: `projects/{project_id}/global/networks/{network_id}` - `sourceIp` string — Source IP address. - `sourcePort` integer — Source port. Only valid when protocol is TCP or UDP. - `sourceAgentUri` string — URI of the source telemetry agent this packet originates from. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `destinationIp` string — Destination IP address. - `sourceNetworkUri` string — URI of the network where this packet originates from. Format: `projects/{project_id}/global/networks/{network_id}` - `gkeMaster` GKEMasterInfo — For display only. Metadata associated with a Google Kubernetes Engine (GKE) cluster master. - `clusterUri` string — URI of the GKE cluster. Format: * `projects/{project_id}/locations/{location}/clusters/{cluster_id}` (regional cluster) * `projects/{project_id}/zones/{zone}/clusters/{cluster_id}` (zonal cluster) - `clusterNetworkUri` string — URI of the GKE cluster network. Format: `projects/{project_id}/global/networks/{network_id}` - `externalIp` string — External IP address of a GKE cluster control plane. - `internalIp` string — Internal IP address of a GKE cluster control plane. - `dnsEndpoint` string — DNS endpoint of a GKE cluster control plane. - `loadBalancerBackendInfo` LoadBalancerBackendInfo — For display only. Metadata associated with the load balancer backend. - `instanceUri` string — URI of the backend instance (if applicable) in format "projects/{project}/zones/{zone}/instances/{instance}". Populated for instance group backends, and zonal NEG backends. - `networkEndpointGroupUri` string — URI of the network endpoint group this backend belongs to (if applicable) Format: * `projects/{project_id}/zones/{zone}/networkEndpointGroups/{neg_id}` (zonal NEG) * `projects/{project_id}/regions/{region}/networkEndpointGroups/{neg_id}` (regional NEG) * `projects/{project_id}/global/networkEndpointGroups/{neg_id}` (global NEG) - `instanceGroupUri` string — URI of the instance group this backend belongs to (if applicable) in format "projects/{project}/zones/{zone}/instanceGroups/{instance_group}". - `pscGoogleApiTarget` string — PSC Google API target this PSC NEG backend targets (if applicable). - `backendServiceUri` string — URI of the backend service this backend belongs to (if applicable) in format "projects/{project}/regions/{region}/backendServices/{backend_service}" (regional) or "projects/{project}/global/backendServices/{backend_service}" (global). - `pscServiceAttachmentUri` string — URI of the PSC service attachment this PSC NEG backend targets (if applicable) in format "projects/{project}/regions/{region}/serviceAttachments/{service_attachment}". - `healthCheckUri` string — URI of the health check attached to this backend (if applicable). Format: * `projects/{project_id}/global/healthChecks/{health_check_id}` * `projects/{project_id}/regions/{region}/healthChecks/{health_check_id}` * `projects/{project_id}/global/httpHealthChecks/{health_check_id}` (legacy) - `backendBucketUri` string — URI of the backend bucket this backend targets (if applicable) in format "projects/{project}/global/backendBuckets/{backend_bucket}". - `name` string — Display name of the backend. For example, it might be an instance name for the instance group backends, or an IP address and port for zonal network endpoint group backends. - `healthCheckFirewallsConfigState` 'HEALTH_CHECK_FIREWALLS_CONFIG_STATE_UNSPECIFIED' | 'FIREWALLS_CONFIGURED' | 'FIREWALLS_PARTIALLY_CONFIGURED' | 'FIREWALLS_NOT_CONFIGURED' | 'FIREWALLS_UNSUPPORTED' — Output only. Health check firewalls configuration state for the backend. This is a result of the static firewall analysis (verifying that health check traffic from required IP ranges to the backend is allowed or not). The backend might still be unhealthy even if these firewalls are configured. Please refer to the documentation for more information: https://cloud.google.com/load-balancing/docs/firewall-rules - `googleService` GoogleServiceInfo — For display only. Details of a Google Service sending packets to a VPC network. Although the source IP might be a publicly routable address, some Google Services use special routes within Google production infrastructure to reach Compute Engine Instances. https://cloud.google.com/vpc/docs/routes#special_return_paths - `googleServiceType` 'GOOGLE_SERVICE_TYPE_UNSPECIFIED' | 'IAP' | 'GFE_PROXY_OR_HEALTH_CHECK_PROBER' | 'CLOUD_DNS' | 'GOOGLE_API' | 'GOOGLE_API_PSC' | 'GOOGLE_API_VPC_SC' | 'SERVERLESS_VPC_ACCESS' — Recognized type of a Google Service. - `sourceIp` string — Source IP address. - `drop` DropInfo — Details of the final state "drop" and associated resource. - `cause` 'CAUSE_UNSPECIFIED' | 'UNKNOWN_EXTERNAL_ADDRESS' | 'FOREIGN_IP_DISALLOWED' | 'FIREWALL_RULE' | 'NO_ROUTE' | 'ROUTE_BLACKHOLE' | 'ROUTE_WRONG_NETWORK' | 'ROUTE_NEXT_HOP_IP_ADDRESS_NOT_RESOLVED' | 'ROUTE_NEXT_HOP_RESOURCE_NOT_FOUND' | 'ROUTE_NEXT_HOP_INSTANCE_WRONG_NETWORK' | 'ROUTE_NEXT_HOP_INSTANCE_NON_PRIMARY_IP' | 'ROUTE_NEXT_HOP_FORWARDING_RULE_IP_MISMATCH' | 'ROUTE_NEXT_HOP_VPN_TUNNEL_NOT_ESTABLISHED' | 'ROUTE_NEXT_HOP_FORWARDING_RULE_TYPE_INVALID' | 'NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV6_ADDRESS' | 'NO_ROUTE_FROM_INTERNET_TO_PRIVATE_IPV4_ADDRESS' | 'NO_ROUTE_FROM_EXTERNAL_IPV6_SOURCE_TO_PRIVATE_IPV6_ADDRESS' | 'VPN_TUNNEL_LOCAL_SELECTOR_MISMATCH' | 'VPN_TUNNEL_REMOTE_SELECTOR_MISMATCH' | 'PRIVATE_TRAFFIC_TO_INTERNET' | 'PRIVATE_GOOGLE_ACCESS_DISALLOWED' | 'PRIVATE_GOOGLE_ACCESS_VIA_VPN_TUNNEL_UNSUPPORTED' | 'NO_EXTERNAL_ADDRESS' | 'UNKNOWN_INTERNAL_ADDRESS' | 'FORWARDING_RULE_MISMATCH' | 'FORWARDING_RULE_NO_INSTANCES' | 'FIREWALL_BLOCKING_LOAD_BALANCER_BACKEND_HEALTH_CHECK' | 'FIREWALL_BLOCKING_LOAD_BALANCER_ENVOY_PROXY_HEALTH_CHECK' | 'INGRESS_FIREWALL_TAGS_UNSUPPORTED_BY_DIRECT_VPC_EGRESS' | 'INSTANCE_NOT_RUNNING' | 'GKE_CLUSTER_NOT_RUNNING' | 'GKE_POD_NOT_RUNNING' | 'CLOUD_SQL_INSTANCE_NOT_RUNNING' | 'REDIS_INSTANCE_NOT_RUNNING' | 'REDIS_CLUSTER_NOT_RUNNING' | 'TRAFFIC_TYPE_BLOCKED' | 'GKE_MASTER_UNAUTHORIZED_ACCESS' | 'CLOUD_SQL_INSTANCE_UNAUTHORIZED_ACCESS' | 'DROPPED_INSIDE_GKE_SERVICE' | 'DROPPED_INSIDE_CLOUD_SQL_SERVICE' | 'DROPPED_INSIDE_DMS_PRIVATE_CONNECTION' | 'DROPPED_INSIDE_DATASTREAM_PRIVATE_CONNECTION' | 'GOOGLE_MANAGED_SERVICE_NO_PEERING' | 'GOOGLE_MANAGED_SERVICE_NO_PSC_ENDPOINT' | 'GKE_PSC_ENDPOINT_MISSING' | 'CLOUD_SQL_INSTANCE_NO_IP_ADDRESS' | 'GKE_CONTROL_PLANE_REGION_MISMATCH' | 'PUBLIC_GKE_CONTROL_PLANE_TO_PRIVATE_DESTINATION' | 'GKE_CONTROL_PLANE_NO_ROUTE' | 'CLOUD_SQL_INSTANCE_NOT_CONFIGURED_FOR_EXTERNAL_TRAFFIC' | 'PUBLIC_CLOUD_SQL_INSTANCE_TO_PRIVATE_DESTINATION' | 'CLOUD_SQL_INSTANCE_NO_ROUTE' | 'CLOUD_SQL_CONNECTOR_REQUIRED' | 'CLOUD_FUNCTION_NOT_ACTIVE' | 'VPC_CONNECTOR_NOT_SET' | 'VPC_CONNECTOR_NOT_RUNNING' | 'VPC_CONNECTOR_SERVERLESS_TRAFFIC_BLOCKED' | 'VPC_CONNECTOR_HEALTH_CHECK_TRAFFIC_BLOCKED' | 'FORWARDING_RULE_REGION_MISMATCH' | 'PSC_CONNECTION_NOT_ACCEPTED' | 'PSC_ENDPOINT_ACCESSED_FROM_PEERED_NETWORK' | 'PSC_NEG_PRODUCER_ENDPOINT_NO_GLOBAL_ACCESS' | 'PSC_NEG_PRODUCER_FORWARDING_RULE_MULTIPLE_PORTS' | 'CLOUD_SQL_PSC_NEG_UNSUPPORTED' | 'NO_NAT_SUBNETS_FOR_PSC_SERVICE_ATTACHMENT' | 'PSC_TRANSITIVITY_NOT_PROPAGATED' | 'HYBRID_NEG_NON_DYNAMIC_ROUTE_MATCHED' | 'HYBRID_NEG_NON_LOCAL_DYNAMIC_ROUTE_MATCHED' | 'CLOUD_RUN_REVISION_NOT_READY' | 'CLOUD_RUN_JOB_NOT_READY' | 'DROPPED_INSIDE_PSC_SERVICE_PRODUCER' | 'LOAD_BALANCER_HAS_NO_PROXY_SUBNET' | 'CLOUD_NAT_NO_ADDRESSES' | 'ROUTING_LOOP' | 'DROPPED_INSIDE_GOOGLE_MANAGED_SERVICE' | 'LOAD_BALANCER_BACKEND_INVALID_NETWORK' | 'BACKEND_SERVICE_NAMED_PORT_NOT_DEFINED' | 'DESTINATION_IS_PRIVATE_NAT_IP_RANGE' | 'DROPPED_INSIDE_REDIS_INSTANCE_SERVICE' | 'REDIS_INSTANCE_UNSUPPORTED_PORT' | 'REDIS_INSTANCE_CONNECTING_FROM_PUPI_ADDRESS' | 'REDIS_INSTANCE_NO_ROUTE_TO_DESTINATION_NETWORK' | 'REDIS_INSTANCE_NO_EXTERNAL_IP' | 'REDIS_INSTANCE_UNSUPPORTED_PROTOCOL' | 'DROPPED_INSIDE_REDIS_CLUSTER_SERVICE' | 'REDIS_CLUSTER_UNSUPPORTED_PORT' | 'REDIS_CLUSTER_NO_EXTERNAL_IP' | 'REDIS_CLUSTER_UNSUPPORTED_PROTOCOL' | 'NO_ADVERTISED_ROUTE_TO_GCP_DESTINATION' | 'NO_TRAFFIC_SELECTOR_TO_GCP_DESTINATION' | 'NO_KNOWN_ROUTE_FROM_PEERED_NETWORK_TO_DESTINATION' | 'PRIVATE_NAT_TO_PSC_ENDPOINT_UNSUPPORTED' | 'PSC_PORT_MAPPING_PORT_MISMATCH' | 'PSC_PORT_MAPPING_WITHOUT_PSC_CONNECTION_UNSUPPORTED' | 'UNSUPPORTED_ROUTE_MATCHED_FOR_NAT64_DESTINATION' | 'TRAFFIC_FROM_HYBRID_ENDPOINT_TO_INTERNET_DISALLOWED' | 'NO_MATCHING_NAT64_GATEWAY' | 'NO_CONFIGURED_PRIVATE_NAT64_RULE' | 'LOAD_BALANCER_BACKEND_IP_VERSION_MISMATCH' | 'NO_KNOWN_ROUTE_FROM_NCC_NETWORK_TO_DESTINATION' | 'CLOUD_NAT_PROTOCOL_UNSUPPORTED' | 'L2_INTERCONNECT_UNSUPPORTED_PROTOCOL' | 'L2_INTERCONNECT_UNSUPPORTED_PORT' | 'L2_INTERCONNECT_DESTINATION_IP_MISMATCH' | 'NCC_ROUTE_WITHIN_HYBRID_SUBNET_UNSUPPORTED' | 'HYBRID_SUBNET_REGION_MISMATCH' | 'HYBRID_SUBNET_NO_ROUTE' | 'GKE_NETWORK_POLICY' | 'NO_VALID_ROUTE_FROM_GOOGLE_MANAGED_NETWORK_TO_DESTINATION' | 'PRIVATE_CONNECTION_NO_RUNNING_INSTANCE' — Cause that the packet is dropped. - `region` string — Region of the dropped packet (if relevant). - `sourceGeolocationCode` string — Geolocation (region code) of the source IP address (if relevant). - `destinationIp` string — Destination IP address of the dropped packet (if relevant). - `resourceUri` string — URI of the resource that caused the drop. Format: * `projects/{project_id}/global/firewalls/{firewall_id}` (firewall rule) * `projects/{project_id}/global/routes/{route_id}` (route) - `sourceIp` string — Source IP address of the dropped packet (if relevant). - `destinationGeolocationCode` string — Geolocation (region code) of the destination IP address (if relevant). - `loadBalancer` LoadBalancerInfo — For display only. Metadata associated with a load balancer. - `loadBalancerType` 'LOAD_BALANCER_TYPE_UNSPECIFIED' | 'INTERNAL_TCP_UDP' | 'NETWORK_TCP_UDP' | 'HTTP_PROXY' | 'TCP_PROXY' | 'SSL_PROXY' — Type of the load balancer. - `backendUri` string — URI of the backend associated with the load balancer. Format: * `projects/{project_id}/regions/{region}/backendServices/{backend_service_id}` * `projects/{project_id}/global/backendServices/{backend_service_id}` * `projects/{project_id}/regions/{region}/targetPools/{target_pool_id}` * `projects/{project_id}/zones/{zone}/targetInstances/{target_instance_id}` - `backends` LoadBalancerBackend[] — Information for the loadbalancer backends. - `healthCheckFirewallState` 'HEALTH_CHECK_FIREWALL_STATE_UNSPECIFIED' | 'CONFIGURED' | 'MISCONFIGURED' — State of the health check firewall configuration. - `uri` string — URI of the backend instance or network endpoint. Format: * `projects/{project_id}/zones/{zone}/instances/{instance_id}` (instance) * `projects/{project_id}/zones/{zone}/networkEndpointGroups/{neg_id}` (zonal NEG) * `projects/{project_id}/regions/{region}/networkEndpointGroups/{neg_id}` (regional NEG) * `projects/{project_id}/global/networkEndpointGroups/{neg_id}` (global NEG) - `healthCheckBlockingFirewallRules` string[] — A list of firewall rule URIs blocking probes from health check IP ranges. - `displayName` string — Name of a Compute Engine instance or network endpoint. - `healthCheckAllowingFirewallRules` string[] — A list of firewall rule URIs allowing probes from health check IP ranges. - `backendType` 'BACKEND_TYPE_UNSPECIFIED' | 'BACKEND_SERVICE' | 'TARGET_POOL' | 'TARGET_INSTANCE' — Type of load balancer's backend configuration. - `healthCheckUri` string — URI of the health check for the load balancer. Deprecated and no longer populated as different load balancer backends might have different health checks. - `interconnectAttachment` InterconnectAttachmentInfo — For display only. Metadata associated with an Interconnect attachment. - `uri` string — URI of the Interconnect attachment. Format: `projects/{project_id}/regions/{region}/interconnectAttachments/{attachment_id}` - `interconnectUri` string — URI of the Interconnect. Format: `projects/{project_id}/global/interconnects/{interconnect_id}` - `type` 'TYPE_UNSPECIFIED' | 'DEDICATED' | 'PARTNER' | 'PARTNER_PROVIDER' | 'L2_DEDICATED' — The type of interconnect attachment this is. - `displayName` string — Name of an Interconnect attachment. - `region` string — Name of a Google Cloud region where the Interconnect attachment is configured. - `l2AttachmentMatchedIpAddress` string — Appliance IP address that was matched for L2_DEDICATED attachments. - `cloudRouterUri` string — URI of the Cloud Router to be used for dynamic routing. Format: `projects/{project_id}/regions/{region}/routers/{router_id}` - `deliver` DeliverInfo — Details of the final state "deliver" and associated resource. - `target` 'TARGET_UNSPECIFIED' | 'INSTANCE' | 'INTERNET' | 'GOOGLE_API' | 'GKE_MASTER' | 'CLOUD_SQL_INSTANCE' | 'PSC_PUBLISHED_SERVICE' | 'PSC_GOOGLE_API' | 'PSC_VPC_SC' | 'SERVERLESS_NEG' | 'STORAGE_BUCKET' | 'PRIVATE_NETWORK' | 'CLOUD_FUNCTION' | 'APP_ENGINE_VERSION' | 'CLOUD_RUN_REVISION' | 'GOOGLE_MANAGED_SERVICE' | 'REDIS_INSTANCE' | 'REDIS_CLUSTER' | 'GKE_POD' | 'CLOUD_RUN_JOB' | 'DMS_PRIVATE_CONNECTION' | 'DATASTREAM_PRIVATE_CONNECTION' — Target type where the packet is delivered to. - `googleServiceType` 'GOOGLE_SERVICE_TYPE_UNSPECIFIED' | 'IAP' | 'GFE_PROXY_OR_HEALTH_CHECK_PROBER' | 'CLOUD_DNS' | 'PRIVATE_GOOGLE_ACCESS' | 'SERVERLESS_VPC_ACCESS' — Recognized type of a Google Service the packet is delivered to (if applicable). - `storageBucket` string — Name of the Cloud Storage Bucket the packet is delivered to (if applicable). - `pscGoogleApiTarget` string — PSC Google API target the packet is delivered to (if applicable). - `ipAddress` string — IP address of the target (if applicable). - `resourceUri` string — URI of the resource that the packet is delivered to. For example: * `"projects/{project}/zones/{zone}/instances/{instance}"` * `"projects/{project}/regions/{region}/networkEndpointGroups/{network_endpoint_group}"` - `cloudRunJob` CloudRunJobInfo — For display only. Metadata associated with a Cloud Run job. - `location` string — Location in which this job is deployed. - `displayName` string — Name of a Cloud Run job. - `uri` string — URI of the Cloud Run job. Format: `projects/{project_id}/locations/{location}/jobs/{job_id}` - `cloudRunRevision` CloudRunRevisionInfo — For display only. Metadata associated with a Cloud Run revision. - `location` string — Location in which this revision is deployed. - `serviceUri` string — URI of Cloud Run service this revision belongs to. Format: `projects/{project_id}/locations/{location}/services/{service_id}` - `displayName` string — Name of a Cloud Run revision. - `uri` string — URI of the Cloud Run revision. Format: `projects/{project_id}/locations/{location}/revisions/{revision_id}` - `forwardingRule` ForwardingRuleInfo — For display only. Metadata associated with a Compute Engine forwarding rule. - `uri` string — URI of the forwarding rule in format "projects/{project}/global/forwardingRules/{forwarding_rule}" (global) or "projects/{project}/regions/{region}/forwardingRules/{forwarding_rule}" (regional). - `vip` string — VIP of the forwarding rule. - `matchedProtocol` string — Protocol defined in the forwarding rule that matches the packet. - `loadBalancerName` string — Name of the load balancer the forwarding rule belongs to. Empty for forwarding rules not related to load balancers (like PSC forwarding rules). - `displayName` string — Name of the forwarding rule. - `target` string — Target type of the forwarding rule. - `networkUri` string — URI of a VPC network where the forwarding rule is located in format "projects/{project}/global/networks/{network}". - `region` string — Region of the forwarding rule. Set only for regional forwarding rules. - `pscGoogleApiTarget` string — PSC Google API target this forwarding rule targets (if applicable). - `pscServiceAttachmentUri` string — URI of the PSC service attachment this forwarding rule targets (if applicable) in format "projects/{project}/regions/{region}/serviceAttachments/{service_attachment}". - `matchedPortRange` string — Port range defined in the forwarding rule that matches the packet. - `causesDrop` boolean — This is a step that leads to the final state Drop. - `route` RouteInfo — For display only. Metadata associated with a Compute Engine route. - `protocols` string[] — Protocols of the route. POLICY_BASED routes only. - `nccHubUri` string — URI of the NCC Hub the route is advertised by in format "projects/{project}/locations/global/hubs/{hub}". PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub only. - `nccHubRouteUri` string — For PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub, the URI of the corresponding route in NCC Hub's routing table. Format: `projects/{project_id}/locations/global/hubs/{hub_id}/routeTables/{route_table_id}/routes/{route_id}` - `advertisedRouteNextHopUri` string — For ADVERTISED routes, the URI of their next hop, i.e. the URI of the hybrid endpoint (VPN tunnel, Interconnect attachment, NCC router appliance) the advertised prefix is advertised through, or URI of the source peered network. Deprecated in favor of the next_hop_uri field, not used in new tests. - `destIpRange` string — Destination IP range of the route. - `nextHopType` 'NEXT_HOP_TYPE_UNSPECIFIED' | 'NEXT_HOP_IP' | 'NEXT_HOP_INSTANCE' | 'NEXT_HOP_NETWORK' | 'NEXT_HOP_PEERING' | 'NEXT_HOP_INTERCONNECT' | 'NEXT_HOP_VPN_TUNNEL' | 'NEXT_HOP_VPN_GATEWAY' | 'NEXT_HOP_INTERNET_GATEWAY' | 'NEXT_HOP_BLACKHOLE' | 'NEXT_HOP_ILB' | 'NEXT_HOP_ROUTER_APPLIANCE' | 'NEXT_HOP_NCC_HUB' | 'SECURE_WEB_PROXY_GATEWAY' — Type of next hop. - `routeScope` 'ROUTE_SCOPE_UNSPECIFIED' | 'NETWORK' | 'NCC_HUB' — Indicates where route is applicable. Deprecated, routes with NCC_HUB scope are not included in the trace in new tests. - `nccSpokeUri` string — URI of the destination NCC Spoke in format "projects/{project}/locations/{location}/spokes/{spoke}" (regional) or "projects/{project}/locations/global/spokes/{spoke}" (global). PEERING_SUBNET and PEERING_DYNAMIC routes that are advertised by NCC Hub only. - `srcPortRanges` string[] — Source port ranges of the route. POLICY_BASED routes only. - `originatingRouteUri` string — For PEERING_SUBNET and PEERING_STATIC routes, the URI of the originating SUBNET/STATIC route. Format: `projects/{project_id}/global/routes/{route_id}` - `originatingRouteDisplayName` string — For PEERING_SUBNET, PEERING_STATIC and PEERING_DYNAMIC routes, the name of the originating SUBNET/STATIC/DYNAMIC route. - `region` string — Region of the route. DYNAMIC, PEERING_DYNAMIC, POLICY_BASED and ADVERTISED routes only. If set for POLICY_BASED route, this is a region of VLAN attachments for Cloud Interconnect the route applies to. If set to "all" for POLICY_BASED route, the route applies to VLAN attachments of Cloud Interconnect in all regions. - `advertisedRouteSourceRouterUri` string — For ADVERTISED dynamic routes, the URI of the Cloud Router that advertised the corresponding IP prefix in format "projects/{project}/regions/{region}/routers/{router}". - `instanceTags` string[] — Instance tags of the route. - `destPortRanges` string[] — Destination port ranges of the route. POLICY_BASED routes only. - `routeType` 'ROUTE_TYPE_UNSPECIFIED' | 'SUBNET' | 'STATIC' | 'DYNAMIC' | 'PEERING_SUBNET' | 'PEERING_STATIC' | 'PEERING_DYNAMIC' | 'POLICY_BASED' | 'ADVERTISED' — Type of route. - `nextHop` string — String type of the next hop of the route (for example, "VPN tunnel"). Deprecated in favor of the next_hop_type and next_hop_uri fields, not used in new tests. - `displayName` string — Name of a route. - `networkUri` string — URI of a VPC network where route is located in format "projects/{project}/global/networks/{network}". - `priority` integer — Priority of the route. - `uri` string — URI of a route in format "projects/{project}/global/routes/{route}". SUBNET, STATIC, PEERING_SUBNET (only for peering network) and POLICY_BASED routes only. - `srcIpRange` string — Source IP address range of the route. POLICY_BASED routes only. - `nextHopNetworkUri` string — URI of a VPC network where the next hop resource is located in format "projects/{project}/global/networks/{network}". - `nextHopUri` string — URI of the next hop resource. - `firewall` FirewallInfo — For display only. Metadata associated with a VPC firewall rule, an implied VPC firewall rule, or a firewall policy rule. - `networkUri` string — The URI of the VPC network that the firewall rule is associated with in format "projects/{project}/global/networks/{network}". This field is not applicable to hierarchical firewall policy rules. - `displayName` string — The display name of the firewall rule. This field might be empty for firewall policy rules. - `policyPriority` integer — The priority of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. - `priority` integer — The priority of the firewall rule. - `targetTags` string[] — The target tags defined by the VPC firewall rule. This field is not applicable to firewall policy rules. - `uri` string — The URI of the firewall rule in format "projects/{project}/global/firewalls/{firewall}". This field is not applicable to implied VPC firewall rules. - `policyUri` string — The URI of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. Format: * `locations/global/firewallPolicies/{policy_id}` (hierarchical policy) * `projects/{project_id}/global/firewallPolicies/{policy_id}` (global network firewall policy) * `projects/{project_id}/regions/{region}/firewallPolicies/{policy_id}` (regional network firewall policy) - `policy` string — The name of the firewall policy that this rule is associated with. This field is not applicable to VPC firewall rules and implied VPC firewall rules. - `targetType` 'TARGET_TYPE_UNSPECIFIED' | 'INSTANCES' | 'INTERNAL_MANAGED_LB' — Target type of the firewall rule. - `action` string — Possible values: ALLOW, DENY, APPLY_SECURITY_PROFILE_GROUP - `direction` string — Possible values: INGRESS, EGRESS - `firewallRuleType` 'FIREWALL_RULE_TYPE_UNSPECIFIED' | 'HIERARCHICAL_FIREWALL_POLICY_RULE' | 'VPC_FIREWALL_RULE' | 'IMPLIED_VPC_FIREWALL_RULE' | 'SERVERLESS_VPC_ACCESS_MANAGED_FIREWALL_RULE' | 'NETWORK_FIREWALL_POLICY_RULE' | 'NETWORK_REGIONAL_FIREWALL_POLICY_RULE' | 'SYSTEM_NETWORK_FIREWALL_POLICY_RULE' | 'SYSTEM_REGIONAL_NETWORK_FIREWALL_POLICY_RULE' | 'UNSUPPORTED_FIREWALL_POLICY_RULE' | 'TRACKING_STATE' | 'ANALYSIS_SKIPPED' — The firewall rule's type. - `targetServiceAccounts` string[] — The target service accounts specified by the firewall rule. - `vpnTunnel` VpnTunnelInfo — For display only. Metadata associated with a Compute Engine VPN tunnel. - `remoteGateway` string — URI of a VPN gateway at remote end of the tunnel. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (GCP HA VPN gateway) * `projects/{project_id}/global/peerVpnGateways/{peer_vpn_gateway_id}` (GCP peer VPN gateway) - `region` string — Name of a Google Cloud region where this VPN tunnel is configured. - `sourceGatewayIp` string — Local VPN gateway's IP address. - `sourceGateway` string — URI of the VPN gateway at local end of the tunnel. Format: * `projects/{project_id}/regions/{region}/vpnGateways/{vpn_gateway_id}` (HA VPN gateway) * `projects/{project_id}/regions/{region}/targetVpnGateways/{target_vpn_gateway_id}` (Classic VPN gateway) - `displayName` string — Name of a VPN tunnel. - `remoteGatewayIp` string — Remote VPN gateway's IP address. - `networkUri` string — URI of the VPC network where the VPN tunnel is configured. Format: `projects/{project_id}/global/networks/{network_id}` - `uri` string — URI of the VPN tunnel. Format: `projects/{project_id}/regions/{region}/vpnTunnels/{vpn_tunnel_id}` - `routingType` 'ROUTING_TYPE_UNSPECIFIED' | 'ROUTE_BASED' | 'POLICY_BASED' | 'DYNAMIC' — Type of the routing policy. - `proxyConnection` ProxyConnectionInfo — For display only. Metadata associated with ProxyConnection. - `newDestinationIp` string — Destination IP address of a new connection. - `networkUri` string — URI of the VPC network where connection is proxied. Format: `projects/{project_id}/global/networks/{network_id}` - `newSourceIp` string — Source IP address of a new connection. - `oldDestinationIp` string — Destination IP address of an original connection - `oldSourcePort` integer — Source port of an original connection. Only valid when protocol is TCP or UDP. - `oldDestinationPort` integer — Destination port of an original connection. Only valid when protocol is TCP or UDP. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `oldSourceIp` string — Source IP address of an original connection. - `newSourcePort` integer — Source port of a new connection. Only valid when protocol is TCP or UDP. - `newDestinationPort` integer — Destination port of a new connection. Only valid when protocol is TCP or UDP. - `subnetUri` string — URI of the proxy subnet. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `serverlessNeg` ServerlessNegInfo — For display only. Metadata associated with the serverless network endpoint group backend. - `negUri` string — URI of the serverless network endpoint group in format "projects/{project}/regions/{region}/networkEndpointGroups/{network_endpoint_group}". - `description` string — A description of the step. Usually this is a summary of the state. - `hybridSubnet` HybridSubnetInfo — For display only. Metadata associated with a hybrid subnet. - `uri` string — URI of the hybrid subnet. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `displayName` string — Name of a hybrid subnet. - `region` string — Name of a Google Cloud region where the hybrid subnet is configured. - `gkeNetworkPolicy` GkeNetworkPolicyInfo — For display only. Metadata associated with a GKE Network Policy. - `direction` string — Possible values: INGRESS, EGRESS - `action` string — Possible values: ALLOW, DENY - `uri` string — The URI of the Network Policy. Format for a Network Policy in a zonal cluster: `projects//zones//clusters//k8s/namespaces//networking.k8s.io/networkpolicies/` Format for a Network Policy in a regional cluster: `projects//locations//clusters//k8s/namespaces//networking.k8s.io/networkpolicies/` - `displayName` string — The name of the Network Policy. - `storageBucket` StorageBucketInfo — For display only. Metadata associated with Storage Bucket. - `bucket` string — Cloud Storage Bucket name. - `datastreamPrivateConnection` PrivateConnectionInfo — For display only. Metadata associated with a Private Connection. - `uri` string — URI of the Private Connection in format "projects/{project_id}/locations/{location}/privateConnections/{private_connection_id}" - `serverlessExternalConnection` ServerlessExternalConnectionInfo — For display only. Metadata associated with a serverless public connection. - `selectedIpAddress` string — Selected starting IP address, from the Google dynamic address pool. - `gkePod` GkePodInfo — For display only. Metadata associated with a Google Kubernetes Engine (GKE) Pod. - `ipAddress` string — IP address of a GKE Pod. If the Pod is dual-stack, this is the IP address relevant to the trace. - `networkUri` string — URI of the network containing the GKE Pod. Format: `projects/{project_id}/global/networks/{network_id}` - `podUri` string — URI of a GKE Pod. For Pods in regional Clusters, the URI format is: `projects/{project}/locations/{location}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` For Pods in zonal Clusters, the URI format is: `projects/{project}/zones/{zone}/clusters/{cluster}/k8s/namespaces/{namespace}/pods/{pod}` - `nat` NatInfo — For display only. Metadata associated with NAT. - `oldDestinationIp` string — Destination IP address before NAT translation. - `type` 'TYPE_UNSPECIFIED' | 'INTERNAL_TO_EXTERNAL' | 'EXTERNAL_TO_INTERNAL' | 'CLOUD_NAT' | 'PRIVATE_SERVICE_CONNECT' | 'GKE_POD_IP_MASQUERADING' — Type of NAT. - `newDestinationIp` string — Destination IP address after NAT translation. - `networkUri` string — URI of the VPC network where NAT translation takes place. Format: `projects/{project_id}/global/networks/{network_id}` - `newDestinationPort` integer — Destination port after NAT translation. Only valid when protocol is TCP or UDP. - `natGatewayName` string — The name of Cloud NAT Gateway. Only valid when type is CLOUD_NAT. - `newSourcePort` integer — Source port after NAT translation. Only valid when protocol is TCP or UDP. - `protocol` string — IP protocol in string format, for example: "TCP", "UDP", "ICMP". - `cloudNatGatewayType` 'CLOUD_NAT_GATEWAY_TYPE_UNSPECIFIED' | 'PUBLIC_NAT44' | 'PUBLIC_NAT64' | 'PRIVATE_NAT_NCC' | 'PRIVATE_NAT_HYBRID' | 'PRIVATE_NAT64' — Type of Cloud NAT gateway. Only valid when `type` is CLOUD_NAT. - `oldSourcePort` integer — Source port before NAT translation. Only valid when protocol is TCP or UDP. - `oldDestinationPort` integer — Destination port before NAT translation. Only valid when protocol is TCP or UDP. - `newSourceIp` string — Source IP address after NAT translation. - `routerUri` string — URI of the Cloud Router. Only valid when type is CLOUD_NAT. Format: `projects/{project_id}/regions/{region}/routers/{router_id}` - `oldSourceIp` string — Source IP address before NAT translation. - `projectId` string — Project ID that contains the configuration this step is validating. - `directVpcEgressConnection` DirectVpcEgressConnectionInfo — For display only. Metadata associated with a serverless direct VPC egress connection. - `selectedIpRange` string — Selected IP range. - `region` string — Region in which the Direct VPC egress is deployed. - `networkUri` string — URI of the VPC network for direct egress. Format: `projects/{project_id}/global/networks/{network_id}` - `selectedIpAddress` string — Selected starting IP address, from the selected IP range. - `subnetworkUri` string — URI of the subnetwork for direct egress. Format: `projects/{project_id}/regions/{region}/subnetworks/{subnetwork_id}` - `ipMasqueradingSkipped` IpMasqueradingSkippedInfo — For display only. Contains information about why IP masquerading was skipped for the packet. - `reason` 'REASON_UNSPECIFIED' | 'DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE' | 'DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE' | 'DESTINATION_ON_SAME_NODE' | 'DEFAULT_SNAT_DISABLED' | 'NO_MASQUERADING_FOR_IPV6' | 'POD_USES_NODE_NETWORK_NAMESPACE' | 'NO_MASQUERADING_FOR_RETURN_PACKET' — Reason why IP masquerading was not applied. - `nonMasqueradeRange` string — The matched non-masquerade IP range. Only set if reason is DESTINATION_IP_IN_CONFIGURED_NON_MASQUERADE_RANGE or DESTINATION_IP_IN_DEFAULT_NON_MASQUERADE_RANGE. - `ngfwPacketInspection` NgfwPacketInspectionInfo — For display only. Metadata associated with a layer 7 packet inspection by the firewall. - `securityProfileGroupUri` string — URI of the security profile group associated with this firewall packet inspection. Format: `organizations/{organization_id}/locations/global/securityProfileGroups/{security_profile_group_id}` - `error` Status — The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors). - `code` integer — The status code, which should be an enum value of google.rpc.Code. - `message` string — A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the google.rpc.Status.details field, or localized by the client. - `details` object[] — A list of messages that carry the error details. There is a common set of message types for APIs to use. - `displayName` string — Output only. The display name of a Connectivity Test. - `bypassFirewallChecks` boolean — Whether the analysis should skip firewall checking. Default value is false. - `protocol` string — IP Protocol of the test. When not provided, "TCP" is assumed. - `createTime` string, google-datetime — Output only. The time the test was created. - `description` string — The user-supplied description of the Connectivity Test. Maximum of 512 characters. - `destination` Endpoint — Source or destination of the Connectivity Test. - `forwardingRuleTarget` 'FORWARDING_RULE_TARGET_UNSPECIFIED' | 'INSTANCE' | 'LOAD_BALANCER' | 'VPN_GATEWAY' | 'PSC' — Output only. Specifies the type of the target of the forwarding rule. - `cloudFunction` CloudFunctionEndpoint — Wrapper for Cloud Function attributes. - `uri` string — A [Cloud Function](https://cloud.google.com/functions) name. - `networkType` 'NETWORK_TYPE_UNSPECIFIED' | 'GCP_NETWORK' | 'NON_GCP_NETWORK' | 'INTERNET' — For source endpoints, type of the network where the endpoint is located. Not relevant for destination endpoints. - `loadBalancerId` string — Output only. ID of the load balancer the forwarding rule points to. Empty for forwarding rules not related to load balancers. - `forwardingRule` string — A forwarding rule and its corresponding IP address represent the frontend configuration of a Google Cloud load balancer. Forwarding rules are also used for protocol forwarding, Private Service Connect and other network services to provide forwarding information in the control plane. Applicable only to destination endpoint. Format: `projects/{project}/global/forwardingRules/{id}` or `projects/{project}/regions/{region}/forwardingRules/{id}` - `redisInstance` string — A [Redis Instance](https://cloud.google.com/memorystore/docs/redis) URI. Applicable only to destination endpoint. - `cloudRunRevision` CloudRunRevisionEndpoint — Wrapper for Cloud Run revision attributes. - `uri` string — A [Cloud Run](https://cloud.google.com/run) [revision](https://cloud.google.com/run/docs/reference/rest/v1/namespaces.revisions/get) URI. The format is: projects/{project}/locations/{location}/revisions/{revision} - `serviceUri` string — Output only. The URI of the Cloud Run service that the revision belongs to. The format is: projects/{project}/locations/{location}/services/{service} - `ipAddress` string — The IP address of the endpoint, which can be an external or internal IP. - `cloudRunJob` string — A [Cloud Run](https://cloud.google.com/run) [job](https://docs.cloud.google.com/run/docs/reference/rest/v2/projects.locations.jobs#Job) URI. Applicable only to source endpoint. The format is: projects/{project}/locations/{location}/jobs/{job} - `loadBalancerType` 'LOAD_BALANCER_TYPE_UNSPECIFIED' | 'HTTPS_ADVANCED_LOAD_BALANCER' | 'HTTPS_LOAD_BALANCER' | 'REGIONAL_HTTPS_LOAD_BALANCER' | 'INTERNAL_HTTPS_LOAD_BALANCER' | 'SSL_PROXY_LOAD_BALANCER' | 'TCP_PROXY_LOAD_BALANCER' | 'INTERNAL_TCP_PROXY_LOAD_BALANCER' | 'NETWORK_LOAD_BALANCER' | 'LEGACY_NETWORK_LOAD_BALANCER' | 'TCP_UDP_INTERNAL_LOAD_BALANCER' — Output only. Type of the load balancer the forwarding rule points to. - `gkeMasterCluster` string — A cluster URI for [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture). - `redisCluster` string — A [Redis Cluster](https://cloud.google.com/memorystore/docs/cluster) URI. Applicable only to destination endpoint. - `port` integer — The IP protocol port of the endpoint. Only applicable when protocol is TCP or UDP. - `appEngineVersion` AppEngineVersionEndpoint — Wrapper for the App Engine service version attributes. - `uri` string — An [App Engine](https://cloud.google.com/appengine) [service version](https://cloud.google.com/appengine/docs/admin-api/reference/rest/v1/apps.services.versions) name. - `cloudSqlInstance` string — A [Cloud SQL](https://cloud.google.com/sql) instance URI. - `projectId` string — For source endpoints, endpoint project ID. Used according to the `network_type`. Not relevant for destination endpoints. - `gkePod` string — A [GKE Pod](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) URI. - `instance` string — A Compute Engine instance URI. - `dmsPrivateConnection` string — A [DMS Private Connection](https://docs.cloud.google.com/database-migration/docs/reference/rest/v1/projects.locations.privateConnections) name format: projects/{project}/locations/{location}/privateConnections/{privateConnection}. - `network` string — A VPC network URI. For source endpoints, used according to the `network_type`. For destination endpoints, used only when the source is an external IP address endpoint, and the destination is an internal IP address endpoint. - `fqdn` string — DNS endpoint of [Google Kubernetes Engine cluster control plane](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture). Requires gke_master_cluster to be set, can't be used simultaneoulsly with ip_address or network. Applicable only to destination endpoint. ## Response `200` Successful response --- [API](https://skmtc.net/google/apis/networkmanagement.md) · [All operations](https://skmtc.net/google/apis/networkmanagement/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/networkmanagement/versions/55bd5873861a/schema)