I have enabled Private Google Access for my VPC. I enabled access for private.googleapis.com ( used link. But while running any OS upgrade like Windows Update or Linux Update (sudo apt-get update
) I'm not able to connect the repositories. It worked after I enable Cloud NAT. Not sure why?
Asked
Active
Viewed 273 times
-2

Serhii Rohoza
- 4,287
- 2
- 16
- 29

AMIATAVA CHAKRABORTY
- 25
- 1
1 Answers
1
Please have a look at the documentation Private Google Access:
VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services.
and
Private Google Access has no effect on instances that have external IP addresses. Instances with external IP addresses can access the internet, according to the internet access requirements.
also, at the documentation page Cloud NAT overview:
Cloud NAT provides outgoing connectivity for the following resources:
- Compute Engine virtual machine (VM) instances without external IP addresses
As a result, Private Google Access provides your VMs access ONLY to Google APIs and services, but to reach resources in the Internet ("like Windows Update or Linux Update") Cloud NAT is required.

Serhii Rohoza
- 4,287
- 2
- 16
- 29