Troubleshoot Hybrid Network Connectivity Tests

What Network Intelligence Center Connectivity Tests Is

Connectivity Tests is a diagnostic and static configuration analysis tool within Network Intelligence Center. It simulates the expected forwarding path of a packet through your VPC network, Cloud VPN tunnels, VLAN attachments, and VPC Network Peering connections based on an abstract state machine model of Google Cloud networking.

How It Meets the Requirements

• Identifies Dropping Firewall Rules: Connectivity Tests analyzes both VPC firewall rules and hierarchical firewall policies along the end-to-end path, explicitly identifying whether an ingress or egress firewall rule is blocking traffic on TCP port 8443.
• Validates Hybrid Routing: It evaluates whether the destination subnet is properly advertised by Cloud Router across the Cloud VPN tunnel and whether the VPC contains valid return routes.
• Root Cause Isolation: The configuration analysis traces each discrete hop through the network and highlights exact failure points without requiring agent installation on endpoints.

Key Advantages and Capabilities

• Static Path Modeling: Simulates packet traces across Google Cloud networking components such as Cloud Routers, VPN gateways, and VPC firewall rules.
• Live Data Plane Analysis: Can send active probe packets between supported endpoints to validate data plane reachability, packet loss, and latency.
• Multi-Hop Visibility: Details hop-by-hop forwarding behavior across hybrid spokes, peered VPCs, and Shared VPC configurations.
• Zero Overhead: Does not generate continuous data ingestion charges or require custom log parsing pipelines for one-off diagnostic runs.

Why This Is Optimal

Using Connectivity Tests provides immediate, visual root-cause diagnostics for hybrid-to-cloud connection failures by checking routes and firewall configurations in a single step.