cloud-run-static-outbound-ip

Cloud Run Static Outbound IP Address

Problem

Cloud Run uses a shared pool of dynamic outbound IP addresses that change frequently and are shared across all Google Cloud customers. When external services need to whitelist your IP (for rate limit exemptions, firewall rules, or special access), you need a static, predictable outbound IP.

Context / Trigger Conditions

• External service asks for IP address to whitelist
• Cloud Run requests are being blocked by IP-based rate limiting
• Need to identify your traffic to external APIs
• Running crawlers/scrapers that need consistent source IP
• Error messages about "IP not whitelisted" or similar

Solution

Architecture

Cloud Run → VPC Connector → VPC Network → Cloud NAT (static IP) → Internet

Step 1: Reserve Static IP Address

gcloud compute addresses create [NAME]-nat-ip \
  --region=[REGION] \
  --description="Static IP for Cloud Run outbound traffic"

# Get the actual IP address
gcloud compute addresses describe [NAME]-nat-ip \
  --region=[REGION] \
  --format="value(address)"

Step 2: Create Cloud Router

gcloud compute routers create [NAME]-router \
  --network=default \
  --region=[REGION]

Step 3: Create Cloud NAT with Static IP

gcloud compute routers nats create [NAME]-nat \
  --router=[NAME]-router \
  --region=[REGION] \
  --nat-external-ip-pool=[NAME]-nat-ip \
  --nat-all-subnet-ip-ranges

Step 4: Enable VPC Access API

gcloud services enable vpcaccess.googleapis.com

Step 5: Create Serverless VPC Access Connector

gcloud compute networks vpc-access connectors create [NAME]-connector \
  --region=[REGION] \
  --network=default \
  --range=10.8.0.0/28 \
  --min-instances=2 \
  --max-instances=3 \
  --machine-type=e2-micro

Note: The IP range must not conflict with existing subnets. Use a /28 CIDR block.

Step 6: Update Cloud Run to Use VPC Connector

For Cloud Run Jobs:

gcloud run jobs deploy [JOB-NAME] \
  --image=[IMAGE] \
  --region=[REGION] \
  --vpc-connector=[NAME]-connector \
  --vpc-egress=all-traffic \
  [... other flags ...]