IAP's TCP forwarding feature allows you to connect to any TCP port on your compute engine instance. For typical TCP traffic, IAP directs all traffic to a specified instance. Once connected to the bastion host, you will be able to. Iap tcp forwarding also provides you.
Zac Burgess
By creating a tunnel using IAP TCP forwarding, you can easily access VMs with only private IP addresses. I hope this article was helpful in some way. And what’s more, this also works for private vm’s without an external ip address. I want to be able to access the server and view files while keeping costs as low as possible, so I chose GCE (Google Compute Engine) instead of GKE (Google Kubernetes Engine) or Cloud Run.
After configuration is completed by terraform, you will be able to use the gcloud tool to enable tcp forwarding for port 3389 (rdp).
IAP TCP forwarding also provides fine-grained control over who is allowed to establish tunnels and to which VM instances users are allowed to connect. Allows you to authenticate user tcp traffic through iap before sending it to your vm instances. IAP tcp forwarding makes it easy to achieve secure ssh connections to VM instances. Explains the architecture of iap tcp forwarding. Iap tcp forwarding allows you to establish an encrypted tunnel over which you can forward ssh, rdp, and other traffic to vm instances.
