To connect to a resource in an external network (an on-premises network oranother Virtual Private Cloud (VPC) network), the external network andCloud Data Fusion instance must be connected through the sameVPC network.

To connect an external network to the Cloud Data Fusion VPCnetwork using Cloud VPN tunnels with border gateway protocol (BGP) routing orVLAN attachments, do the following:

• Ensure your VPC network is connected to the external networkusing aCloud VPN tunnelor a VLAN attachment forDedicated InterconnectorPartner Interconnect.
• Ensure the BGP sessions on the Cloud Router managing yourCloud VPN tunnels or VLAN attachments have received specificprefixes (destinations) from your external network. Default routes(destination 0.0.0.0/0) cannot be imported into the Cloud Data FusionVPC network because that network has its own local defaultroute. Local routes for a destination are always used, even though theCloud Data Fusion peering is configured to import custom routes fromyour VPC network.
• Identify the peering connectionsproduced by the private services connection. Depending on the service, theprivate services connection might create one or more of the following peeringconnections, but not necessarily all of them:
  • datafusion-googleapis-com
  • servicenetworking-googleapis-com
• Update all of the peering connectionsto enable Export custom routes.
• Identify the allocated rangeused by the private services connection.
• Create a Cloud Router custom advertised routefor the allocated range on the Cloud Routers managing BGP sessionsfor your Cloud VPN tunnels or VLAN attachments.

What's next

• Learn how tocreate a private instance in Cloud Data Fusion.