---
title: VPC Peering with GCP
description: Use this procedure to create a VPC Peering connection between
  Capella Analytics hosted with GCP and your application's VPC on GCP.
pubDate: 2026-08-17T09:53:44.266Z
antora:
  editUrl: https://github.com/couchbaselabs/docs-columnar/edit/main/modules/admin/pages/vpc-peering-gcp.adoc
  xref: xref:analytics:admin:vpc-peering-gcp.adoc[]
---

[Consult the llms.txt file for a full list of contents](/llms.txt)
[View original HTML](/analytics/admin/vpc-peering-gcp.html)

# VPC Peering with GCP

> Use this procedure to create a VPC Peering connection between Capella Analytics hosted with GCP and your application's VPC on GCP. 

## [](#prerequisites)Prerequisites

To configure Capella Analytics VPC peering with GCP, you need the following:

* A GCP [service account](https://cloud.google.com/iam/docs/service-accounts) with these roles:

  1. [DNS Administrator](https://cloud.google.com/iam/docs/understanding-roles#dns.admin) (`roles/dns.admin`)
  2. [Compute Network Admin](https://cloud.google.com/iam/docs/understanding-roles#compute.networkAdmin) (`roles/compute.networkAdmin`)
* One of the following Capella Analytics roles:

  * [Organization Owner](../../cloud/organizations/organization-user-roles.md#organization-role-organization-owner)
  * [Project Owner](../../cloud/projects/project-roles.md#project-owner-role)
* The [gcloud Command Line Interface (CLI)](https://cloud.google.com/sdk/gcloud) installed and configured.

## [](#procedure)Procedure

1. In Capella Analytics, add a new private network for your cluster.

  1. Open the cluster where you want to create the new private network.
  2. Click the **Settings** tab.
  3. In the navigation pane, click **VPC Peering**.
  4. Click **Set Up VPC**.
  5. Confirm the prerequisites and click **Next**.
2. In Capella Analytics, configure your private network details.

  1. Fill out the _Network Details_ fields.  
  > [!TIP]  
  > You can find most of the required info for these fields on the page for your chosen VPC in GCP.  
  Name  
  Enter a descriptive name for the new private network.  
  GCP Project ID  
  The unique identifier for your [GCP project](https://cloud.google.com/resource-manager/docs/creating-managing-projects). This is typically autogenerated in the form of `rock-galaxy-123456` or similar.  
  GCP Network Name  
  The [GCP VPC network name](https://cloud.google.com/vpc/docs/create-modify-vpc-networks#viewing-networks).  
  Service Account Email  
  The email address of the associated [service account](https://cloud.google.com/iam/docs/service-accounts). This looks like `<service-account-id>@rock-galaxy-123456.iam.gserviceaccount.com`.  
  CIDR Block  
  The GCP VPC CIDR block of network in which your application runs. This cannot overlap with your Capella CIDR Block.
3. Click **Set Up VPC**.  
Capella Analytics sets up the private network. This typically takes up to a minute. If successful you should see the private network added to the list of private networks, then you may briefly see the cluster enter a "Deploying" state while the new network is set up.  
If there's a problem with the private network then Capella Analytics will tell you via an error message.
4. Once setup is complete, you can see the new network listed in the list of networks.

> [!CAUTION]
> While the network status is shown as Complete, there are some final steps you must carry out before you can access your Capella Analytics cluster from your VPC over this private network.

1. On the **VPC Peering** screen, click the listing for the new Private Network.  
This screen shows two commands to accept the peering request and link your VPC to the appropriate DNS server for hostname resolution. For example:  
```console  
$ gcloud compute networks peerings create <your-peer-name> --network=<your-vpc-network-name> --peer-project <your-gcp-project-id> --peer-network <capella-vpc-network-name>  
```  
```console  
$ gcloud dns managed-zones create <your-zone-name> --description="Peering Zone to Capella" --dns-name=<dns-name-suffix> --account=<service-account-email-address> --networks=<your-vpc-network-name> --target-network=<your-vpc-network-name> --target-project=<your-gcp-project-id> --visibility=private  
```
2. Using the [gcloud CLI](https://cloud.google.com/sdk/gcloud), run the commands provided by Capella.