---
title: Create a VPC Peering Connection with GCP
description: Use this procedure to create a VPC Peering connection between
  Capella hosted with GCP and your application's VPC on GCP.
pubDate: 2026-08-17T09:53:44.266Z
antora:
  editUrl: https://github.com/couchbase/docs-capella/edit/main/modules/clouds/pages/vpc-peering/peer-gcp.adoc
  xref: xref:cloud:clouds:vpc-peering/peer-gcp.adoc[]
---

[Consult the llms.txt file for a full list of contents](/llms.txt)
[View original HTML](/cloud/clouds/vpc-peering/peer-gcp.html)

# Create a VPC Peering Connection with GCP

> Use this procedure to create a VPC Peering connection between Capella hosted with GCP and your application's VPC on GCP. 

> [!CAUTION]
> Limitations for XDCR
> 
> Capella clusters on GCP do not support XDCR over a VPC Peering connection when both the source and target clusters:
> 
> * Are deployed on Capella through GCP.
> * Have private endpoints enabled.
> * Share the same major network prefix of either `10.x.x.x`, `172.x.x.x`, or `192.x.x.x`.
> 
> To use XDCR on Capella with this configuration, you must [replicate over private endpoints](../../clusters/xdcr/manage-xdcr-security.md#private-endpoints).

## [](#prerequisites)Prerequisites

To configure Couchbase Capella VPC peering with GCP, you need the following:

* A GCP [service account](https://cloud.google.com/iam/docs/service-accounts) with these roles:

  1. [DNS Administrator](https://cloud.google.com/iam/docs/understanding-roles#dns.admin) (`roles/dns.admin`)
  2. [Compute Network Admin](https://cloud.google.com/iam/docs/understanding-roles#compute.networkAdmin) (`roles/compute.networkAdmin`)
* One of the following Capella roles:

  * [Organization Owner](../../organizations/organization-user-roles.md#organization-role-organization-owner)
  * [Project Owner](../../projects/project-roles.md#project-owner-role)
* The [gcloud Command Line Interface (CLI)](https://cloud.google.com/sdk/gcloud) installed and configured.

## [](#procedure)Procedure

1. In Capella, add a new private network for your cluster:

  1. In the navigation breadcrumbs in the Capella UI, do 1 of the following:

    1. Click your organization name and go to **Operational**.
    2. Click your current project name or search for a project and go to **Operational**.
    3. Expand the cluster breadcrumb and search for a cluster.
  2. Select the cluster where you want to configure VPC peering.
  3. Go to **Settings** **VPC Peering**.
  4. Click **Set Up VPC**.
  5. Confirm the prerequisites and click **Next**.
2. In Capella, configure your private network details:

  1. Fill out the _Network Details_ fields.  
  > [!TIP]  
  > You can find most of the required info for these fields on the page for your chosen VPC in GCP.  
  Name  
  Enter a descriptive name for the new private network.  
  GCP Project ID  
  The unique identifier for your [GCP project](https://cloud.google.com/resource-manager/docs/creating-managing-projects). This is typically autogenerated in the form of `rock-galaxy-123456` or similar.  
  GCP Network Name  
  The [GCP VPC network name](https://cloud.google.com/vpc/docs/create-modify-vpc-networks#viewing-networks).  
  Service Account Email  
  The email address of the associated [service account](https://cloud.google.com/iam/docs/service-accounts). This looks like `<service-account-id>@rock-galaxy-123456.iam.gserviceaccount.com`.  
  CIDR Block  
  The GCP VPC CIDR block of network in which your application runs. This cannot overlap with your Capella CIDR Block.
3. Click **Set Up VPC**.  
Capella sets up the private network. This typically takes up to a minute. If successful you should see the private network added to the list of private networks, then you may briefly see the cluster enter a "Deploying" state while the new network is set up.  
If there's a problem with the private network then Capella will tell you via an error message.
4. Once setup is complete, you can see the new network listed in the list of networks. CAUTION: While the network status is shown as Complete, there are some final steps you must carry out before you can access your Capella cluster from your VPC over this private network.
5. On the **VPC Peering** screen, click the listing for the new Private Network.  
This screen shows two commands to accept the peering request and link your VPC to the appropriate DNS server for hostname resolution. For example:  
```console  
$ gcloud compute networks peerings create <your-peer-name> --network=<your-vpc-network-name> --peer-project <your-gcp-project-id> --peer-network <capella-vpc-network-name>  
```  
```console  
$ gcloud dns managed-zones create <your-zone-name> --description="Peering Zone to Capella" --dns-name=<dns-name-suffix> --account=<service-account-email-address> --networks=<your-vpc-network-name> --target-network=<your-vpc-network-name> --target-project=<your-gcp-project-id> --visibility=private  
```
6. Using the [gcloud CLI](https://cloud.google.com/sdk/gcloud), run the commands provided by Capella.

## [](#next-steps)Next Steps

* [Verify VPC Peering Connectivity](verify-troubleshoot.md)