gcloud - Is Google Cloud Run Service to Service Communication internal like k8s's cluster.local?

Question

Cloud Run is providing a domain *.run.app to access the service deployed. I am wondering how Google Cloud Run handling requests from one to another Cloud Run service. Is all the service to service communication internal even we have a custom domain instead of *.run.app?

question from:https://stackoverflow.com/questions/65865468/is-google-cloud-run-service-to-service-communication-internal-like-k8ss-cluster

Answer 1

The definition of "internal" is not clear.

• Your request stay in the Google Network. Is it internal or external?
• To resolve the Custom Domain, a DNS resolution request (port 53) is performed on the public network, but the content of the request stays in the Google Network and forwarded after the resolution. Is it internal or external?

So, as long as you use Google Services (in premium network option), you don't go out of the Google Network and thus you can consider this as highly secured.

I assume, my answer isn't very clear, in fact all depend if you trust or not the Google Cloud network.