Cloud SQL Auth Proxy
E703152
Cloud SQL Auth Proxy is a secure, client-side connector that manages authentication and encrypted connections between applications and Google Cloud SQL databases without exposing database credentials or IPs.
Statements (47)
| Predicate | Object |
|---|---|
| instanceOf |
database connectivity proxy
ⓘ
software tool ⓘ |
| avoids |
exposing database IP addresses
ⓘ
exposing database credentials to applications ⓘ |
| connectsTo | Cloud SQL instances NERFINISHED ⓘ |
| developer | Google ⓘ |
| distributedAs |
Docker image
ⓘ
standalone binary ⓘ |
| documentationURL | https://cloud.google.com/sql/docs/mysql/sql-proxy ⓘ |
| handles |
automatic certificate rotation
ⓘ
automatic encryption configuration ⓘ |
| integratesWith |
Google Cloud IAM
NERFINISHED
ⓘ
gcloud CLI NERFINISHED ⓘ |
| language | Go NERFINISHED ⓘ |
| maintainer | Google Cloud SQL team NERFINISHED ⓘ |
| manages |
authentication to Cloud SQL instances
ⓘ
encrypted connections to Cloud SQL databases ⓘ |
| openSource | true ⓘ |
| partOf | Google Cloud Platform NERFINISHED ⓘ |
| provides | secure client-side connector ⓘ |
| recommendedFor | secure access to Cloud SQL from untrusted networks ⓘ |
| reducesNeedFor |
manual SSL certificate management
ⓘ
public IPs on Cloud SQL instances ⓘ |
| replacedBy | Cloud SQL Auth Proxy v2 NERFINISHED ⓘ |
| requires | Google Cloud credentials ⓘ |
| runsOn |
App Engine flexible environment
NERFINISHED
ⓘ
Cloud Run services NERFINISHED ⓘ Google Compute Engine VMs NERFINISHED ⓘ Google Kubernetes Engine clusters NERFINISHED ⓘ local development machines ⓘ |
| securityFeature |
mutual TLS between proxy and Cloud SQL
ⓘ
no direct credential storage in application code ⓘ |
| sourceRepository | https://github.com/GoogleCloudPlatform/cloud-sql-proxy ⓘ |
| supports |
Cloud SQL for MySQL
NERFINISHED
ⓘ
Cloud SQL for PostgreSQL NERFINISHED ⓘ Cloud SQL for SQL Server NERFINISHED ⓘ Linux NERFINISHED ⓘ TCP connections ⓘ Unix domain sockets ⓘ Windows NERFINISHED ⓘ macOS NERFINISHED ⓘ service account authentication ⓘ workload identity on GKE ⓘ |
| usedFor |
local development database access
ⓘ
production database connectivity ⓘ |
| uses |
IAM-based authentication
ⓘ
TLS encryption ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.