Create and manage mirroring deployments

Mirroring deployment lets you expose a zonal set of load balanced appliances so that mirroring deployment can be used by the mirroring endpoint groups.

This page explains how to create and manage mirroring deployment using the Google Cloud CLI.

Before you begin

• You must enable the Network Security API in your project.
• Install the gcloud CLI if you want to run the gcloud command-line examples in this guide.
• You have a mirroring deployment group.
• You have a forwarding rule to direct network traffic to an internal load balancer. For more information, see Set up producer services.

Roles

To get the permissions that you need to create, view, or delete mirroring deployments, ask your administrator to grant you the necessary Identity and Access Management (IAM) roles on your project. For more information about granting roles, see Manage access to projects, folders, and organizations.

To check the progress of the operations listed on this page, make sure that your user role has the following Mirroring Deployment Admin role (roles/networksecurity.mirroringDeploymentAdmin) permissions:

• networksecurity.mirroringDeployments.create
• networksecurity.mirroringDeployments.delete
• networksecurity.mirroringDeployments.get
• networksecurity.mirroringDeployments.list

Create a mirroring deployment

Create a mirroring deployment to represent the producer side within a zone and associate it with the mirroring deployment group.

 gcloud network-security mirroring-deployments \
 create DEPLOYMENT \
 --location ZONE \
 --forwarding-rule FWD_RULE \
 --forwarding-rule-location REGION \
 --mirroring-deployment-group DEPLOYMENT_GROUP_ID \
 --no-async

resource "google_network_security_mirroring_deployment" "default" {
 mirroring_deployment_id = "mirroring-deployment"
 location = "us-central1-a"
 forwarding_rule = google_compute_forwarding_rule.default.id
 mirroring_deployment_group = google_network_security_mirroring_deployment_group.default.id
}

View mirroring deployment

You can view the details of a specific mirroring deployment in a project.

gcloud network-security mirroring-deployments \
 describe DEPLOYMENT \
 --location ZONE \
 --project PROJECT

List mirroring deployments

You can list all the mirroring deployments in a project.

 gcloud network-security mirroring-deployments list \
 --location ZONE \
 --project PROJECT

Delete a mirroring deployment

You can delete a mirroring deployment by specifying its name, location, and project. However, if a mirroring deployment is referenced by a mirroring deployment group, then it cannot be deleted.

 gcloud network-security mirroring-deployments \
 delete DEPLOYMENT \
 --location ZONE \
 --project PROJECT \
 --no-async

What's next

• Mirroring deployment groups overview
• Create and manage mirroring deployment groups