GKE gateway API: Control open ports on default firewall rule

[irshada]

I am working with GKE gateway API (gatewayClassName: gke-l7-rilb), which created a firewall rule opening a wide range of ports (tcp:0-65535). Although access to the ports is limited to the Google ranges for load balancers as well as any proxy subnet range, I wanted to limit the ports instead opening all.

Going over the official docs (this too) did not help me. Can anyone please help me identify how can I control the opening ports, or if I can stop gateway API creating this firewall rule and create a custom rule on my own? Any help in this regard is very much appreciated.

[garisingh · Accepted solution]

See https://www.googlecloudcommunity.com/gc/Google-Kubernetes-Engine-GKE/Gateway-API-opens-0-65535-TCP-p...

You can create your own custom firewall rules and set them to a higher priority than the auto-generated ones.