Dependency Controls by Velvet Rope (C++)

Enforcementdisabled
Including optional dependenciesenabled
Reporting debug logsdisabled

Policy stateREADY
SourceFILE
Local pathvertex-genai-dataplane.outboundacl
Path in google3//production/pod/realms/cloud_ml/projects/default/vertex-genai-dataplane/manifest.bzl
Loaded at2025-12-05 19:44:39
Policy violations receivermdb/cloud-ml-vertex-genai-dataplane-staging-jobs (go/outboundacl:notification-receiver)
RPC exemptions modedisabled

Production Layer

Layer nameCROSS_CLUSTER_INFRASTRUCTURE
Layer value50
SourcePOLICY

Production Scopes

Model IDLocal Instancestatemissing model verdict

RPC Dependencies

Service RPC Configurations

RPC Service nameRPC commandImportanceConstraintsExplanationTemplate origin
PlardisServiceExistsOPTIONAL
Returns replication status for Midas packages (go/midas).//configs/production/outboundacl/templates/sawmill:sawmill
SecureDataCollectionPublisherOPTIONAL
allowed_scope: LOCALHOST
Sends messages to the Secure Data Collection Service (local) (go/secure-collection).//configs/production/outboundacl/templates/security:secure_data_collection
BalancerChannelControlALWAYS_CRITICAL
GSLB (go/gslb).//configs/production/outboundacl/templates/sawmill:sawmill
//configs/production/outboundacl/templates/traffic:gslb
BorgletClientALWAYS_CRITICAL
allowed_scope: GLOBAL
Sends messages to a local Borglet on port 4901 (read from $BORGLET_PORT).//configs/production/outboundacl/templates/borg:local_borglet
//configs/production/outboundacl/templates/sawmill:sawmill
CFS.APIALWAYS_CRITICAL
CFS Coprocessor (API) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
Cns2RouterALWAYS_CRITICAL
CNS2 Router (go/cns2).//configs/production/outboundacl/templates/sawmill:sawmill
CP-bigtable_builtin-WatchALWAYS_CRITICAL
Bigtable Coprocessor (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
LoadReportingServiceALWAYS_CRITICAL
TrafficDirector is GSLB client in prod//configs/production/outboundacl/templates/sawmill:sawmill
//configs/production/outboundacl/templates/traffic:gslb
SvelteClientALWAYS_CRITICAL
Notifies about changes to files for Svelte (go/svelte).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-DeleteDirALWAYS_CRITICAL
CNS Coprocessor (DeleteDir) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
NamespaceALWAYS_CRITICAL
CNS Coprocessor (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-GetCapabilityALWAYS_CRITICAL
CNS Coprocessor (GetCapability) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
SawmillLiteMutationALWAYS_CRITICAL
Sawmill Lite Mutation service (go/sawmill-lite). Provides the server-side implementation of Sawmill Write API (go/sawmill-write-api).//configs/production/outboundacl/templates/sawmill:sawmill
RegistrationServiceALWAYS_CRITICAL
Registers with the CDPush health aggregators (go/cdpush).//configs/production/outboundacl/templates/sawmill:sawmill
ConsensusEventRecorderOPTIONAL
Sends client generated events to chubby observability tables (go/chubby).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
OverrideALWAYS_CRITICAL
Gets data on CDPush push definitions (go/cdpush).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-SplitALWAYS_CRITICAL
CFS Coprocessor curator (Split) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
MasterFolderInterfaceALWAYS_CRITICAL
CFS2 Folder Management Interface (go/cfsv2-folder-management).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-OpenFileALWAYS_CRITICAL
CNS Coprocessor (OpenFile) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
StreamzOPTIONAL
Deprecated tech API for Streamz (go/streamz-docs).//configs/production/outboundacl/templates/monitoring:monarch
StreamzManualSamplingOPTIONAL
Deprecated protocol used by ManuallySampledMetrics for Streamz (go/streamz-docs).//configs/production/outboundacl/templates/monitoring:monarch
JustificationValidationALWAYS_CRITICAL
Justification Validation Service integration (go/jvs).//configs/production/outboundacl/templates/security:data_access_logging
StorageDALWAYS_CRITICAL
D is a low-level storage system that stores bytes directly to disk or flash (go/dserver).//configs/production/outboundacl/templates/sawmill:sawmill
StreamzAggregationOPTIONAL
Streamz2: the default API (go/streamz-docs).//configs/production/outboundacl/templates/monitoring:monarch
//configs/production/outboundacl/templates/sawmill:sawmill
LogsMetadataServiceALWAYS_CRITICAL
Sawmill-region scoped, read-only service that acts as serving facade for Logs metadata entities (go/logs-metadata-service).//configs/production/outboundacl/templates/sawmill:sawmill
LocASALWAYS_CRITICAL
allowed_scope: LOCALHOST
Local Authentication Service for localhost (go/loas).//configs/production/outboundacl/templates/loas:local_locas
LocASALWAYS_CRITICAL
Local Authentication Service (go/loas).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-StatFileALWAYS_CRITICAL
CNS Coprocessor (StatFile) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
PackageMetadataServiceALWAYS_CRITICAL
Returns metadata for Midas packages (go/midas).//configs/production/outboundacl/templates/sawmill:sawmill
LoggingServiceALWAYS_CRITICAL
Unified Logging Service (go/sawmill-uls).//configs/production/outboundacl/templates/sawmill:sawmill
ProtectedMPMAccessServiceALWAYS_CRITICAL
Gets thinmints to access protected MPMs (go/cdpush-transparent-encryption).//configs/production/outboundacl/templates/sawmill:sawmill
CrossUniverseSigningALWAYS_CRITICAL
Cross-universe signer service (go/tpc-rpc-integrity-thinmint-direction).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-DeleteALWAYS_CRITICAL
CFS Coprocessor curator (Delete) (go/colossus)//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-UpdateStripeALWAYS_CRITICAL
CFS Coprocessor curator (UpdateStripe) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
RecordCollectorOPTIONAL
Collects and analyzes a sample of Census measurements (see go/census-record-collector).//configs/production/outboundacl/templates/monitoring:monarch
//configs/production/outboundacl/templates/sawmill:sawmill
LogsProxyALWAYS_CRITICAL
Logs proxy service for Sawmill (go/logsproxy).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-MatchALWAYS_CRITICAL
CFS Coprocessor curator (Match) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
NodeNetworkDelegationOPTIONAL
bwe delegation//configs/production/outboundacl/templates/sawmill:sawmill
PantographServiceALWAYS_CRITICAL
L4wC stripe placement service (go/l4wc).//configs/production/outboundacl/templates/sawmill:sawmill
LoggerLogGFileOPTIONAL
Simple logging service to collect data about gFile invocations.//configs/production/outboundacl/templates/sawmill:sawmill
LoggerLogOPTIONAL
Simple logging service to collect data about mpm CLI invocations.//configs/production/outboundacl/templates/sawmill:sawmill
RevocationStatusALWAYS_CRITICAL
allowed_scope: LOCALHOST
Used for the LOAS handshake (go/loas).//configs/production/outboundacl/templates/loas:local_locas
StreamzCollectionOPTIONAL
Streamz2: the default API (go/streamz-docs).//configs/production/outboundacl/templates/monitoring:monarch
//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-MatchEntriesALWAYS_CRITICAL
CNS Coprocessor (MatchEntries) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
DStoreResolverServiceALWAYS_CRITICAL
Low-dep storage layer for Midas packages (go/midas).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-LookupALWAYS_CRITICAL
CFS Coprocessor curator (Lookup) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
LockServerWireALWAYS_CRITICAL
Sends information from proxies about the client to the lockserver (go/chubby).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
BamRpcMetaServiceALWAYS_CRITICAL
Baremetal RPC API used by D storage (go/bamrpc).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-SnapshotALWAYS_CRITICAL
CNS Coprocessor (Snapshot) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-TruncateALWAYS_CRITICAL
CNS Coprocessor (Truncate) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ServerAuthorizationServiceALWAYS_CRITICAL
Server Authorization (go/server-authorization).//configs/production/outboundacl/templates/sawmill:sawmill
//configs/production/outboundacl/templates/traffic:gslb
HealthALWAYS_CRITICAL
Needed by grpc to do a health check//configs/production/outboundacl/templates/sawmill:sawmill
HealthALWAYS_CRITICAL
TrafficDirector is GSLB client in prod//configs/production/outboundacl/templates/sawmill:sawmill
//configs/production/outboundacl/templates/traffic:gslb
BorgMasterALWAYS_CRITICAL
Sends requests to Borgmaster.//configs/production/outboundacl/templates/sawmill:sawmill
IndexServiceALWAYS_CRITICAL
L4 cluster-level caching service (go/l4).//configs/production/outboundacl/templates/sawmill:sawmill
CuratorInterfaceALWAYS_CRITICAL
CFSv2 (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
LampreySubscriberALWAYS_CRITICAL
allowed_scope: LOCALHOST
Used by Go pubsub clients (via Lamprey) (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
CatalogLogsReaderALWAYS_CRITICAL
Logs Catalog service API (read-only) for Sawmill (go/logs-catalog).//configs/production/outboundacl/templates/sawmill:sawmill
ReporterALWAYS_CRITICAL
Reports the acceptance status of a CDPush version (go/cdpush).//configs/production/outboundacl/templates/sawmill:sawmill
BTI_MasterALWAYS_CRITICAL
Communicates with Bigtable Masters (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
WavemillALWAYS_CRITICAL
Wavemill service for Sawmill micro-mutations.//configs/production/outboundacl/templates/sawmill:sawmill
DataAccessControllerALWAYS_CRITICAL
allowed_scope: LOCALHOST
Data access controller dependency for Gin logging through Envelope (go/gin) and Admin Access Control Platform (go/aac-platform).//configs/production/outboundacl/templates/security:data_access_logging
CP-colossus_curator-SetAttrALWAYS_CRITICAL
CFS Coprocessor curator (SetAttr) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ProbingLoadBalancerServiceALWAYS_CRITICAL
Load balancing service used with Logs Proxy.//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-CreateDirALWAYS_CRITICAL
CNS Coprocessor (CreateDir) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
PreferredEncodingALWAYS_CRITICAL
Preferred Encoding Service//configs/production/outboundacl/templates/sawmill:sawmill
LampreyBigtableALWAYS_CRITICAL
allowed_scope: LOCALHOST
Used by Go bigtable clients via Lamprey (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
RrcpCacheALWAYS_CRITICAL
Role-Realm Control Policy (RRCP) Cache Service (go/rrcp-cache:design).//configs/production/outboundacl/templates/sawmill:sawmill
QuotaServerALWAYS_CRITICAL
Sent by //security/data_access/admin/approvers:admin_access_rate_limiter//configs/production/outboundacl/templates/security:data_access_logging
ThinMintServiceALWAYS_CRITICAL
ThinMints provide a secure way for a client process to delegate small bits of privileges to "friend" processes (go/thinmint).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-CloseStripeALWAYS_CRITICAL
CFS Coprocessor curator (CloseStripe) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
SecureCollectionAggregationServiceOPTIONAL
Sends messages to the Secure Data Collection Service (go/secure-collection).//configs/production/outboundacl/templates/security:secure_data_collection
MetadataCacheInterfaceALWAYS_CRITICAL
Colossus Metadata Cache is a mechanism to offload metadata traffic from busy Colossus namespace coprocessors and curators (go/colossus-meta-cache).//configs/production/outboundacl/templates/sawmill:sawmill
LampreyPublisherALWAYS_CRITICAL
allowed_scope: LOCALHOST
Used by Go pubsub clients (via Lamprey) (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
SawmillLiteRouterALWAYS_CRITICAL
Sawmill Lite Router service (go/sawmill-lite). Provides the server-side implementation for routing clients to the right Sawmill region and instance.//configs/production/outboundacl/templates/sawmill:sawmill
RoutingServiceALWAYS_CRITICAL
PubSub Routing service (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
CP-colossus_namespace-DeleteFileALWAYS_CRITICAL
CNS Coprocessor (DeleteFile) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ShredmillALWAYS_CRITICAL
Shredmill service - replies with ephemeral plaintext, ciphertext, or key material//configs/production/outboundacl/templates/sawmill:sawmill
MetadataCacheALWAYS_CRITICAL
Colossus Metadata Cache is a mechanism to offload metadata traffic from busy Colossus namespace coprocessors and curators (go/colossus-meta-cache).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-StartWatchALWAYS_CRITICAL
CNS Coprocessor (StartWatch) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
FolderManagementInterfaceALWAYS_CRITICAL
CFS2 Folder Management Interface (go/cfsv2-folder-management).//configs/production/outboundacl/templates/sawmill:sawmill
BTI_TabletServerALWAYS_CRITICAL
Communicates with Bigtable Tablet Servers (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
SawmillLiteWriterALWAYS_CRITICAL
Sawmill Lite Writer service (go/sawmill-lite). Provides the server-side implementation of Sawmill Write API (go/sawmill-write-api).//configs/production/outboundacl/templates/sawmill:sawmill
PublisherServiceALWAYS_CRITICAL
PubSub Publisher service (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
L4ReportingServiceALWAYS_CRITICAL
L4 client operations reports (go/l4).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-PreSplitALWAYS_CRITICAL
CNS Coprocessor (PreSplit) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ChubbySessionlessInternalALWAYS_CRITICAL
Internal part of the Chubby sessionless protocol between Envelope and Stout (go/chubby).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
WatcherALWAYS_CRITICAL
CDPush watcher (go/cdpush).//configs/production/outboundacl/templates/sawmill:sawmill
WatcherALWAYS_CRITICAL
Watcher implementation in the Envelope (go/chubby-concepts:envelope).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-CreateALWAYS_CRITICAL
CFS Coprocessor curator (Create) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CatalogLogsWriterALWAYS_CRITICAL
Logs writer Catalog service API (read-write) for Sawmill (go/logs-catalog).//configs/production/outboundacl/templates/sawmill:sawmill
SubscriberServiceALWAYS_CRITICAL
PubSub Subscriber service (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
CP-colossus_namespace-NotifyFileClosedALWAYS_CRITICAL
CNS Coprocessor (NotifyFileClosed) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-MatchALWAYS_CRITICAL
CNS Coprocessor (Match) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CuratorALWAYS_CRITICAL
CFS Coprocessor curator (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ApprovalServiceALWAYS_CRITICAL
MPA request approval store for go/mpa-ld.//configs/production/outboundacl/templates/security:data_access_logging
OffloadBorgletClientALWAYS_CRITICAL
port: 5011
allowed_scope: LOCALHOST
Sends messages to a local offload_borglet on port 5011.//configs/production/outboundacl/templates/borg:local_borglet
//configs/production/outboundacl/templates/sawmill:sawmill
StripeProxyServiceALWAYS_CRITICAL
Rodos Colossus cross-metro proxy service (go/rodos).//configs/production/outboundacl/templates/sawmill:sawmill
ChubbyWatcherALWAYS_CRITICAL
ChubbyWatcher is simply a renaming of Watcher. We want a Chubby-specific name that can be distinguished from other implementations of Watcher (b/199405002).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
MonarchCollectorOPTIONAL
Streamz2: the default API (go/streamz-docs).//configs/production/outboundacl/templates/monitoring:monarch
//configs/production/outboundacl/templates/sawmill:sawmill
ProxiedLoggingServiceALWAYS_CRITICAL
ULS Forwarding Proxy (go/uls-forwarding-proxy).//configs/production/outboundacl/templates/sawmill:sawmill
ProxiedLoggingServiceOPTIONAL
ULS Forwarding Proxy (go/uls-forwarding-proxy).//configs/production/outboundacl/templates/sawmill:sawmill
SawmillLiteReaderALWAYS_CRITICAL
Sawmill Lite Reader service (go/sawmill-lite). Provides the server-side implementation of Sawmill Read API (go/sawmill-read-api).//configs/production/outboundacl/templates/sawmill:sawmill
EnvelopeControlServiceALWAYS_CRITICAL
allowed_scope: LOCALHOST
The Envelope provides access to infrastructure services that require a fat client library to work well (go/envelope).//configs/production/outboundacl/templates/ti:envelope
CP-colossus_curator-NotifyErrorALWAYS_CRITICAL
CFS Coprocessor curator (NotifyError) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
KeystoreALWAYS_CRITICAL
Keystore key management service (go/keystore).//configs/production/outboundacl/templates/sawmill:sawmill
DiskLayerALWAYS_CRITICAL
API to interact with D storage (go/dserver).//configs/production/outboundacl/templates/sawmill:sawmill
LogCollectorOPTIONAL
Optional dependency to CDD LogCollector by Svelte (go/svelte).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_namespace-FetchWatchEventsALWAYS_CRITICAL
CNS Coprocessor (FetchWatchEvents) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
CiphertextTransferServiceALWAYS_CRITICAL
Shredmill ciphertext transfer service - move ciphertext in and out Shredmill with crypto protection//configs/production/outboundacl/templates/sawmill:sawmill
ServerStatusALWAYS_CRITICAL
port: 5000
allowed_scope: GLOBAL
Sends messages to a local Borglet (container manager) on port 5000.//configs/production/outboundacl/templates/borg:local_borglet
//configs/production/outboundacl/templates/sawmill:sawmill
ServerStatusALWAYS_CRITICAL
Wavemill client dependency used to obtain peer user information.//configs/production/outboundacl/templates/sawmill:sawmill
TrafficShaperOPTIONAL
bwe delegation//configs/production/outboundacl/templates/sawmill:sawmill
CrossUniverseDatSigningALWAYS_CRITICAL
Cross-universe DAT signer service (go/tpc-rpc-integrity-thinmint-direction).//configs/production/outboundacl/templates/sawmill:sawmill
TouchReceiverTouchOPTIONAL
MPM package usage tracking.//configs/production/outboundacl/templates/sawmill:sawmill
ConsistencyMonitorServiceALWAYS_CRITICAL
Reports Colossus operations to the lockserver (go/chubby).//configs/production/outboundacl/templates/chubby:chubby
//configs/production/outboundacl/templates/sawmill:sawmill
CP-bigtable_builtinALWAYS_CRITICAL
Bigtable Coprocessor (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-LookupStripesALWAYS_CRITICAL
CFS Coprocessor curator (LookupStripes) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
FileALWAYS_CRITICAL
File API for Colossus (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ResourceIdentificationServiceALWAYS_CRITICAL
Federated Resource Identification Service integration (go/fris).//configs/production/outboundacl/templates/security:data_access_logging
TabletLocationServiceALWAYS_CRITICAL
Bigtable Location Cache Proxy//configs/production/outboundacl/templates/sawmill:sawmill
AdminServiceALWAYS_CRITICAL
PubSub Admin service (go/pubsub2).//configs/production/outboundacl/templates/ipc/pubsub2:goops
CP-colossus_namespace-SetAttrALWAYS_CRITICAL
CNS Coprocessor (SetAttr) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
DataAccessLogServiceALWAYS_CRITICAL
Gin audit logging (go/gin).//configs/production/outboundacl/templates/security:data_access_logging
DataAccessLogServiceALWAYS_CRITICAL
Gin audit logging (go/gin) conforming to go/auth-libraries-backend-dependencies//configs/production/outboundacl/templates/security:data_access_logging
AggregatedDiscoveryServiceALWAYS_CRITICAL
TrafficDirector is GSLB client in prod//configs/production/outboundacl/templates/sawmill:sawmill
//configs/production/outboundacl/templates/traffic:gslb
CP-colossus_curator-OpenStripeALWAYS_CRITICAL
CFS Coprocessor curator (OpenStripe) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
BTI_CP_StateNotifierALWAYS_CRITICAL
Bigtable Coprocessor state notifications (go/bigtable).//configs/production/outboundacl/templates/sawmill:sawmill
CP-colossus_curator-SnapshotALWAYS_CRITICAL
CFS Coprocessor curator (Snapshot) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill
ErasureScopeServiceALWAYS_CRITICAL
Shredmill erasure scope service - interface for granular lifetime management//configs/production/outboundacl/templates/sawmill:sawmill
LogServiceAdminALWAYS_CRITICAL
Local configuration and administrative functions on the Unified Logging Service (go/sawmill-uls).//configs/production/outboundacl/templates/sawmill:sawmill
PapermillALWAYS_CRITICAL
Papermill service API for Sawmill (go/papermill).//configs/production/outboundacl/templates/sawmill:sawmill
SecureDataCollectionPublisher_AuthMetricsOPTIONAL
allowed_scope: LOCALHOST
Sends messages to the Secure Data Collection Service (local) (go/secure-collection). Owned by go/af-auth.//configs/production/outboundacl/templates/security:secure_data_collection
CP-colossus_curator-StatALWAYS_CRITICAL
CFS Coprocessor curator (Stat) (go/colossus).//configs/production/outboundacl/templates/sawmill:sawmill

RPC Events

ServiceMethodProto PackageTargetRemoteUserRemoteJobRemoteCellVerdictReasonsExemptedProtocolPushed
GalaxyProxyLookUpDatabaseLocationspanner.galaxyproxyblade:spanner-galaxy-proxy-global-1spannerglobal.yudfwra.span_galaxy_proxyyudfwraVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientAwaitChangenet-bns-svelte-clusteryudfwra-bns-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanPingspannerglobal.jx.0510.span_serverjxVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.jx.span_location_proxyjxVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
StreamzCollectionDefineMetricsstreamzmonarch-streamzproxy-auto-jobsauto-default-root.streamzproxyyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
ThrottlingServiceUpdatespannerglobal.yucbfac.8280.span_serveryucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRootRangeLookupspannerglobal.jv.0510.span_serverjvVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRootRangeLookupspannerglobal.yucbfac.8280.span_serveryucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
MonarchCollectorWritemonitoring.streamzmonarch-streamzproxy-auto-jobsauto-default-root.streamzproxyyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
ProberServiceUpdateTargetsspannerblade:spanner-global-proberspannerglobal.span_proberyudfwraVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
ClientFlagsServiceGetClientFlagsdos_quotas.pbblade:quotaserver-quota-server-prod-quota-servicequotaserver-local-quota-serviceprod-quota-service.quotaserver-localyudfwraVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
AssignerServiceWatchAssignmentipc.slicerslicer-proxy-google-regionalprod-google-us-dfw-1-e.proxyrq,rrVERDICT_REJECTEDfalsePROTOCOL_STUBBYtrue
AggregatedDiscoveryServiceStreamAggregatedResourcesenvoy.service.discovery.v3trafficdirector-tdfe-p2pprod-p2p-global.tdfeyudfwraVERDICT_ALLOWEDfalsePROTOCOL_STUBBYtrue
Span-_spanRangeLookupspannerglobal.gg.8280.span_serverggVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.ic.0510.span_servericVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.oj.span_location_proxyojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRootRangeLookupspannerglobal.ic.0510.span_servericVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientModifyWaitSetnet-bns-svelte-prodregionyudfwra-bns-svelteshard-prodregion.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientInitialModifyWaitSetsvelte-clusteryudfwra-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRootRangeLookupspannerglobal.oj.0530.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRangeLookupspannerglobal.oj.0530.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientModifyWaitSetnet-bns-svelte-clusteryudfwra-bns-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
BlobstorePartitionLookupServiceRouteLookupblobstore2blade:blobstore2.blobstorepartitionlookupservice-prodblobstore-partition-lookup-serviceprod.blobstore-partition-lookup-serviceyudfwraVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.in.span_location_proxyinVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.jx.0510.span_serverjxVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
ProxiedLoggingServicePutunified_logging.proxyblade:unified-logging-forwarding-proxy-thin-clientunified-logging-sawmill-relayuls.relay.relayyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientInitialModifyWaitSetnet-bns-svelte-prodregionyudfwra-bns-svelteshard-prodregion.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
HealthWatchgrpc.health.v1trafficdirector-tdfe-p2pprod-p2p-global.tdfeyudfwraVERDICT_ALLOWEDfalsePROTOCOL_GRPCtrue
MonarchCollectorReadSchedulesmonitoring.streamzmonarch-streamzproxy-auto-jobsauto-default-root.streamzproxyyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.iw.span_location_proxyiwVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.yucbfac.8280.span_serveryucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.iw.span_location_proxyiwVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
ProxiedLoggingServiceQuiesceunified_logging.proxyblade:unified-logging-forwarding-proxy-thin-clientunified-logging-sawmill-relayuls.relay.relayyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanPingspannerglobal.ic.0510.span_servericVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRangeLookupspannerglobal.yucbfac.8280.span_serveryucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientAwaitChangenet-bns-svelte-prodregionyudfwra-bns-svelteshard-prodregion.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.gg.span_location_proxyggVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.oj.0530.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.jv.span_location_proxyjvVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientModifyWaitSetnet-bns-svelte-globalyudfwra-bns-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
BalancerChannelControlPickTargetAndReportloadbalancer_gslb.clientbladeservice-prodbladeservice_dsc.load_balancer_commonyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientInitialModifyWaitSetnet-bns-svelte-globalyudfwra-bns-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
LocASGetRevocationStatusVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
BorgletClientTaskStatusborgborg-admin-coborgletyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.jx.span_location_proxyjxVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.os.span_location_proxyosVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.yucbfac.span_location_proxyyucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
QuotaConfigServiceGetQuotaConfigurationdos_quotas.pbblade:dos_quotas.pb.quotaconfigservice-prod-cloud-shared-globalquota-config-server-cloud-sharedprod-cloud-shared-global.quota-config-serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.oj.7790.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanPingspannerglobal.yucbfac.8280.span_serveryucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
MemcachegServiceStatscacheserving_memcachegcloud-ml-aiplatform-memcachegstaging-us.aiplatform-memcacheguc,uh,qw,ug,vtVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientInitialModifyWaitSetsvelte-globalyudfwra-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanPingspannerglobal.oj.0530.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
AggregatedDiscoveryServiceStreamAggregatedResourcesenvoy.service.discovery.v3trafficdirector-tdfe-p2pprod-p2p-global.tdfeyudfwraVERDICT_ALLOWEDfalsePROTOCOL_GRPCtrue
GalaxyProxyLookUpRootRangesspanner.galaxyproxyblade:spanner-galaxy-proxy-global-1spannerglobal.yudfwra.span_galaxy_proxyyudfwraVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanPingspannerglobal.oj.7790.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRangeLookupspannerglobal.os.7790.span_serverosVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.in.span_location_proxyinVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.ym.span_location_proxyymVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
BalancerChannelControlGetAssignmentloadbalancer_gslb.clientbladeservice-prodbladeservice_dsc.load_balancer_commonyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.jv.0510.span_serverjvVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRangeLookupspannerglobal.jx.0510.span_serverjxVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientAwaitChangesvelte-clusteryudfwra-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientInitialModifyWaitSetnet-bns-svelte-clusteryudfwra-bns-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientAwaitChangesvelte-globalyudfwra-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
AssignerServiceWatchAssignmentipc.slicerVERDICT_REJECTEDfalsePROTOCOL_STUBBYtrue
PingServicePingspannerspannerglobal.gg.8280.span_serverggVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.ym.span_location_proxyymVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientModifyWaitSetsvelte-clusteryudfwra-svelteshard-cluster.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRootRangeLookupspannerglobal.os.7790.span_serverosVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.os.7790.span_serverosVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.oj.span_location_proxyojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.gg.span_location_proxyggVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientModifyWaitSetsvelte-globalyudfwra-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
AggregatedDiscoveryServiceStreamAggregatedResourcesenvoy.service.discovery.v3VERDICT_ALLOWEDfalsePROTOCOL_STUBBYtrue
Span-_spanRangeLookupspannerglobal.ic.0510.span_servericVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
Span-_spanRangeLookupspannerglobal.jv.0510.span_serverjvVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.os.span_location_proxyosVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LoadReportingServiceStreamLoadStatsenvoy.service.load_stats.v3trafficdirector-tdfe-p2pprod-p2p-global.tdfeyudfwraVERDICT_ALLOWEDfalsePROTOCOL_GRPCtrue
Span-_spanRangeLookupspannerglobal.oj.7790.span_serverojVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.ic.span_location_proxyicVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.ic.span_location_proxyicVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
PingServicePingspannerspannerglobal.yucbfac.span_location_proxyyucbfacVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue
SvelteClientAwaitChangenet-bns-svelte-globalyudfwra-bns-svelteshard-global.svelte.svelteyudfwraVERDICT_ALLOWEDfalsePROTOCOL_UNKNOWNtrue
LocationProxyServiceGetTabletLocationsspannerspannerglobal.jv.span_location_proxyjvVERDICT_REJECTEDfalsePROTOCOL_UNKNOWNtrue