HEX
Server: Apache/2.4.65 (Ubuntu)
System: Linux ielts-store-v2 6.8.0-1036-gcp #38~22.04.1-Ubuntu SMP Thu Aug 14 01:19:18 UTC 2025 x86_64
User: root (0)
PHP: 7.2.34-54+ubuntu20.04.1+deb.sury.org+1
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,
Upload Files
File: //snap/google-cloud-cli/current/help/man/man1/gcloud_compute_network-endpoint-groups_update.1
.TH "GCLOUD_COMPUTE_NETWORK\-ENDPOINT\-GROUPS_UPDATE" 1



.SH "NAME"
.HP
gcloud compute network\-endpoint\-groups update \- update a Compute Engine network endpoint group



.SH "SYNOPSIS"
.HP
\f5gcloud compute network\-endpoint\-groups update\fR \fINAME\fR (\fB\-\-add\-endpoint\fR=[\fIclient\-destination\-port\fR=\fICLIENT\-DESTINATION\-PORT\fR],[\fIfqdn\fR=\fIFQDN\fR],[\fIinstance\fR=\fIINSTANCE\fR],[\fIip\fR=\fIIP\fR],[\fIipv6\fR=\fIIPV6\fR],[\fIport\fR=\fIPORT\fR]\ |\ \fB\-\-remove\-endpoint\fR=[\fIclient\-destination\-port\fR=\fICLIENT\-DESTINATION\-PORT\fR],[\fIfqdn\fR=\fIFQDN\fR],[\fIinstance\fR=\fIINSTANCE\fR],[\fIip\fR=\fIIP\fR],[\fIipv6\fR=\fIIPV6\fR],[\fIport\fR=\fIPORT\fR]) [\fB\-\-global\fR\ |\ \fB\-\-region\fR=\fIREGION\fR\ |\ \fB\-\-zone\fR=\fIZONE\fR] [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

Update a Compute Engine network endpoint group.



.SH "EXAMPLES"

To add two endpoints to a network endpoint group:

.RS 2m
$ gcloud compute network\-endpoint\-groups update my\-neg \e
    \-\-zone=us\-central1\-a \e
    \-\-add\-endpoint=instance=my\-instance1,ip=127.0.0.1,port=1234 \e
    \-\-add\-endpoint=instance=my\-instance2
.RE

To remove two endpoints from a network endpoint group:

.RS 2m
$ gcloud compute network\-endpoint\-groups update my\-neg \e
    \-\-zone=us\-central1\-a \e
    \-\-remove\-endpoint=instance=my\-instance1,ip=127.0.0.1,port=1234 \e
    \-\-remove\-endpoint=instance=my\-instance2
.RE



.SH "POSITIONAL ARGUMENTS"

.RS 2m
.TP 2m
\fINAME\fR

Name of the network endpoint group to operate on.


.RE
.sp

.SH "REQUIRED FLAGS"

.RS 2m
.TP 2m

These flags can be specified multiple times to add/remove multiple endpoints.

Exactly one of these must be specified:


.RS 2m
.TP 2m
\fB\-\-add\-endpoint\fR=[\fIclient\-destination\-port\fR=\fICLIENT\-DESTINATION\-PORT\fR],[\fIfqdn\fR=\fIFQDN\fR],[\fIinstance\fR=\fIINSTANCE\fR],[\fIip\fR=\fIIP\fR],[\fIipv6\fR=\fIIPV6\fR],[\fIport\fR=\fIPORT\fR]

The network endpoint to add to the network endpoint group. Keys used depend on
the endpoint type of the NEG.

\f5gce\-vm\-ip\-port\fR

.RS 2m
*instance* \- Name of instance in same zone as the network endpoint
group.
.RE

.RS 2m
The VM instance must belong to the network / subnetwork
associated with the network endpoint group. If the VM instance
is deleted, then any network endpoint group that has a reference
to it is updated.
.RE

.RS 2m
*ip* \- Optional IP address of the network endpoint. The IP address
must belong to a VM in compute engine (either the primary IP or
as part of an aliased IP range). If the IP address is not
specified, then the primary IP address for the VM instance in
the network that the network endpoint group belongs to is
used.
.RE

.RS 2m
*ipv6* \- Optional IPv6 address of the network endpoint. The IPv6
address must belong to a VM in compute engine (either the internal
or external IPv6 address).
.RE

.RS 2m
*port* \- Required endpoint port unless NEG default port is set.
.RE

.RS 2m
*client\-destination\-port* \- Required endpoint client destination port only for the port
mapping NEG.
.RE

\f5internet\-ip\-port\fR

.RS 2m
*ip* \- Required IPv4 address of the endpoint to attach. Must be
publicly routable.
.RE

.RS 2m
*port* \- Optional port of the endpoint to attach. If unspecified,
the NEG default port is set. If no default port is set, the
well\-known port for the backend protocol is used instead
(80 for HTTP, 443 for HTTPS).
.RE

\f5internet\-fqdn\-port\fR

.RS 2m
*fqdn* \- Required fully qualified domain name to use to look up an
external endpoint. Must be resolvable to a public IP address via
public DNS.
.RE

.RS 2m
*port* \- Optional port of the endpoint to attach. If unspecified,
the NEG default port is set. If no default port is set, the
well\-known port for the backend protocol is used instead
(80 for HTTP, 443 for HTTPS or HTTP2).
.RE

.RS 2m
Example: `\-\-add\-endpoint="fqdn=backend.example.com,port=443"`
.RE

\f5non\-gcp\-private\-ip\-port\fR

.RS 2m
*ip* \- Required IPv4 address of the network endpoint to attach.
The IP address must belong to a VM not in Compute Engine and must
be routable using a Cloud Router over VPN or an Interconnect
connection.
.RE

.RS 2m
*port* \- Required port of the network endpoint to attach unless
the NEG default port is set.
.RE

\f5gce\-vm\-ip\fR

.RS 2m
*instance* \- Required instance name in same zone as the network
endpoint group.
.RE

.RS 2m
The VM instance must belong to the network / subnetwork
associated with the network endpoint group. If the VM instance
is deleted, then any network endpoint group that has a reference
to it is updated.
.RE

.RS 2m
*ip* \- Optional IP address of the network endpoint to attach. The
IP address must be the VM's network interface address. If not
specified, the primary NIC address is used.
.RE

.TP 2m
\fB\-\-remove\-endpoint\fR=[\fIclient\-destination\-port\fR=\fICLIENT\-DESTINATION\-PORT\fR],[\fIfqdn\fR=\fIFQDN\fR],[\fIinstance\fR=\fIINSTANCE\fR],[\fIip\fR=\fIIP\fR],[\fIipv6\fR=\fIIPV6\fR],[\fIport\fR=\fIPORT\fR]

The network endpoint to detach from the network endpoint group. Keys used depend
on the endpoint type of the NEG.

\f5gce\-vm\-ip\-port\fR

.RS 2m
*instance* \- Required name of instance whose endpoint(s) to
detach. If the IP address is unset, all endpoints for the
instance in the NEG are detached.
.RE

.RS 2m
*ip* \- Optional IPv4 address of the network endpoint to detach.
If specified port must be provided as well.
.RE

.RS 2m
*ipv6* \- Optional IPv6 address of the network endpoint to detach.
If specified port must be provided as well.
.RE

.RS 2m
*port* \- Optional port of the network endpoint to detach.
.RE

.RS 2m
*client\-destination\-port* \- Optional client destination port, only for port mapping NEGs.
.RE

\f5internet\-ip\-port\fR

.RS 2m
*ip* \- Required IPv4 address of the network endpoint to detach.
.RE

.RS 2m
*port* \- Optional port of the network endpoint to detach if the
endpoint has a port specified.
.RE

\f5internet\-fqdn\-port\fR

.RS 2m
*fqdn* \- Required fully qualified domain name of the endpoint to
detach.
.RE

.RS 2m
*port* \- Optional port of the network endpoint to detach if the
endpoint has a port specified.
.RE

\f5non\-gcp\-private\-ip\-port\fR

.RS 2m
*ip* \- Required IPv4 address of the network endpoint to detach.
.RE

.RS 2m
*port* \- Required port of the network endpoint to detach unless
NEG default port is set.
.RE

\f5gce\-vm\-ip\fR

.RS 2m
*instance* \- Required name of instance with endpoints to
detach. If the IP address is unset, all endpoints for the
instance in the NEG are detached.
.RE

.RS 2m
*ip* \- Optional IP address of the network endpoint to attach. The
IP address must be the VM's network interface's primary IP
address. If not specified, the primary NIC address is used.
.RE


.RE
.RE
.sp

.SH "OPTIONAL FLAGS"

.RS 2m
.TP 2m

At most one of these can be specified:


.RS 2m
.TP 2m
\fB\-\-global\fR

If set, the network endpoint group is global.

.TP 2m
\fB\-\-region\fR=\fIREGION\fR

Region of the network endpoint group to operate on. If not specified, you might
be prompted to select a region (interactive mode only).

To avoid prompting when this flag is omitted, you can set the
\f5\fIcompute/region\fR\fR property:

.RS 2m
$ gcloud config set compute/region REGION
.RE

A list of regions can be fetched by running:

.RS 2m
$ gcloud compute regions list
.RE

To unset the property, run:

.RS 2m
$ gcloud config unset compute/region
.RE

Alternatively, the region can be stored in the environment variable
\f5\fICLOUDSDK_COMPUTE_REGION\fR\fR.

.TP 2m
\fB\-\-zone\fR=\fIZONE\fR

Zone of the network endpoint group to operate on. If not specified and the
\f5\fIcompute/zone\fR\fR property isn't set, you might be prompted to select a
zone (interactive mode only).

To avoid prompting when this flag is omitted, you can set the
\f5\fIcompute/zone\fR\fR property:

.RS 2m
$ gcloud config set compute/zone ZONE
.RE

A list of zones can be fetched by running:

.RS 2m
$ gcloud compute zones list
.RE

To unset the property, run:

.RS 2m
$ gcloud config unset compute/zone
.RE

Alternatively, the zone can be stored in the environment variable
\f5\fICLOUDSDK_COMPUTE_ZONE\fR\fR.


.RE
.RE
.sp

.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-access\-token\-file, \-\-account,
\-\-billing\-project, \-\-configuration, \-\-flags\-file, \-\-flatten,
\-\-format, \-\-help, \-\-impersonate\-service\-account, \-\-log\-http,
\-\-project, \-\-quiet, \-\-trace\-token, \-\-user\-output\-enabled,
\-\-verbosity.

Run \fB$ gcloud help\fR for details.



.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha compute network\-endpoint\-groups update
.RE

.RS 2m
$ gcloud beta compute network\-endpoint\-groups update
.RE