# GoogleCloudPlatform/cloud-sql-proxy

A utility for connecting securely to your Cloud SQL instances

Repository: https://github.com/GoogleCloudPlatform/cloud-sql-proxy
Canonical: https://ross.abutalabs.com/products/cloud-sql-proxy
Language: Go
License: Apache-2.0
License Family: permissive
Topics: cloud-sql-proxy, cloud-sql, libraries, google-cloud-platform, gcp, google-cloud
Last push: 2026-08-20T17:12:38+00:00

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 98, longevity 100
- inputs: {"age_days": 3989, "days_push": 13, "days_rel": 13, "gap_med": 6, "n_releases_24m": 48}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1431, forks 354 (observed 2026-08-28T04:04:42.421253+00:00)

## What it is
The Cloud SQL Auth Proxy is a Go utility that provides secure, IAM-authorized, TLS 1.3-encrypted connections to Google Cloud SQL instances without manual certificate management. It runs as a local proxy sidecar or standalone binary and supports metrics, health checks, and automatic IAM database authentication.

## Use cases
- connect securely to a Cloud SQL instance from my local machine
- proxy Cloud SQL connections with IAM authentication
- run Cloud SQL proxy as a sidecar in Kubernetes
- encrypt database traffic to Cloud SQL without managing TLS certificates
- connect to private IP Cloud SQL instance from a VM
- monitor Cloud SQL proxy with Prometheus metrics

## When to choose
- you need secure access to Cloud SQL from outside GCP or from workloads without a language connector
- you want IAM-based access control and automatic mTLS for Cloud SQL
- you're running Cloud SQL workloads in Kubernetes or Compute Engine and need a sidecar proxy

## When to avoid
- you use Go, Java, Python, or Node.js and prefer an in-process Cloud SQL language connector
- you need to configure network connectivity between your VM and the Cloud SQL instance - the proxy does not handle networking
- you rely on Unix domain sockets with MySQL 8.4 instances

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, database, monitoring, auth
- domain: cloud-computing, databases, security, developer-tools
- platform: windows, go, cli
- tags: gcp, cloud-sql, tls, iam, database-proxy, google-cloud, linux, macos, docker, kubernetes

## Member repositories
- GoogleCloudPlatform/cloud-sql-proxy (main) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:42.421253+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:37:04.878690+00:00, confidence not recorded.
  - readme: https://github.com/GoogleCloudPlatform/cloud-sql-proxy (fetched 2026-08-28T04:04:42.421253+00:00, sha aa213c3c9a12)
- Data as of 2026-08-30T08:39:29.467469+00:00.