Whitelisting dev ip addresses for GCP development database

Question

I have a development database hosted on GCP that I'd like my team to have access to. Ideally, I'd like people to be able to use any SQL client they'd like but so far, only DBeaver works with the Postgres/SSL enabled configuration we have. Currently, we have people at their personal houses, so the IP addresses can and do change. We'd like to enable access from their development machines, but not the whole world. We started with whitelisting IP addresses (as returned by whatismyip.com), but that's not very robust. What's a better way?

Answer 1

I do not recommend whitelisting IP addresses. Use the Cloud SQL Auth Proxy.

About the Cloud SQL Auth proxy

You can then disable client SSL as the proxy will authenticate and encrypt all communications.