Networking

Private, Isolated Networking for Your Infrastructure

Build private networks with subnets, routers, floating IPs, VPNaaS, and security rules from one console.

Complete Network Isolation

Each VPC is a private address space. Instances inside are invisible to the internet until you explicitly expose them.

Subnets, routers, and floating IPs

Segment a network, attach a router, add ports, and expose only the instances that need a floating IP.

VPNaaS for site connectivity

Connect an office, a datacentre, or another private environment to your cloud network without exposing every service on the public internet.

Layer 4 Security Groups

Stateful firewall rules scoped per instance. Allow only the ports and protocols your application actually needs.

What You Get

Private subnets and VPCs
Custom routing tables
Security groups
Floating IP addresses
Network routers
Site-to-site VPNaaS
Network isolation

Best For

Multi-tier applicationsHybrid cloud setupsSecure environmentsMicroservices

Private networks, subnets, VPNaaS, and access rules to isolate environments without awkward workarounds.

Technical Specifications

VPCs per organisation
Unlimited
Subnets per VPC
Up to 100
Private IP ranges
RFC 1918 - any /8–/28
Floating IPs
Elastic public addresses
VPNaaS
Site-to-site connectivity
Routers
Create and attach per network
Ports
Managed for topology and network mapping

How It Works

1

Create a VPC

Define your IP address range and the availability zone for the private network.

2

Add subnets

Segment your address space into subnets for each tier - web, application, database.

3

Attach instances

Connect compute instances and services to the appropriate subnet with private IPs.

4

Configure security and exposure

Set firewall rules, attach a router, and assign floating IPs only where public access is actually useful.

Common Use Cases

Multi-Tier Architecture

Separate web, application, and database tiers into isolated subnets with controlled inter-tier traffic policies.

3-tier web applicationsMicroservice meshesInternal API gateways

Controlled public exposure

Expose only the entry points that need it and keep the rest on a private network.

Bastion plus private networkPublic API with private databaseExposed web front with isolated internal services

Site-to-site interconnection

Connect a remote site or an existing network to your VPC so you can extend an existing system without exposing every service individually.

Office-to-cloud connectivityLink to an existing information systemNetwork extension toward a private cluster

Compliance Isolation

Keep sensitive services in private subnets with no direct exposure and explicit network rules.

PCI-DSS scoped network zonesGDPR service isolationNIS2 audit-ready environments

Need the Right Starting Point?

Tell us what you run today and we will suggest a realistic starting point, not an inflated setup.