Skip to content

Virtual Private Cloud

Your own address space, split into subnets. Security groups and network ACLs decide what talks to what. Floating IPs and gateways decide what reaches the outside.

  • Private IPv4 and IPv6 ranges
  • Security groups & network ACLs
  • Floating IPs, NAT & internet gateways
VPC · multi-tierExample topology
Internet
Internet gateway
VPC
Public subnet
Web tierFloating IP
Security group
Private subnet
AppDatabase
Public subnet for the exposed tier, private subnet for app and database.

Features

What talks to what, decided by you.

  1. A default VPC to start

    Launch without naming a subnet and the instance lands in your project’s default VPC, with an internet gateway and a public address. A VPC you create has no gateway until you attach one.

  2. Secure connectivity

    Security groups, network ACLs and route tables decide which traffic reaches each subnet and instance.

  3. Floating IPs and gateways

    Attach public addresses to instances, reach the internet through internet or NAT gateways, and set name resolution with per-VPC DNS policies.

Use cases

Common topologies.

  • Secure application hosting

    Put app servers in a private subnet with no route to the internet gateway, and expose only the tier that needs a floating IP.

  • Multi-tier architectures

    A public subnet for the exposed tier, private subnets for app and database, and security groups between them.

Open beta

VPC is live today: subnets, security groups, ACLs, floating IPs and gateways.

The Network docs cover VPCs, internet access, traffic control and DNS policies, with GraphQL API and CLI examples, readable without an account.