One private network across all 6 regions.
Give your servers addresses from a range you choose. One network reaches every region, and the traffic inside it is not billed.
Included at no cost
Features
One network for the whole project.
Your own address ranges
Choose a range from the RFC 1918 blocks and split it into subnets, one or more in each region.
Across all regions, measured
A round trip takes 5 ms from Tallinn to Riga and 58 ms from Tallinn to Lisbon, the longest pair.
Traffic inside is not counted
Traffic between private addresses is not billed, and it does not count toward the project’s outbound allowance.
Attach without a reboot
A server joins a network through a second interface, added while it runs. On a server’s first boot, cloud-init configures the interface.
Services join too
Kubernetes nodes, managed databases, file storage and load balancers take addresses on the same network.
Routes and gateways
Add static routes, and send traffic for the internet or an office through a NAT and VPN gateway.
Code
Describe the network in Terraform.
A logiciel_network holds the range and a subnet for each region. Servers, clusters and databases join it by its ID.
- A subnet in each region you use.
- A fixed private address for a server, or the next free one.
- Clusters, databases and shares join the same way.
resource "logiciel_network" "acme" {
name = "acme-net"
ip_range = "10.0.0.0/16"
subnet {
region = "ee1"
ip_range = "10.0.1.0/24"
}
subnet {
region = "it1"
ip_range = "10.0.4.0/24"
}
}Questions
Questions about private networks.
Is traffic between regions encrypted?
Can a server without a public address reach the internet?
Can I connect my office or another cloud?
Works with
Firewalls
Stateful rules for inbound and outbound traffic, applied before packets reach your servers. Attach a firewall by label, and it is not billed.
Gateways
A way out to the internet for servers with only private addresses. Site-to-site VPN to an office over IPsec or WireGuard.
Load balancers
Spread TCP and HTTP traffic across the servers that pass their health checks. TLS certificates are issued and renewed for you.
Start with one server and one command.
Choose a region and a plan, and add an SSH key. The server answers SSH 38 seconds after the command, at the price on its spec sheet.