✦ Software-Defined Infrastructure

Cloud-Native Networking

Programmable, globally distributed network fabric with private VPCs, anycast routing, enterprise firewalls, and zero-config load balancing. Built for developers who demand control.

Deploy Network → View Documentation

Overview

VPC & Subnets

Load Balancers

Firewalls & DDoS

Global Routing

API & Terraform

Core Networking Capabilities

Everything you need to architect secure, high-throughput, and resilient network topologies without leaving the CloudNexus platform.

🌐

Virtual Private Cloud (VPC)

Isolated network environments with custom CIDR ranges, public/private subnets, and full routing table control.

IPv4 & IPv6

⚖️

L4/L7 Load Balancers

Auto-scaling proxy layer with SSL termination, WebSocket support, health checks, and sticky sessions.

Zero Downtime

🛡️

Stateful Firewalls & DDoS

Micro-segmentation rules, geo-blocking, and 2 Tbps DDoS scrubbing integrated at the edge.

Always On

🔄

Global Anycast & BGP

Custom ASN support, BGP session management, and anycast routing for sub-10ms latency worldwide.

Custom ASN

🔗

Private Links & Peering

Zero-cost intra-region traffic, cross-VPC peering, and direct connect integrations for hybrid setups.

Free Transfer

📊

Traffic Mirroring & Analytics

Real-time packet inspection, flow logs, and integration with Prometheus/Grafana for deep visibility.

Open Telemetry

Network Traffic Flow

How requests traverse the CloudNexus fabric from edge to application layer.

🌍

Global Edge

Anycast / DNS

🛡️

DDoS / WAF

Rate Limits

⚖️

Load Balancer

L4/L7 Proxy

🖥️

VPC / Subnet

Private IPs

Technical Specifications

Metric	Value
Base Network Throughput	100 Gbps per node
Average Regional Latency	< 2 ms
Max VPC CIDR Range	/8 to /28
BGP Session Limit	50 peers per account
Firewall Rule Priority	1-99 (lower = higher)
Load Balancer Max RPS	250,000+
Packet Loss SLA	99.999% uptime

Provision via CLI / API

Infrastructure as Code friendly. Manage your network topology with Terraform, Pulumi, or our native CLI.

                        terminal
                        cnx-cli
                    

# Create an isolated VPC with public/private subnets
cnx network vpc create \
  --name production-us-east \
  --cidr 10.0.0.0/16 \
  --region us-east-1 \
  --enable-ipv6

# Attach a Layer 7 Load Balancer with auto-SSL
cnx lb create \
  --name api-gateway \
  --vpc production-us-east \
  --ports 80:443 \
  --algorithm round-robin
                    

Transparent Pricing Model

🌐 VPC & Subnets

$0.00 / month

Free to provision. Unlimited VPCs per account with zero hourly fees.

🔄 Data Transfer

$0.08 / GB

Intra-region traffic is free. Cross-region: $0.02/GB. Egress: tiered pricing.

⚖️ Load Balancers

$0.012 / hour

$0.008/GB processed. Auto-scales to zero when idle. No minimum commit.

🛡️ Firewall Rules

$0.05 / rule / month

Up to 50 rules included free. Stateful inspection & DDoS protection bundled.

💡 Pay only for what you use. No hidden fees, no minimum contracts. Real-time cost estimation available in the console.

Technical FAQ

Can I bring my own ASN for BGP routing?

Yes. CloudNexus supports BYO-ASN with full BGP peering capabilities. You can configure custom AS paths, communities, and route filters through the API or CLI. Enterprise plans include dedicated BGP sessions with multiple exit nodes.

How does DDoS protection work at the network layer?

Traffic is scrubbed at 180+ global points of presence using behavioral analysis and signature-based filtering. L3/L4 attacks are mitigated before reaching your VPC. You can configure custom rate limits, geo-fencing, and SYN cookie protection.

Is traffic between VPCs in the same region encrypted?

Intra-region VPC peering traffic is isolated at the hypervisor level and never traverses the public internet. Optional IPsec tunnels are available for cross-region or hybrid connections at no additional compute cost.

Do load balancers support WebSocket and gRPC?

Yes. Our L7 proxy fully supports HTTP/2, HTTP/3, WebSockets, and gRPC. Sticky sessions, connection draining, and custom headers can be configured via the dashboard or Terraform provider.

Ready to architect your network?

Explore API references, Terraform modules, architecture guides, and migration playbooks.

📖 VPC Documentation ⚡ API Reference 🔧 Terraform Provider