Networking & VPC

✦ Virtual Private Cloud

Your Private Network in the Cloud

CloudNexus VPC gives you full control over your virtual networking environment — including IP address ranges, subnets, route tables, and gateways.

🔷 VPC Architecture — vpc-prod-01 ● Active

Public Subnet

⚡ Load Balancer 10.0.1.10

🖥️ Bastion Host 10.0.1.20

Private Subnet

📦 App Server 10.0.2.10

🗄️ Database 10.0.2.20

📊 Cache Layer 10.0.2.30

DMZ — Isolated

🔒 Firewall Instance 10.0.3.10

Internet Gateway

☁️ Internet

🔐

Isolated Network Environment

Each VPC is logically isolated from other accounts. Define your own CIDR blocks, subnets, route tables, and network gateways.

🌍

Multi-Region VPC Peering

Connect VPCs across regions with low-latency, high-throughput private connections. No bandwidth costs for peered traffic.

🔄

Dynamic Routing

BGP-enabled route propagation with support for custom route tables, static routes, and automatic route learning.

📡

VPC Flow Logs

Capture and analyze network traffic flowing through your VPC. Integrate with monitoring and SIEM tools for security insights.

🔗

Private Link

Access third-party services securely without traversing the public internet. Create private endpoints for S3-compatible storage and APIs.

✦ Networking Features

Full-Stack Network Capabilities

Everything you need to build secure, scalable, and performant network architectures on CloudNexus.

⚖️

Load Balancers

Application, Network, and Gateway load balancers with automatic health checks, SSL termination, and WAF integration.

L4/L7 SSL/TLS Auto-Scaling WAF

🛡️

Security Groups

Stateful firewall rules at the instance level. Define ingress and egress rules with support for CIDR, tags, and dynamic groups.

Stateful Per-Instance Tag-Based

🔥

Network ACLs

Subnet-level firewall rules for stateless filtering. Add an extra layer of defense with numbered rule evaluation and explicit deny.

Stateless Subnet-Level Ordered Rules

🌐

Managed DNS

Fully managed DNS service with support for private hosted zones, DNS over HTTPS, and integration with your VPC resolver.

Private Zones DoH Resolver

🔌

Transit Gateway

Centralized hub for connecting VPCs, on-premises networks, and third-party virtual networks. Simplify your network topology.

Hub-and-Spoke BGP Route Tables

🔑

IP Address Management

Elastic IPs, IPv6 support, and intelligent IP allocation. Manage public and private addresses with full lifecycle control.

Elastic IP IPv6 Auto-Assign

📡

NAT Gateways

Enable private subnet instances to access the internet while preventing inbound connections. Highly available and scalable.

HA Up to 100 Gbps Managed

🔗

Dedicated Connections

Private, dedicated connections to your data center with guaranteed bandwidth and predictable latency. No public internet exposure.

Direct Connect 1Gbps-100Gbps Jumbo Frames

📊

Network Monitoring

Real-time visibility into network traffic, throughput, errors, and connections. Set alerts and integrate with observability tools.

Flow Logs VPC Mirror Alerts

✦ Deep Dive

Explore Networking Components

Dive deep into each networking component and see how they work together to secure and scale your infrastructure.

⚖️

Load Balancers

Distribute traffic across instances with intelligent routing and health checking.

🔥

Firewall & Security

Multi-layered network security with Security Groups, NACLs, and Web Application Firewall.

🔗

VPC Peering & Transit

Connect VPCs and on-premises networks with low-latency private connections.

🌐

Managed DNS

Reliable, scalable DNS service with private zones and resolver integration.

🔌

Dedicated Connections

Private, high-bandwidth links for mission-critical workloads.

Application Load Balancer

CloudNexus ALB operates at Layer 7, routing traffic based on content, headers, and host patterns. Supports HTTP/2, gRPC, and WebSocket protocols with automatic SSL termination.

# Deploy an Application Load Balancer cloudnexus lb create --name app-lb-prod \ --type application \ --vpc vpc-prod-01 \ --subnets subnet-pub-1a,subnet-pub-1b \ --listeners 80:8080,443:8443 \ --ssl-cert arn:acm:cert-1234 \ --health-check /healthz \ --scheme internet-facing

50K+

RPS Per LB

<5ms

Add. Latency

99.99%

Availability

Network Firewall

Stateful firewall with IDS/IPS capabilities. Define security policies at the VPC perimeter and protect against DDoS, port scans, and application-layer attacks.

# Create a VPC Firewall Rule cloudnexus fw rule create --name block-scan \ --action deny \ --protocol tcp \ --source 0.0.0.0/0 \ --port-range 22,3389 \ --log true \ --priority 100

10K+

Rules Per Policy

5 Gbps

Throughput

<1ms

Rule Eval

VPC Peering & Transit Gateway

Connect VPCs across regions and accounts with private, low-latency links. Transit Gateway provides a centralized hub for complex multi-VPC topologies.

# Create VPC Peering Connection cloudnexus vpc peer create \ --name prod-staging-peer \ --requester vpc-prod-01 \ --accepter vpc-staging-02 \ --region us-east-1 \ --auto-route true

25+

Peers Per VPC

<1ms

Intra-Region

Free

Peer Bandwidth

Managed DNS Service

CloudNexus DNS provides reliable, highly available domain name resolution with support for private hosted zones, DNSSEC, and health-based failover routing.

# Create a Private Hosted Zone cloudnexus dns zone create --name internal.app \ --type private \ --vpc vpc-prod-01 \ --region us-east-1 # Add a record cloudnexus dns record add \ --zone internal.app \ --name api \ --type A \ --value 10.0.2.10 \ --ttl 300

10B+

Queries/Day

<10ms

Response Time

99.99%

SLA

Dedicated Connections

Establish a private, dedicated network link between your data center and CloudNexus. Available in 1, 10, and 100 Gbps configurations with jumbo frame support.

# Provision a Dedicated Connection cloudnexus conn create --name dc-us-east \ --bandwidth 10 \ --unit Gbps \ --location ashburn-vsp-01 \ --vlan 100 \ --bgp-asn 65001 \ --jumbo-frames true

100 Gbps

Max Bandwidth

99.99%

Uptime SLA

MTU 9001

Jumbo Frames

✦ Pricing

Networking & VPC Pricing

Pay only for what you use. No upfront fees or minimum commitments.

Feature	Starter	Professional	Enterprise
VPC (per region)	Free	Free	Free
Data Transfer (inbound)	Free	Free	Free
Data Transfer (outbound, /GB)	$0.085	$0.065	$0.045
NAT Gateway (per hour)	$0.045	$0.045	$0.045
Elastic IP (per hour, unused)	$0.005	$0.005	$0.005
Application LB (per hour)	$0.0225	$0.0225	$0.0175
NLB (per hour)	$0.0225	$0.0225	$0.0175
VPC Peering (per hour)	—	$0.01	$0.005
Transit Gateway (per hour)	—	$0.025	$0.02
Flow Logs (per GB)	$0.05	$0.05	$0.03
Dedicated Connection (1 Gbps)	—	$400/mo	$350/mo
Managed DNS (per month)	$0.50	$0.50	$0.50

✦ FAQ

Frequently Asked Questions

Common questions about CloudNexus Networking and VPC services.

Yes, you can create up to 5 VPCs per region by default, with the ability to request higher limits. Each VPC is logically isolated and comes with its own CIDR block, subnets, route tables, and network gateways. You can also use VPC peering or Transit Gateway to connect them.

CloudNexus VPC supports all RFC 1918 private IP address ranges: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. You can choose a /16 CIDR block for your VPC, and subdivide it into smaller subnets ranging from /28 to /28. IPv6 is also supported with automatic /56 prefix assignment.

Inter-region VPC peering allows you to connect VPCs in different regions with low-latency, private networking. Traffic between peered VPCs stays on CloudNexus's backbone network and is not charged at data transfer rates. Setup is completed within minutes through the console, CLI, or API.

Absolutely. CloudNexus is designed with familiarity in mind. Our networking concepts (VPC, subnets, security groups, route tables) closely mirror industry standards. We provide a migration toolkit that can import your existing network configurations, and our support team can assist with any custom migrations.

CloudNexus VPC includes multiple layers of security: Security Groups (stateful, instance-level firewalls), Network ACLs (stateless, subnet-level rules), Web Application Firewall (WAF) integration, DDoS protection at the network edge, VPC Flow Logs for traffic analysis, and optional Network Firewall with IDS/IPS capabilities. All data in transit is encrypted by default.

Yes! Your first VPC per region is always free, as is inbound data transfer. New accounts also receive $200 in credits that can be applied to any networking service, including load balancers, NAT gateways, and data transfer. There are no upfront fees or minimum commitments.

Enterprise Networking, Simplified.

Your Private Network in the Cloud

Isolated Network Environment

Multi-Region VPC Peering

Dynamic Routing

VPC Flow Logs

Private Link

Full-Stack Network Capabilities

Load Balancers

Security Groups

Network ACLs

Managed DNS

Transit Gateway

IP Address Management

NAT Gateways

Dedicated Connections

Network Monitoring

Explore Networking Components

Load Balancers

Firewall & Security

VPC Peering & Transit

Managed DNS

Dedicated Connections

Networking & VPC Pricing

Frequently Asked Questions

Ready to Build Your
Private Network?

Enterprise Networking, Simplified.

Your Private Network in the Cloud

Isolated Network Environment

Multi-Region VPC Peering

Dynamic Routing

VPC Flow Logs

Private Link

Full-Stack Network Capabilities

Load Balancers

Security Groups

Network ACLs

Managed DNS

Transit Gateway

IP Address Management

NAT Gateways

Dedicated Connections

Network Monitoring

Explore Networking Components

Load Balancers

Firewall & Security

VPC Peering & Transit

Managed DNS

Dedicated Connections

Networking & VPC Pricing

Frequently Asked Questions

Ready to Build YourPrivate Network?

Ready to Build Your
Private Network?