Networks (VPC) & Subnets
Isolated Virtual Private Clouds, CIDR block allocation, and internal DNS resolution.
Virtual Private Cloud Overview
A VPC (Virtual Private Cloud) is a logically isolated virtual network dedicated to your project. All VM instances provisioned within the same VPC communicate over private IP addresses with zero public exposure.
Key VPC Features in microsrv:
- L2/L3 Multi-Tenant Isolation: traffic across distinct VPCs is cryptographically and logically isolated at kernel rate via eBPF filters.
- Default CIDR Block:
10.42.0.0/16. - Private Name Resolution (Internal DNS): every workload gets a DNS name inside its VPC. The default DNS resolver is the VPC gateway (e.g.
10.0.0.1); it answers<workload-name>.msrv.internalqueries with an A record pointing at the workload’s in-VPC IP, e.g.ctr-deadbeef.msrv.internal→10.0.0.5. Instances can also resolve each other by these names (e.g.,ping db-master). - WireGuard gateway: attach work machines and external infrastructure through an encrypted tunnel — see WireGuard gateway.
Creating a Private Network
- Open Console -> VPCs.
- Click Create VPC.
- Specify a network label and CIDR prefix (e.g.,
production-vpc,10.50.0.0/16).