Networking · in-mumbai-1 · in-noida-1

Private networking without the NAT-gateway tax.

On AWS, the NAT gateway alone costs ₹3,884 a month plus ₹5.32 per GB it touches — before your app serves a request. Here, VPCs, tiers, ACLs and NAT are ₹0. You pay for a public IP and, if you need one, a VPN gateway.

Create a VPC — it's free See what's included ↓

VPC ₹0NAT includedTiers multi-subnetACLs ordered rulesVPN IPsec S2S

Capabilities

Segment like production expects

Multi-tier segmentation

Web, app and database tiers on separate subnets inside one CIDR — blast radius by design, not by hope.

Ordered network ACLs

Numbered allow/deny rules per tier, evaluated top-down — auditable in one screen, exportable for your security review.

NAT and forwarding at ₹0

Source NAT for outbound, static NAT and port forwarding for inbound — on the VPC router you already have, with no per-GB meter.

IPsec to your office or DC

IKEv2 site-to-site tunnels with pre-shared keys to your firewall or on-prem network — hybrid without a telco project.

Redundant router option

Run the VPC router as a redundant pair — gateway failover happens in seconds, invisibly to your tiers.

Static routes & visibility

Custom routes toward VPN and private gateways, with per-tier traffic graphs and event logs in the console.

Under the hood

One VPC router, everything accounted for

Each VPC gets a CloudStack virtual router (redundant optional) handling routing, source NAT, DHCP and DNS for its tiers. ACLs are ordered network ACL lists applied per tier; VPN is strongSwan-based IKEv2 IPsec.

Because it's your router, there's no per-GB processing meter — the economics of a NAT gateway without the gateway bill.

Pick your super-CIDR (a /16 leaves room to grow) and carve tiers freely
ACL lists reusable across tiers, versioned via API and Terraform
Multiple customer gateways per VPN — branch offices welcome
Private gateway for MPLS/P2P into regulated on-prem environments
Every packet path stays inside Indian facilities

FAQ

VPCs in India — common questions

How should I size my CIDR?+

Choose the super-CIDR at creation and carve tiers inside it; you can add tiers later but not enlarge the super-CIDR. A /16 costs nothing extra and never forces a re-architecture — take it.

Do tiers talk to each other by default?+

Traffic between tiers routes through the VPC router and is governed by each tier's ACL. Default-deny between tiers with explicit allows is the pattern we'd recommend for anything production.

What throughput does the VPN gateway handle?+

Up to roughly 1 Gbps per gateway depending on cipher and packet size — AES-GCM on modern firewalls gets close to line rate. Need more, run parallel tunnels or ask about a private gateway.

Can two VPCs peer with each other?+

There's no one-click peering primitive. The working patterns are an IPsec tunnel between the two VPC routers, or a private gateway if both sides are with us — pick based on bandwidth and latency needs.

Is IPv6 supported?+

Dual-stack is available on request per VPC today and is being rolled out as a default. If IPv6 is a hard requirement, say so at signup and we'll enable it on your zone.

Pairs well with

Complete the stack

Cloud ServersDeploy tiers of D-series servers inside→Load BalancerPublic VIP in front, private backends behind→Managed KubernetesClusters deploy straight into a VPC tier→