---
title: "General information about cloud platform networks"
sidebar_label: "General information"
sidebar_position: 1
description: "Tasks, bandwidth, and costs of network objects in the cloud platform"
---

import {CustomTable} from '@selectel/docux/components'
import Tabs from '@theme/Tabs'
import TabItem from '@theme/TabItem'
import {TabItemLabel} from '@selectel/docux/components'
import ShieldOkIcon from '@selectel/docux/icons/shield-ok'
import Formbricks from '@theme/MDXComponents/Formbricks'

# General information about cloud platform networks

Cloud platform networks operate on the basis of OpenStack Neutron. Learn more in the [Neutron](https://docs.openstack.org/neutron/latest/index.html) section of the OpenStack documentation.

You can work with cloud platform networks in the [control panel](https://my.selectel.ru/vpc/default/networks/), using [OpenStack CLI](/cloud-servers/tools/openstack-cli/) or [Terraform](/terraform/providers/).

Cloud platform networks support [user types and roles](/access-control/access-management.mdx).

You can monitor metrics for cloud platform networks using the [Metrics](/metrics/about-metrics.mdx) service.

Records of cloud platform network operations are saved in [audit logs](/audit-logs/about-audit-logs.mdx).

## Tasks \{#tasks}

In the cloud platform, you can use network resources to:

* configure connectivity between devices in the same pool and aggregate into [private subnets](/cloud-servers/cloud-networks/private-networks-and-subnets.mdx) using [ports](/cloud-servers/cloud-networks/ports.mdx) for devices: cloud servers, load balancers, file storage, Managed Kubernetes clusters, and Managed Database clusters;
* route traffic between private subnets and configure internet access for devices in a private subnet using [cloud routers](/cloud-servers/cloud-networks/cloud-routers.mdx);
* connect [public floating IP addresses](/cloud-servers/cloud-networks/public-floating-ip-addresses.mdx) to devices in private subnets to set up access to them from the Internet;
* connect [direct public IP addresses](/cloud-servers/cloud-networks/direct-public-ip-addresses.mdx) to cloud servers for access to and from the Internet;
* connect devices to [public subnets](/cloud-servers/cloud-networks/public-subnets.mdx) for access to and from the Internet. You can connect cloud servers, load balancers, and Managed Database clusters to public subnets using [ports](/cloud-servers/cloud-networks/ports.mdx);
* distribute incoming network traffic between cloud servers using [load balancers](/cloud-servers/load-balancers/about-load-balancers.mdx);
* to organize network connectivity between devices in different pools (including different projects and accounts) or between different services, private subnets can be [connected to a global router](/cloud-servers/cloud-networks/private-networks-and-subnets.mdx#connect-private-network-to-global-router);
* configure [static routes](/cloud-servers/cloud-networks/static-routes.mdx) for subnets.

To restrict traffic, you can use:

* [cloud firewalls](/cloud-servers/firewalls/about-firewalls.mdx) — assigned to a cloud router port, they allow filtering traffic for private subnets and public IP addresses;
* [security groups](/cloud-servers/security-groups/about-security-groups.mdx) — assigned to a cloud server port, they allow filtering all port traffic;
* [allowed IP/MAC addresses](/cloud-servers/cloud-networks/ports.mdx#add-allowed-ip-mac-addresses-on-port) — configured on a cloud server port, except for ports with a [direct public IP address](/cloud-servers/cloud-networks/direct-public-ip-addresses.mdx), they allow outgoing port traffic only from specific IP/MAC address pairs.

To use security groups and allowed IP/MAC addresses, [traffic filtering (port security](#traffic-filtering-port-security)) must be enabled in the network.

## Network examples \{#network-examples}

### Internet access \{#access-to-internet}

Cloud servers can be connected to a private network without internet access, and various internet access options can be configured using routers and public IP addresses.

![](https://423.selcdn.ru/kb/cloudnetworks-about-networks-access-to-internet-LANG-THEME.png)

### Private network and bastion host \{#private-network-and-bastion-host}

A bastion host is a host in a network that acts as a gateway or proxy for all other servers. This host is available via a public IP address and communicates with other servers over a private network.

![](https://423.selcdn.ru/kb/cloudnetworks-about-networks-private-network-and-bastion-host-LANG-THEME.png)

### Public subnet \{#public-subnet}

All servers in a public subnet have internet access. Servers communicate with each other via public interfaces.

![](https://423.selcdn.ru/kb/cloudnetworks-about-networks-public-subnet-LANG-THEME.png)

### Load balancer and bastion host \{#balancer-and-bastion-host}

You can add a load balancer to a schema with a bastion host. The bastion host is used to access the private network and manage infrastructure, and the load balancer proxies requests.

![](https://423.selcdn.ru/kb/cloudnetworks-about-networks-balancer-and-bastion-host-LANG-THEME.png)

## Bandwidth \{#bandwidth}

Cloud platform network objects have limits on outgoing and incoming traffic bandwidth.

<Tabs queryString="bandwidth">
  <TabItem value="spb" default>
    <TabItemLabel>
      Internet access
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Private network and bastion host</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Public subnet</th><td>3 Gbps — in all pools except ru-1<br /><br />1 Gbps — in the ru-1 pool<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>St. Petersburg</th><td>3 Gbps — in all pools except ru-1<br /><br />1 Gbps — in the ru-1 pool<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Cloud server port with a direct public IP address</th><td>3 Gbps — in all pools except ru-1<br /><br />1 Gbps — in the ru-1 pool<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>3 Gbps — in all pools except ru-1<br /><br />1 Gbps — in the ru-1 pool</td><td>5 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>3 Gbps</td><td>—</td>
          </tr>

          <tr>
            <th>Cloud router, total bandwidth for all devices without a public floating IP address behind one router</th><td>5 Gbps</td><td>5 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>

  <TabItem value="msk">
    <TabItemLabel>
      Moscow
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Incoming traffic</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>3 Gbps<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>3 Gbps<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Private network traffic</th><td>3 Gbps<br /><br />10 Gbps — for the [10G Net](/cloud-servers/create/configurations.mdx#10g-net) line</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet with a public floating IP address</th><td>3 Gbps</td><td>5 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>3 Gbps</td><td>—</td>
          </tr>

          <tr>
            <th>Cloud server port with a direct public IP address</th><td>5 Gbps</td><td>5 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>

  <TabItem value="nsk">
    <TabItemLabel>
      Novosibirsk
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Incoming traffic</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>3 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>3 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Outgoing traffic</th><td>3 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>3 Gbps</td><td>5 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>3 Gbps</td><td>—</td>
          </tr>

          <tr>
            <th>Cloud router, total bandwidth for all devices without a public floating IP address behind one router</th><td>5 Gbps</td><td>5 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>

  <TabItem value="tsk">
    <TabItemLabel>
      Tashkent
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Incoming traffic</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>3 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Outgoing traffic</th><td>0.1 Gbps in the uz-2 pool, unavailable in the uz-1 pool</td><td>0.1 Gbps in the uz-2 pool, unavailable in the uz-1 pool</td>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>0.1 Gbps</td><td>Cloud server port in a public subnet</td>
          </tr>

          <tr>
            <th>Cloud router, total bandwidth for all devices without a public floating IP address behind one router</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>

  <TabItem value="alm">
    <TabItemLabel>
      Almaty
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Incoming traffic</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>3 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Outgoing traffic</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>0.1 Gbps</td><td>Cloud server port in a public subnet</td>
          </tr>

          <tr>
            <th>Cloud router, total bandwidth for all devices without a public floating IP address behind one router</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>

  <TabItem value="nrb">
    <TabItemLabel>
      Nairobi
    </TabItemLabel>

    <CustomTable>
      <table data-layout-fixed>
        <thead>
          <tr>
            <th />

            <th>Outgoing traffic</th><th>Incoming traffic</th>
          </tr>
        </thead>

        <tbody>
          <tr>
            <th colspan="3">Private network traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>0.1 Gbps</td><td>Unlimited `*`</td>
          </tr>

          <tr>
            <th colspan="3">Internet traffic</th>
          </tr>

          <tr>
            <th>Cloud server port in a public subnet</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Outgoing traffic</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private network</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>

          <tr>
            <th>Cloud server port in a private subnet without a public floating IP address (traffic via the cloud router external IP address)</th><td>0.1 Gbps</td><td>—</td>
          </tr>

          <tr>
            <th>Cloud router, total bandwidth for all devices without a public floating IP address behind one router</th><td>0.1 Gbps</td><td>0.1 Gbps</td>
          </tr>
        </tbody>
      </table>
    </CustomTable>

    `*` Actual bandwidth depends on device configuration and network conditions.
  </TabItem>
</Tabs>

The list of regions, availability zones, and pools can be viewed in the [Selectel Infrastructure](/infrastructure/locations.mdx) table.

Bandwidth for devices in private networks can be increased to 10 Gbps — [create a ticket](https://my.selectel.ru/tickets/create/) or [create a flavor](/cloud-servers/create/create-flavor.mdx) in the [10G Net](/cloud-servers/create/configurations.mdx#10g-net).

Port speed may decrease significantly, for example to 0.1 Gbit/s, if the associated IP address is blocked by the Selectel security system. To increase the speed, [create a ticket](https://my.selectel.ru/tickets/create/).

## Traffic filtering (port security) \{#traffic-filtering-port-security}

Traffic filtering (port security) is a network feature for protection against unauthorized access and attacks. Filtering allows you to:

* use [security groups](/cloud-servers/security-groups/) on cloud server ports;
* [add allowed IP/MAC addresses](/cloud-servers/cloud-networks/ports.mdx#add-allowed-ip-mac-addresses-on-port) for outgoing traffic from cloud server ports;
* [restrict access to a load balancer](/cloud-servers/load-balancers/manage/limit-access-to-balancer.mdx).

The network filtering status can be viewed in the [Control Panel](https://my.selectel.ru/vpc/default/networks): from the top menu, click **Products** → **Cloud Servers** → **Network** → **Private Networks** or **Public Networks** tab. A network with enabled filtering is marked with <ShieldOkIcon />.

Traffic filtering is enabled by default in all new private networks and public subnets and cannot be disabled. If filtering is enabled in a network, then for each new port in this network:

* a [default security group](/cloud-servers/security-groups/about-security-groups.mdx#default-security-group) is assigned, which allows all traffic through the port. You can [assign another security group](/cloud-servers/security-groups/manage-groups/assign-security-groups.mdx);
* one allowed IP/MAC address pair for outgoing port traffic is fixed. This blocks MAC/IP spoofing and the operation of overlay networks, VPNs, and VRRP. If you use solutions based on these, you must [add the allowed IP/MAC addresses](/cloud-servers/cloud-networks/ports.mdx#add-allowed-ip-mac-addresses-on-port) that can be used to send traffic.

Filtering is disabled in private networks and public subnets that were created:

* in the ru-1 pool before June 2, 2025;
* in the ru-2 pool before June 3, 2025;
* in the ru-3 pool before June 4, 2025;
* in the ru-7 pool before June 5, 2025;
* in the ru-8 pool before May 15, 2025;
* in the ru-9 pool before May 26, 2025;
* in the gis-1 pool before May 29, 2025;
* in the kz-1 pool before May 28, 2025;
* in the uz-1 pool before May 27, 2025;
* in the uz-2 pool before May 22, 2025;
* in the ke-1 pool before May 26, 2025.

Filtering cannot be enabled in these networks. If you need to use security groups, add allowed IP/MAC addresses, or restrict access to a load balancer, [create a new private network](/cloud-servers/cloud-networks/private-networks-and-subnets.mdx#create-private-network) or [public subnet](/cloud-servers/cloud-networks/public-subnets.mdx#create-public-subnet) and configure addresses from it on your devices.

## Blocked ports \{#blocked-ports}

In Selectel, [some TCP/UDP ports are blocked](/infrastructure/blocked-ports.mdx) by default, and traffic through them is blocked.

## Cost \{#price}

Public IP addresses and public subnets are paid for using the [cloud platform payment model](/cloud-servers/about/payment.mdx#payment-model).

Prices can be viewed on [selectel.ru](https://selectel.ru/prices/).

Other network resources are provided free of charge.

<Formbricks />