Skip to main content
Cloud routers
Last update:

Cloud routers

With a cloud router, you can:

  • route traffic between private subnets. All private subnets connected to the same router can communicate with each other and use the router's IP address as the default route;
  • configure Internet access for devices in the private subnet (outgoing traffic) and from the Internet (incoming traffic), see the instructions for details. Set up access to and from the Internet. The cloud router performs 1:1 NAT via an external IP address that is allocated when the router is connected to an external network: it organizes access to the Internet from a private subnet and processes incoming traffic packets for public IP addresses.

On a cloud router, you can configure static routes.

A cloud router can only be used within one projects and one pool.

Cloud routers have a limit on the amount of traffic — bandwidth. You can see it in the table Throughput.

Working with cloud routers can be in the control panels with the help of OpenStack CLI or Terraform.

Create a cloud router

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. Click Create a router.
  4. Select pool in which a cloud router will be created.
  5. Enter the name of the router.
  6. Optional: check the checkbox Connect the router to an external network — an external IP address will be assigned to the router.
  7. Click Create.

Connect a subnet to the cloud router

For private subnets to communicate with each other, they must be connected to the same cloud router. The subnets must have different CIDRs.

To set up access to and from the Internet for devices on private subnets using a cloud router, use these instructions Set up access to and from the Internet.

  1. В control panels go to Cloud platformNetwork.

  2. Open the tab Routers.

  3. Open the router card.

  4. Click Add a subnet.

  5. Select a private subnet or a global router subnet.

  6. Enter the IP address of the router. The IP address of the cloud router must match the default gateway of the private subnet. To view the default gateway on the private subnet, click the tab Private networks → network card → tab Subnetworks → subnet row → column Gateway.

    If you are connecting a global router subnet, the IP address of the cloud router must match the default gateway of the global router subnet and be different from the global router's IP address, the IP addresses of devices on the network, and service addresses .253 и .254.

  7. Click Add a subnet.

Disconnect the subnet from the cloud router

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. Open the router card.
  4. On the menu. of the private subnet, select Delete port.
  5. Click Delete.

Connect the cloud router to an external network

To configure Internet access for devices on a private subnet, the subnet must be connected to a cloud router with access to an external network (external-network). When you connect the router to an external network, an external IP address will be assigned to the router, through which the router will perform 1:1 NAT function.

If the router connects multiple private subnets, devices on all subnets will be able to access the Internet.

To set up access from the Internet for devices on private subnets using a cloud router, use these instructions Set up access to and from the Internet.

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. On the menu. of the cloud router, select Connect to an external network.

Disconnect the cloud router from the external network

If you disconnect the Cloud Router from the external network, its external IP address will return to the address pool. When you reconnect, the IP address will change.

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. On the menu. of the cloud router, select Disconnect from external power supply.

Assign a firewall to a cloud router port

carefully

Inbound and outbound traffic that is not allowed in the cloud firewall rules will be denied on the cloud router port. Active sessions on the router that cannot be established by the new rules will be interrupted.

You cannot assign more than one firewall to a single router port.

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. Open the cloud router card.
  4. In the row of the private subnet for which you want to configure traffic filtering, in the column Firewall click Connect.
  5. Select a firewall.
  6. Click Assign.

Disconnect the firewall from the cloud router port

carefully

The cloud firewall rules will no longer apply — all inbound and outbound traffic that passes through the cloud router port will be allowed.

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. Open the router card.
  4. On the menu. Select the private subnet for which you configured traffic filtering, and then select Disconnect the port from the port.
  5. Click Disconnect.

Turn on the cloud router

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. In the cloud router card, turn on the router.

Turn off the cloud router

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. In the cloud router card, disable the router.

Remove the cloud router

  1. В control panels go to Cloud platformNetwork.
  2. Open the tab Routers.
  3. If subnets are connected to the router, delete the router ports in the subnets. To do this, open the router card and in the menu subnets, select Delete port.
  4. On the menu. of the router, select Remove the router.
  5. Click Delete.