Set up access to and from the Internet

Last update: September 12 2024

Set up access to and from the Internet

For the cloud server, cloud load balancer, and cloud database cluster, you can configure access to and from the Internet:

• over a public IP address. This method is more secure, as you can configure filtering of incoming traffic for the private subnet via the cloud firewall;
• over a public subnet.

If the device only requires Internet access without access from the Internet, you can configure the device to cloud router.

Configure access to and from the Internet via a public IP address⁠

To configure Internet access to and from the Internet for devices on the private subnet, you must connect the subnet to a cloud router with access to the external network and connect a public IP address to the device. The cloud router acts as a 1:1 NAT via the external IP address that is allocated when the router is connected to the external network: it organizes access to the Internet from the private subnet and processes incoming traffic packets for the public IP addresses.

You can connect a public IP address by cloud server creation, creating a cloud-based load balancer, Creating a cloud database cluster (PostgreSQL example)as well as after creation.

The device must be on a private subnet or a global router subnet that meets the requirements. Use the instructions to prepare the subnet Prepare a private subnet to connect a public IP address.

1. Create a public IP address.
2. Create a cloud router that connects to an external network.
3. Connect a private subnet to the cloud router.
4. Connect a public IP address to a device port on the private subnet.

Create a public IP address⁠

Control panel

1. В control panels go to Cloud platform → Network.
2. Open the tab Public IP addresses.
3. Click Create an IP address.
4. Select poolThis will create a public IP address.
5. Specify the number of public IP addresses — 1.
6. Click Create.

OpenStack CLI

1. Open the OpenStack CLI.

2. Create a public IP address:

   openstack floating ip create external-network

Create a cloud router with connection to an external network⁠

Control panel

1. В control panels go to Cloud platform → Network.
2. Open the tab Routers.
3. Click Create a router.
4. Select poolin which a cloud router will be created.
5. Enter the name of the router.
6. Check the box Connect the router to an external network — an external IP address will be assigned to the router.
7. Click Create.

OpenStack CLI

1. Open the OpenStack CLI.

2. Create a cloud router:

   openstack router create <router_name>

   Specify <router_name> — the name of the cloud router.

3. Connect the cloud router to an external network — an external IP address will be assigned to the router:

   openstack router set --external-gateway external-network <router>

   Specify <router> — The ID or name of the cloud router, can be viewed using the command openstack router list

Connect the subnet to the cloud router⁠

Control panel

1. В control panels go to Cloud platform → Network.

2. Open the tab Routers.

3. Open the router card.

4. Click Add a subnet.

5. Select a private subnet or a global router subnet.

6. Enter the IP address of the router. The IP address of the cloud router must match the default gateway of the private subnet. To view the default gateway on the private subnet, click the tab Private networks → network card → tab Subnetworks → subnet row → column Gateway.

   If you are connecting a global router subnet, the IP address of the cloud router must match the default gateway of the global router subnet and be different from the global router's IP address, the IP addresses of devices on the network, and service addresses .253 и .254.

7. Click Add a subnet.

OpenStack CLI

1. Open the OpenStack CLI.

2. Connect the subnet to the cloud router:

   openstack router add subnet <router> <subnet>

   Specify:

   • <router> — The ID or name of the cloud router, can be viewed using the command openstack router list;
   • <subnet> — ID or private subnet name, can be viewed with the command openstack subnet list

Connect a public IP address to a device port on a private subnet⁠

Control panel

1. В control panels go to Cloud platform → Network.
2. Open the tab Private networks.
3. Open the network card → tab Ports.
4. In the port row in the column Public IP click Connect.
5. Select a public IP address.

OpenStack CLI

1. Open the OpenStack CLI.

2. Connect a public IP address to the port:

   openstack floating ip set --port <port> <public_ip_address>

   Specify:

   • <port> — The port ID of the cloud server or load balancer, can be viewed using the command openstack port list;
   • <public_ip_address> — ID or public IP address, can be viewed with the command openstack floating ip list

Configure access to and from the Internet via public subnetwork⁠

To set up access to and from the Internet through the public subnetYou must connect the device to a public subnet. For a load balancer and cloud database cluster, this can only be done by creating a balancer и creating a cluster (example for PostgreSQL). The cloud server can be connected to a public subnet or by server creation, or after creation — to do this you need to add to the cloud server on a public subnet via port.

1. Create a public subnet.
2. Add the cloud server to the public subnet via port.

Create a public subnet⁠

Control panel

1. В control panels go to Cloud platform → Network.
2. Open the tab Public subnets.
3. Click Create a subnet.
4. Select pool, a public subnet will be created.
5. Select subnet size — the range of IP addresses available on the subnet.
6. Optional: To change the DNS servers, tap . Enter one to three values. Press .
7. Click Create.

Add the cloud server to the public subnet via port⁠

Control panel

1. В control panels go to Cloud platform → Servers.
2. Open the server page → tab Ports.
3. Click Add a port.
4. Select a public subnet.
5. Enter the IP address of the port.
6. Click Add a port.

OpenStack CLI

1. Open the OpenStack CLI.

2. Create a port on the public subnet:

   openstack port create \
     --network <subnet> \
     --fixed-ip subnet=<subnet>,ip-address=<port_ip_address> \
     <port_name>

   Specify:

   • <subnet> — ID or public subnet name, can be viewed with the command openstack network list;
   • <port_ip_address> — IP address of the port;
   • <port_name> — port name.

3. Add a port to the cloud server:

   openstack server add port <server> <port>

   Specify:

   • <server> — The ID or name of the cloud server, can be viewed using the command openstack server list;
   • <port> — ID or port name, can be viewed with the command openstack port list

Set up internet access via cloud router⁠

You can configure Internet access for devices on a private subnet without external access from the Internet.

To do this, connect a cloud router with external network access to the private subnet or global router subnet where the device resides. If the cloud router is connected to an external network, it acts as a 1:1 NAT for access from the private network to the Internet via the router's external IP address. The external address is only used to access the Internet from the device, it cannot be used to connect to devices on the subnet.

1. Create a cloud router that connects to an external network.
2. Connect a private subnet to the cloud router.

Create a cloud router with connection to an external network⁠

Control panel

1. В control panels go to Cloud platform → Network.
2. Open the tab Routers.
3. Click Create a router.
4. Select poolin which a cloud router will be created.
5. Enter the name of the router.
6. Check the box Connect the router to an external network — an external IP address will be assigned to the router.
7. Click Create.

OpenStack CLI

1. Open the OpenStack CLI.

2. Create a cloud router:

   openstack router create <router_name>

   Specify <router_name> — the name of the cloud router.

3. Connect the cloud router to an external network — an external IP address will be assigned to the router:

   openstack router set --external-gateway external-network <router>

   Specify <router> — The ID or name of the cloud router, can be viewed using the command openstack router list

Connect the subnet to the cloud router⁠

Control panel

1. В control panels go to Cloud platform → Network.

2. Open the tab Routers.

3. Open the router card.

4. Click Add a subnet.

5. Select a private subnet or a global router subnet.

6. Enter the IP address of the router. The IP address of the cloud router must match the default gateway of the private subnet. To view the default gateway on the private subnet, click the tab Private networks → network card → tab Subnetworks → subnet row → column Gateway.

   If you are connecting a global router subnet, the IP address of the cloud router must match the default gateway of the global router subnet and be different from the global router's IP address, the IP addresses of devices on the network, and service addresses .253 и .254.

7. Click Add a subnet.

OpenStack CLI

1. Open the OpenStack CLI.

2. Connect the subnet to the cloud router:

   openstack router add subnet <router> <subnet>

   Specify:

   • <router> — The ID or name of the cloud router, can be viewed using the command openstack router list;
   • <subnet> — ID or private subnet name, can be viewed with the command openstack subnet list