Skip to main content

Example of configuring Internet access for a dedicated server via a cloud router

Configuration goal

Unite a dedicated server and a cloud router with an L3 private network and organize Internet access for the dedicated server through the cloud router, which will allow you to limit direct Internet access for the dedicated server.

To do this, you need to unite the dedicated server and the cloud router with a private network using a global router. Then, configure routing in the network so that the devices can see each other and Internet traffic from the dedicated server passes through the cloud router.

What you need for configuration

DeviceDevice settings in the example
Dedicated server in a private subnet without direct Internet access
Cloud router in a private subnet with an external IP address

Configuration result

The dedicated server and cloud router will be interconnected by an L3 private network, and Internet access will be organized for the dedicated server through the cloud router:

Configuration steps

  1. Create a global router.
  2. Connect the dedicated server subnet to the global router.
  3. Connect the cloud platform project subnet to the global router.
  4. Add a route in the cloud platform project subnet.
  5. Add a route on the cloud router.
  6. Add a route on the dedicated server.
  7. Add a route on the global router.

1. Create a global router

  1. In the Control panel, in the top menu, click Products and select Global Router.
  2. Click Create router. A limit of five global routers is set for each account.
  3. Enter the router name.
  4. Click Create.
  5. If the router was created with the status ERROR or is stuck in one of the statuses, create a ticket.

2. Connect the dedicated server subnet to the global router

  1. In the control panel, in the top menu, click Products and select Global Router.
  2. Open the router page.
  3. Click Create network.
  4. Enter a network name. It will only be used in the control panel.
  5. Select the Servers and Hardware service.
  6. Select a network location.
  7. Select or enter a VLAN; in the example, it is VLAN 2044.
  8. Enter a subnet name. It will only be used in the control panel.
  9. Enter the CIDR—the IP address and mask of the private subnet; in the example, it is 192.168.0.0/24.
  10. Enter the gateway IP address or leave the first address of the subnet that is assigned by default; in the example, it is 192.168.0.1. Do not assign this address to your devices so as not to disrupt network operation.
  11. Enter service IP addresses or leave the last addresses of the subnet that are assigned by default; in the example, they are 192.168.0.5 and 192.168.0.6. Do not assign these addresses to your devices so as not to disrupt network operation.
  12. Click Create network.
  13. Optional: check the network topology on the global router. In the control panel, in the top menu, click Products → Global Router → page of the required router → Network map.

3. Connect the cloud platform project subnet to the global router

  1. In the control panel, in the top menu, click Products and select Cloud Servers.

  2. Go to the Network section → Private networks tab.

  3. Make sure that the network to which the cloud platform project subnet belongs is not yet connected to any of the account's global routers—it does not have the Global Router tag.

  4. In the menu of the network, select Connect to Global Router.

  5. Select the global router.

  6. For each network subnet, enter the IP address to be assigned to the router, or leave the first available address from the subnet, which is assigned by default; in the example, this is 172.16.0.1. Do not assign this address to your own devices to avoid disrupting network operation. The two last available subnet addresses will be reserved as service addresses.

  7. Click Connect. Do not close the window until a message appears confirming that the network is connected. After that, in the Control panel:

    • the network will appear in the section Selectel Global Router on the page of the router to which you connected it;
    • in the section Cloud Servers → Network → tab Private Networks, the network will have the Global Router **** tag.

4. Add a route in the cloud platform project subnet

Add a static route for the subnet of the cloud platform project that you connected to the global router in step 3; in the example, this is 172.16.0.0/29.

During configuration, specify:

  • destination subnet — the dedicated server subnet on the global router; in the example, this is 192.168.0.0/24;
  • gateway — the gateway of the cloud platform project subnet on the global router; in the example, this is 172.16.0.1.

5. Add a route on the cloud router

Static routes on a cloud router can only be configured via OpenStack API.

  1. Open OpenStack CLI.

  2. Create a static route:

    openstack router set --route destination=192.168.0.0/24,gateway=172.16.0.1 13b6da27-4409-456c-b9aa-5dcf84690aaf

    Where:

    • 192.168.0.0/24 — dedicated server subnet on the global router with the mask specified;
    • 172.16.0.1 — gateway of the cloud platform project subnet on the global router;
    • 13b6da27-4409-456c-b9aa-5dcf84690aaf — UUID of the cloud router; you can find it in the Control panel: in the top menu, click Products → Cloud Servers → Network → Cloud Routers tab → the alphanumeric value under the router name.

6. Add a route on the dedicated server

This process is described for Ubuntu 22.04. If you need to add routes on a server running Debian, CentOS, or Windows, use the instructions in Adding static routes on a server.

  1. Connect to the server.

  2. Open the CLI.

  3. Open the network configuration file; in Ubuntu 22.04, this is the configuration file for the netplan utility:

    vi /etc/netplan/50-cloud-init.yaml

  4. At the end of the block with private network interface data, add the route:

    routes:
      - to: 0.0.0.0/0
        via: 192.168.0.1

    Where:

    • 0.0.0.0/0 — default subnet for sending internet traffic;
    • 192.168.0.1 — gateway of the dedicated server subnet on the global router.

  5. Save the file.

  6. Check the settings:

    sudo netplan try

  7. Apply the changes:

    netplan apply

7. Add a route on the global router

  1. In the Control panel, in the top menu, click Products and select Global Router.
  2. Open the router page → Static Routes tab.
  3. Click Create route.
  4. Enter a route name — you can use any name, it will only be displayed in the control panel.
  5. Enter the destination subnet CIDR 0.0.0.0/0.
  6. Enter the Next hop IP address — the private IP address of the cloud router; in the example, this is 172.16.0.3.
  7. Click Create.