Dedicated server networks
Dedicated servers are connected to Selectel's network infrastructure by default and can be connected:
- to the public network (internet);
- private network (local area network).
Some Chipcore Line servers only connect to a public network, you cannot connect them to a local network.
Separate network interfaces (a group of aggregated network interfaces) are used to connect the server to the public and private network:
- Internet port;
- port for the local network.
You can view information about server ports in the control panel: in the top menu, click Products → Dedicated Servers → Servers → Server page → Ports tab.
After ordering, the server is included in a shared VLAN for the public network and a dedicated VLAN for the private network. One VLAN for the private network is allocated per account in one pool. The list of all VLANs can be viewed in the control panel: in the top menu, click Products → Dedicated Servers → Network → VLAN tab.
You may need to configure network interfaces on the server to connect to the network.
If a dedicated server is not available over the network, you can connect to it via a KVM console. For Chipcore Line servers, you can order an additional service IP-KVM connection for 3 hours or boot into recovery and diagnostic mode.
You can disconnect a server of arbitrary configuration from the public network. To do this, create a ticket. After disconnection it will not be possible to install the OS on the server by auto-installation.
Dedicated servers are by default protected against Selectel DDoS attacks. A basic firewall can be connected free of charge for a public dedicated VLAN.
Public network
Public networks are used for servers to access the Internet using public IP addresses.
The server is automatically included in the shared VLAN for the public network, and is allocated one IPv4 public address from the shared subnet. Other clients' servers are also on the shared subnet, and servers in the same account can fall into different shared subnets. For security, IP address spoofing protection is used on the shared subnet.
To obtain additional IP addresses , order a dedicated subnet and configure it. When ordering a dedicated subnet, IP addresses will be allocated to an account on a separate VLAN. No more than one dedicated VLAN for the public network in one pool is allocated per account.
Dedicated subnet IP addresses can be used on account servers that are in the same pool (IP addresses work only within the same pool). When ordering a dedicated subnet, you can use either an address from a shared subnet or a dedicated subnet. You cannot use both IP addresses at the same time.
You can view the VLAN that is assigned to a port in the Control Panel: from the top menu, click Products → Dedicated Servers → Servers → Server → Server page → Ports tab.
The network interface on the server will be configured automatically only when the OS is installed automatically. When installing the OS from its own image, you must configure the network interface on the server manually.
Network parameters (IP address, subnet mask, default gateway) can be viewed in the control panel: in the top menu, click Products → Dedicated Servers → Network → Subnet tab → Subnet page.
When setting up your network, we recommend using Selectel recursive DNS servers, but you can specify any public DNS servers.
All traffic (incoming, outgoing) that passes through the Internet port is summarized and charged according to the traffic consumption model.
Network limits are set on the ports:
- for the number of MAC addresses — 25 MAC addresses per switch port;
- for broadcast traffic — 10 MB/sec per port for each separate type of traffic.
Private network
Private (local) networks do not have access to the Internet and are used to connect servers to each other inside the data center.
Traffic in the local network is not charged.
In a single pool, all servers (except for some Chipcore Line servers) are connected to a simple L2-local network via Selectel switches. After ordering, the server will be automatically included in the VLAN for the local network. One VLAN for LAN in one pool is allocated per account. If more VLANs are needed, Q-in-Q can be configured.
You can see which VLAN is assigned to a port in the control panel: from the top menu, click Products → Dedicated Servers → Servers → Server → Server page → Ports tab.
To create network connectivity between dedicated servers that are located in the same pool, an L2 private network is used. To configure it, specify the same VLAN on the local port of each server and configure the servers for the same addressing.
To create network connectivity between dedicated servers in different pools or with other Selectel products, use a Selectel Global Router.
To use the local network , configure local addressing on the network interfaces in the server OS.
Network to third-party operator
Many telecom operators have a point of presence in Selectel data centers. You can organize a direct connection with them using the Direct Connect service:
- Direct Connect — physical port — rent of a port on the Selectel access switch. In this case, the client shall organize the connection on the part of the service provider (clarification of the possibility of connection to Selectel, checking of crossing, payment for communication channels, etc.) on his/her own;
- Direct Connect — Logical Port — lease of a pre-raised, reserved connection between Selectel and the partner backbone operator.
Blocked ports
To secure the Selectel infrastructure from malicious network activity, some TCP/UDP ports are blocked, including port 25 (mailing).
If the port does not fall within these restrictions, check its availability on the OS side using the Nmap utility.