Skip to main content

Networking

Octos Cloud provides a complete software-defined networking stack with zero egress fees and zero bandwidth caps. Build isolated environments, control traffic flow, and manage DNS — all from the portal.

Architecture overview

Internet

├── Public Network (auto-assigned public IP)
│ │
│ Virtual Router
│ │
│ Private Network (10.x.x.x)
│ ├── VM-1
│ ├── VM-2
│ └── VM-3

└── Floating IPs (portable, reassignable)

Network types

TypeDescriptionUse case
PublicInternet-routable, auto-assigned IPsWeb servers, APIs
Private (Isolated)L2-isolated within your projectInternal services, databases
SharedShared across projects (admin-managed)Multi-project architectures
VPCVirtual Private Cloud with subnet controlEnterprise environments

Security groups

Stateful firewall rules that control traffic at the VM level.

Default behavior

  • All inbound traffic is denied by default
  • All outbound traffic is allowed by default

Common rule sets

Web server

DirectionProtocolPortRemote
InboundTCP22Your IP
InboundTCP800.0.0.0/0
InboundTCP4430.0.0.0/0

Database server (private only)

DirectionProtocolPortRemote
InboundTCP543210.0.0.0/24
InboundTCP22Bastion IP

Load balancers

Distribute traffic across multiple VMs for high availability.

  1. Navigate to Load Balancers in your project
  2. Click Create Load Balancer
  3. Configure listeners (port, protocol, health checks)
  4. Add target VMs to the backend pool

DNS management

Manage DNS zones and records directly from the Octos Cloud portal.

Supported record types

A · AAAA · CNAME · MX · TXT · SRV · NS · LOC

Create a DNS zone

  1. Navigate to DNS Management
  2. Click Create DNS Domain
  3. Add your domain and configure nameserver records
  4. Add individual records (A, CNAME, MX, etc.)

Zero egress — no transfer fees

Octos Cloud does not charge for:

  • Outbound data transfer to the internet
  • Traffic between VMs on the same private network
  • API requests to the management plane
  • DNS query resolution

This makes total cost of ownership significantly more predictable compared to hyperscalers that charge per-GB egress.

Next steps