Networking

• 1: VPC
• 1.1: Overview
• 1.1.1: ServiceWatch Metrics
• 1.2: How-to guides
• 1.2.1: Subnet
• 1.2.2: Port
• 1.2.3: Internet Gateway
• 1.2.4: NAT Gateway
• 1.2.5: Public IP
• 1.2.6: Private NAT
• 1.2.7: VPC Endpoint
• 1.2.8: VPC Peering
• 1.2.9: Transit Gateway
• 1.2.10: PrivateLink Service
• 1.2.11: PrivateLink Endpoint
• 1.2.12: NAT Logging
• 1.3: API Reference
• 1.4: CLI Reference
• 1.5: Release Note
• 2: Security Group
• 2.1: Overview
• 2.2: How-to guides
• 2.2.1: Security Group Logging
• 2.2.2: Migration Rules
• 2.3: API Reference
• 2.4: CLI Reference
• 2.5: Release Note
• 3: Load Balancer
• 3.1: Overview
• 3.1.1: ServiceWatch metric
• 3.2: How-to guides
• 3.2.1: LB Server Groups
• 3.2.2: LB Health Check
• 3.3: API Reference
• 3.4: CLI Reference
• 3.5: Release Note
• 4: DNS
• 4.1: Overview
• 4.1.1: TLD List
• 4.1.2: ServiceWatch Metrics
• 4.2: How-to guides
• 4.2.1: Private DNS
• 4.2.2: Hosted Zone
• 4.2.3: Public Domain Name
• 4.3: Release Note
• 5: VPN
• 5.1: Overview
• 5.1.1: ServiceWatch Metrics
• 5.2: How-to guides
• 5.2.1: VPN Tunnel
• 5.3: API Reference
• 5.4: CLI Reference
• 5.5: Release Note
• 6: Firewall
• 6.1: Overview
• 6.2: How-to guides
• 6.2.1: Firewall Logging
• 6.2.2: Migration Rules
• 6.3: API Reference
• 6.4: CLI Reference
• 6.5: Release Note
• 7: Direct Connect
• 7.1: Overview
• 7.1.1: ServiceWatch Metrics
• 7.2: How-to guides
• 7.3: API Reference
• 7.4: CLI Reference
• 7.5: Release Note
• 8: Cloud LAN-Campus
• 8.1: Overview
• 8.2: How-to guides
• 8.2.1: Campus Firewall Request Service
• 8.3: Release Note
• 9: Cloud LAN-Campus
• 9.1: Overview
• 9.2: How-to guides
• 9.3: Release Note
• 10: Cloud LAN-Data Center
• 10.1: Overview
• 10.2: How-to guides
• 10.2.1: vDevice
• 10.2.2: Interface
• 10.2.3: vCable
• 10.2.4: vEdge
• 10.3: Release Note
• 11: Cloud WAN
• 11.1: Overview
• 11.1.1: Monitoring Metrics
• 11.2: How-to guides
• 11.3: Release Note
• 12: SASE
• 12.1: Overview
• 12.2: How-to guides
• 12.2.1: SASE Lastmile
• 12.3: Release Note
• 13: Cloud Last Mile
• 13.1: Overview
• 13.2: How-to guides
• 13.2.1: Circuit and Edge
• 13.3: Release Note
• 14: Global CDN
• 14.1: Overview
• 14.1.1: ServiceWatch Metrics
• 14.2: How-to guides
• 14.3: API Reference
• 14.4: CLI Reference
• 14.5: Release Note
• 15: GSLB
• 15.1: Overview
• 15.2: How-to guides
• 15.3: API Reference
• 15.4: CLI Reference
• 15.5: Release Note
• 16: Cloud Virtual Circuit
• 16.1: Overview
• 16.2: How-to guides
• 16.3: Release Note
• 17: Private 5G Cloud
• 17.1: Overview
• 17.2: How-to guides
• 17.3: Release Note

1 - VPC

1.1 - Overview

Service Overview

Samsung Cloud Platform provides VPC services to support the use of a logically isolated, customer-dedicated private network space in the cloud environment.
VPC (Virtual Private Cloud) is a service that provides a logically isolated, customer-dedicated private network space in a cloud environment. Depending on the use case, you can create a General Subnet and a Local Subnet for communication between servers, and freely select NAT Gateway and Internet Gateway to configure various networks. You can create multiple VPCs and operate them independently. VPC Peering enables connectivity configuration between VPCs.

Service Architecture Diagram

Component

Subnet

A Subnet refers to the IP address range of a VPC. Depending on the purpose, use a General Subnet to create Subnets for Public or Private use. It is a service that lets users segment the network within a VPC to match their purpose and scale. Subnet provides a regular Subnet and a Local Subnet for communication between servers.

• General Subnet Creation/Query/Deletion: When creating a VPC, a Subnet is created by default and can be used according to its purpose. For example, you can separate and use a Public Subnet that can access the Internet and a Private Subnet that cannot.

• VPC Endpoint Subnet Create/Read/Delete: Access to the Samsung Cloud Platform is possible via a private connection from an external network linked to the VPC, enabling entry into the VPC.

• Local Subnet Creation/Query/Deletion: It does not allow connections to other subnets or external access, and only permits direct connections between Virtual Server-Virtual Server or Bare Metal Server-Bare Metal Server, so it can be configured only for Virtual Server-Virtual Server communication within the VPC.

Subnet types

It denotes a Sub_network, an IP address space subdivided into smaller units for use in an IP network. Subnet types are divided based on how routing for the Subnet is configured.

Internet Gateway

Create an Internet Gateway to connect it to a VPC, view its details, or delete an unused Internet Gateway. You can use an Internet Gateway to connect VPC resources to the Internet.
You can assign a Public IP to instances and load balancers that are connected to the internet, allowing external access.

NAT Gateway

You can create a NAT Gateway, connect it to a subnet, view its details, or delete an unused NAT Gateway.
To create a NAT Gateway for a subnet, you must first create an Internet Gateway and attach it to the VPC. When you create a NAT Gateway, internet access is allowed for all resources in the subnet. To restrict internet access, apply firewall rules.
A NAT Gateway can be created for the General type, and it is a service that maps a single representative public IP to a Virtual Server without a public IP NAT for outbound internet usage.

Public IP

If you want to use the same IP address each time you stop and start an instance, reserve a Public IP and use it.
This is a service that creates a desired public IP within the available Public IP Pool of Samsung Cloud Platform and assigns it to compute resources for use.
Compute resources assigned with the designated public IP will not have their IP changed even after reboot.

Port

Provides a connection point to attach a single device, such as a server’s NIC, to the network. This enables adding additional NICs beyond the default provision.

VPC Endpoint

Provides an entry point for the VPC that enables access to the Samsung Cloud Platform via a private connection from an external network connected to the VPC.

VPC Peering

You can communicate via IP through a 1:1 private route between VPCs. By default, peering is provided between VPCs in the same account, and only one connection is allowed between different accounts.

Private NAT

From compute resources within the VPC, you can use Direct Connect to map the customer’s IP and establish a connection.

Transit Gateway

Transit Gateway is a gateway service that easily connects the customer’s network with the Samsung Cloud Platform network and serves as a connection hub for multiple VPCs within the cloud environment.
Through the Transit Gateway, you can configure a variety of network topologies that meet customer requirements. Additionally, it provides independent firewall configurations and routing capabilities for each connected network segment, enabling thorough security management.

PrivateLink

It is a service that connects internal Samsung Cloud Platform data to a private path between the VPC and the SCP service without exposing it to the internet.

• PrivateLink Service is for service providers, and PrivateLink Endpoint is for service users.

Constraints

Samsung Cloud Platform’s VPC limits the number of VPCs and subnets that can be created as follows.

Prior Service

VPC has no prerequisite services.

1.1.1 - ServiceWatch Metrics

VPC - Internet Gateway sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at 5‑minute intervals.

Basic Metrics

Internet Gateway

The following are the basic metrics for the Internet Gateway namespace.

The indicators whose names are shown in bold below are the indicators selected as major indicators among the basic indicators provided by Internet Gateway. Key metrics are used to configure service dashboards that are automatically built for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical value is meaningful to query, and among the meaningful statistics, the values displayed in bold text are the primary statistics. In the service dashboard, primary metrics can be viewed using the primary statistical values.

1.2 - How-to guides

Users can create the service by entering the required information for the VPC service and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC

You can create and use a VPC service in the Samsung Cloud Platform Console.

To create a VPC, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create VPC button. You will be taken to the Create VPC page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Name of the VPC to create Enter using English letters and numbers, 3 to 20 characters
     IP range	Required	IP range to use in IP range format /16 ~ /28 enter within the range Example: 192.168.0.0/24
     Explanation	Select	Enter description for VPC

     Table. VPC Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. VPC additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • Once creation is complete, check the created resources on the VPC List page.

Check VPC detailed information

The VPC service allows you to view and edit the full list of resources and detailed information. The VPC Details page consists of the Details, IP Range Management, Tags, Activity Log tabs.

To view detailed VPC information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC menu. You will be taken to the VPC List page.
3. VPC List page, click the resource to view its details. You will be taken to the VPC Detail page.
   • VPC Details page displays status information and additional feature information, and consists of the Details, IP Range Management, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC status Active: operating normally Deleting: deletion in progress Creating: creation in progress Error: unable to determine current status If it persists, contact the registered administrator
     Service termination	Cancel service button If you cancel the service, the running service may be terminated immediately, so consider the impact of service interruption thoroughly before proceeding with the cancellation

     Table. VPC status information and additional features

Detailed Information

VPC List page lets you view detailed information of the selected resource and edit it if necessary.

IP range management

On the VPC List page, you can view and add the IP range information associated with the selected resource.

tag

On the VPC List page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the VPC List page.

Terminate VPC

You can terminate unused VPCs to reduce operating costs.

To terminate the VPC, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC menu. You will be taken to the VPC List page.
3. On the VPC List page, select the resource to terminate, and click the Terminate Service button.
4. After termination is complete, verify on the VPC List page that the resource has been terminated.

1.2.1 - Subnet

Create Subnet

You can create and use the VPC Subnet service in the Samsung Cloud Platform Console.

To create a Subnet, follow these steps.

1. All Services > Networking > VPC Click the menu. Go to the VPC’s Service Home page.

2. On the Service Home page, click the Create Subnet button. You will be taken to the Create Subnet page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     Subnet type	Required	Select Subnet type General: Can configure as Public or Private Local: Can be assigned by selecting either Virtual Server or Bare Metal Server A Local Subnet is a Subnet for communication only between servers and cannot communicate with the outside VPC Endpoint: VPC Endpoint can be configured
     VPC name	Required	Select the VPC to which the subnet will be attached from the list of existing VPCs Click + Create New to create a VPC and then select it
     VPC IP range	Select	Automatically input the CIDR range of the selected VPC
     Subnet name	Required	Subnet name to create Enter using English letters and numbers, within 3 to 20 characters
     IP range	Required	IP range to use in IP range format /16 ~ /28 Enter within the range Example: 192.168.0.0/24 IP ranges cannot overlap with IP ranges (other subnets) already in use within the VPC
     Gateway IP	Required	Display the Gateway IP address of the Subnet The first IP of the entered IP range is automatically filled in Cannot be modified after service creation

     Table. Subnet service information input fields
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     description	Selection	Enter description for Subnet
     IP allocation range	Selection	You can set the range within the IP range to be used Select either the entire IP range or an individual specification Subnet sub-resources receive IP assignments from the entered entire IP range or from the individually specified range set by the user When selecting individual specification, enter the starting IP address and the ending IP address
     DNS Name Server	Selection	After selecting Use, enter DNS Name Server IP.
     Host path	Select	Use after selection, enter the host path Enter the destination IP range and Next Hop IP address Destination IP ranges must not overlap each other
     tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Subnet additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • After creation is complete, check the created resources on the Subnet List page.

Check Subnet detailed information

The Subnet service allows you to view and edit the full resource list and detailed information. Subnet Details page consists of Details, Virtual IP Management, Tags, Activity Log tabs.

To view detailed Subnet information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the Subnet button on the Service Home page. You will be taken to the Subnet List page.
3. On the Subnet List page, click the resource for which you want to view detailed information. You will be taken to the Subnet Details page.
   • Subnet Details page displays status information and additional feature information, and consists of Details, Virtual IP Management, Tags, Operation History tabs.

     Category	Detailed description
     status	Subnet status Creating: Creation in progress Active: Operating normally Editing: Modification in progress Deleting: Deletion in progress Failed: State where creation failed Error: Current status unknown If it occurs continuously, contact the registered administrator
     Delete Subnet	Subnet Delete Button

     Table. Subnet status information and additional features

Detailed Information

On the Subnet List page, you can view the operation history of the selected resource.

Virtual IP Management

Subnet List page lets you view the virtual IP information of the selected resource, and you can reserve or delete it.

tag

On the Subnet List page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

On the Sunnet List page, you can view the operation history of the selected resource.

Managing Virtual IP

You can reserve or manage Virtual IPs for use in a Subnet.

Reserve Virtual IP

You can reserve a Virtual IP for use in the Subnet.

To reserve a Virtual IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the Subnet button on the Service Home page. You will be taken to the Subnet List page.
3. On the Subnet list page, click the resource to reserve a Virtual IP. You will be taken to the Subnet details page.
4. On the Subnet Details page, click the Virtual IP Management tab. You will be taken to the Virtual IP Management tab page.
5. On the Virtual IP Management tab page, click the Virtual IP Reservation button. The Virtual IP reservation window opens.
6. In the Virtual IP Reservation window, set the detailed items and click OK.
   • Virtual IP: If you select Auto-Generated, an automatically generated IP will be reserved, and if you select Input, you can reserve an IP that you manually entered.
   • Description: Enter additional description for Virtual IP.
7. When the reservation confirmation window appears, click Confirm.

Check Virtual IP detailed information

You can view detailed information about the Virtual IP.

To view detailed information about the Virtual IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet button. You will be taken to the Subnet List page.
3. Subnet list page, click the resource to reserve a Virtual IP. Subnet details page will be displayed.
4. On the Subnet Details page, click the Virtual IP Management tab. You will be taken to the Virtual IP Management tab page.
5. Click the resource to view on the Virtual IP Management tab page. You will be taken to the Virtual IP Details page.
   • *Virtual IP Details The page displays the connected ports and detailed information.

     Category	Detailed description
     Virtual IP	Virtual IP address
     Public NAT IP	Public NAT IP address and status Edit icon can be clicked to edit Enable after setting, you can select an existing IP or create one to add Public NAT IP cannot be modified after configuration; changes require reconfiguration
     Connection Port	Port information connected to the Virtual IP Add button to click to add a connected port, you can add by connecting an existing port or creating a new one Delete button to click to remove the connected port
     Explanation	Virtual IP description Click the Edit icon to modify
     constructor	User who reserved a Virtual IP
     Creation date	Virtual IP reservation date and time
     Editor	User who modified the Virtual IP information
     Modification date	Date and time the Virtual IP information was modified

     Table. Virtual IP detailed information items

Terminate Subnet

You can delete an unused Subnet.

To delete a Subnet, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. You will be taken to the Subnet List page.
3. On the Subnet List page, click the resource to delete. Navigate to the Subnet Details page.
4. On the Subnet Details page, click the Delete button.
5. After deletion is complete, check the Subnet list to confirm that the resource has been removed.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

1.2.2 - Port

Create Port

You can create and use a Port service in the Samsung Cloud Platform Console.

To create a port, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC Service Home page.

2. On the Service Home page, click the Create Port button. You will be taken to the Create Port page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC to create the Port Click + Create New to create the VPC and then select it
     Subnet name	Required	Select the Subnet to create the Port Click + Create New to create a Subnet and then select it
     Port name	Required	Port name that is easy to identify Enter using English letters, numbers, - within 3 to 20 characters
     IP allocation method	Required	Select IP allocation method Automatic allocation: IP is automatically assigned within the IP allocation range of the Subnet Manual entry: The entered IP is assigned within the Subnet’s range When Manual entry is selected, enter the IP address to use for the Port in Fixed IP address
     Explanation	Selection	Enter description for Port
     Security Group	Select	When Use is selected, you can select up to 5 Security Groups.

     Table. Port service information input fields
   • Enter or select the required information in the Additional Information Input area.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. Port additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • After creation is complete, check the created resources on the Port List page.

Check detailed information of Port

The Port service allows you to view and edit the full resource list and detailed information. Port Details page consists of Details, Tags, Activity Log tabs.

To view detailed port information, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. You will be taken to the Port List page.
3. Port List page, click the resource (Port name) to view detailed information. You will be taken to the Port Details page.
   • Port Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

     Category	Detailed description
     status	Port status Active: Operating normally Down: Not connected to the resource, or connected but not functioning Error: Current status cannot be determined If it occurs continuously, contact the registered administrator
     Delete Port	Button to delete the port

     Table. Port status information and additional functions

Detailed Information

On the Port list page, you can view detailed information of the selected resource and edit the information if needed.

tag

Port list page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Port list page, you can view the operation history of the selected resource.

Delete Port

You can release unused ports to reduce operating costs.

To delete a Port, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. You will be taken to the Port List page.
3. On the Port List page, click the resource (Port name) you want to delete. You will be taken to the Port Detail page.
4. On the Port Details page, click the Delete Port button.
5. After the deletion is complete, check whether the resource has been removed from the Port list.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.3 - Internet Gateway

Create Internet Gateway

You can create and use the Internet Gateway service in the Samsung Cloud Platform Console.

To create an Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway Creation button. You will be taken to the Internet Gateway Creation page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC that connects to the Internet Gateway Click + New to create a VPC and then select it
     Category	Required	Select Internet Gateway type Choose from Dedicated Internet Gateway, Secured Internet Gateway, Group Gateway
     Internet Gateway name	Selection	Automatically create IGW_{VPC name}
     Explanation	Select	Enter a description of the Internet Gateway
     Use firewall	Select	Select whether to use the firewall
     Whether to save firewall logs	Select	Select whether to save Firewall logs When using the Firewall, save connection logs For more details, see Using Firewall Log Saving

     Table. Internet Gateway Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Internet Gateway additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • Once creation is complete, check the created resource on the Internet Gateway List page.

Internet Gateway Check detailed information

The Internet Gateway service allows you to view and edit the full resource list and detailed information. Internet Gateway Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. On the Service Home page, click the Internet Gateway menu. Navigate to the Internet Gateway list page.
3. On the Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
   • Internet Gateway Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	Internet Gateway status Creating: Creating resource Ative: Normal connection status Deleting: Deletion in progress Error: Unable to determine current status If it persists, contact the registered administrator
     Delete Internet Gateway	Internet Gateway Delete Button

     Table. Internet Gateway status information and additional features

Detailed Information

On the Internet Gateway List page, you can view detailed information of the selected resource and edit the information if needed.

tag

Internet Gateway list page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Internet Gateway List page, you can view the operation history of the selected resource.

Managing Internet Gateway Resources

You can manage resources, such as enabling Internet Gateway log storage.

Using NAT Log Storage

To use NAT log storage, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. Navigate to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
4. Click the Modify NAT log storage setting button. You will be taken to the Modify NAT log storage setting popup.
5. Modify NAT Log Storage Setting In the popup window, select Use for the log repository, and click the Confirm button.

Do not use NAT log storage

To use NAT log storage, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
4. Click the Modify NAT log storage setting button. You will be taken to the Modify NAT log storage setting popup.
5. Modify NAT log storage setting In the popup window, deselect Use for the log storage, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Delete Internet Gateway

To delete an Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource you want to delete. Navigate to the Internet Gateway Details page.
4. On the Internet Gateway Details page, click the Delete button.
5. After the deletion is complete, verify that the resource has been removed from the Internet Gateway list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

1.2.4 - NAT Gateway

Creating NAT Gateway

You can create and use the NAT Gateway service in the Samsung Cloud Platform Console.

To create a NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create NAT Gateway button. You will be taken to the Create NAT Gateway page.
   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC to connect + Create new to create a VPC and then select it
     Subnet name	Required	Select the connected Subnet Click + Create New to create a Subnet and then select it
     NAT Gateway name	Select	Create NAT_GW_{subnet name}
     IP for NAT Gateway	Required	Select a Public IP for NAT Gateway + New Click to create an IP and then select it
     description	Select	Enter a description for the NAT Gateway

     Table. NAT Gateway Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Whether required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. NAT Gateway additional information input fields
3. In the Summary panel, review the detailed information and estimated billing amount, then click the Create button.
   • When creation is complete, verify the created resource on the NAT Gateway list page.

Check NAT Gateway detailed information

The NAT Gateway service allows you to view and edit the full resource list and detailed information. NAT Gateway Details page consists of Details, Tags, Activity Log tabs.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the NAT Gateway menu. You will be taken to the NAT Gateway List page.
3. On the NAT Gateway List page, click the resource whose details you want to view. You will be taken to the NAT Gateway Details page.
   • NAT Gateway Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	NAT Gateway status Creating: Creation in progress Active: Operating normally Deleting: Deletion in progress
     Delete NAT Gateway	Button to terminate the service Terminate the NAT Gateway when there are no connected services Since terminating the service may cause the running service to stop immediately, proceed with the termination only after fully considering the impact of service interruption

     Table. NAT Gateway status information and additional features

Detailed Information

NAT Gateway List page lets you view detailed information of the selected resource and modify it if necessary.

tag

NAT Gateway List page lets you view, add, modify, or delete the tag information of the selected resource.

Job History

You can view the operation history of the selected resource on the NAT Gateway List page.

Delete NAT Gateway

To delete a NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the NAT Gateway menu. Navigate to the NAT Gateway List page.
3. Click the resource to view detailed information on the NAT Gateway List page. You will be taken to the NAT Gateway Details page.
4. On the NAT Gateway Details page, click the Delete button.
5. After deletion is complete, verify that the resource has been removed from the NAT Gateway list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.5 - Public IP

Create Public IP

You can create and use a Public IP service in the Samsung Cloud Platform Console.

To create a Public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Public IP reservation button. You will be taken to the Public IP reservation page.

   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Category	Required	Select the gateway to reserve the Public IP Default: Internet Gateway
     description	Select	Enter description for Public IP

     Table. Public IP Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. Public IP additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • Once creation is complete, check the created resources on the Public IP List page.

View detailed information of Public IP

The Public IP service allows you to view and edit the full resource list and detailed information. Public IP Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP menu. You will be taken to the Public IP List page.
3. On the Public IP List page, click the resource to view detailed information. You will be taken to the Public IP Detail page.
   • Public IP Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

     Category	Detailed description
     status	Public IP status Attached: attached state Reserved: reserved state Error: cannot determine current state If it occurs continuously, contact the registered administrator
     Return Public IP	Public IP Return Button

     Table. Public IP status information and additional features

Detailed Information

Public IP List page lets you view detailed information of the selected resource and edit the information if needed.

tag

On the Public IP List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

On the Public IP List page, you can view the operation history of the selected resource.

Return Public IP

To delete a Public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP button. You will be taken to the Public IP List page.
3. On the Public IP List page, click the resource to view detailed information. You will be taken to the Public IP Details page.
4. On the Public IP Details page, click the Public IP Release button.
5. After the return is completed, check whether the resource has been deleted from the Public IP list.

Pre-service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

1.2.6 - Private NAT

Users can create the Private NAT service by entering the required information and selecting detailed options through the Samsung Cloud Platform Console.

Creating Private NAT

You can create a Private NAT service in the Samsung Cloud Platform Console and use it.

To create a Private NAT, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create Private NAT button. 2. Navigate to the Create Private NAT page.

   • In the Service Information Input area, enter or select the required information.

     Category	required status	Detailed description
     Private NAT name	Required	Enter the Private NAT name Enter using letters and numbers, 3 to 20 characters
     Connection resource type	Required	Select the connection resource to connect the Private NAT You can choose between Direct Connect and Transit Gateway Transit Gateway can be selected after connecting the uplink line
     Connection resource name	Essential	Display entries of the selected connection resource Click + New Creation in the list to create a connection resource
     NAT IP range	Essential	Enter the NAT IP range to use Enter in CIDR format, e.g., 192.168.2.0/23 Cannot overlap with the connected VPC IP or other Private NAT IP ranges
     Explanation	Selection	Enter description for Private NAT

     Table. Private NAT Service Information Input Items
     Reference

     • It must not overlap with the IP range of the VPC connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with other Private NAT ranges that are connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with the IP range of the on‑premise network connected to the selected Direct Connect or Transit Gateway.
     • Some IP ranges are reserved for management and cannot be used.

   • Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Private NAT additional information input fields

3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

   • When creation is complete, verify the created resources on the Private NAT List page.

Check Private NAT detailed information

The Private NAT service allows you to view and edit the complete resource list and detailed information. On the Private NAT Details page, it consists of Detail Information, IP Management, Tags, Operation History tabs.

To view detailed information about Private NAT, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. Private NAT List page, click the resource to view detailed information. 3. Navigate to the Private NAT Details page.
   • Private NAT Details page displays status information and additional feature information, and consists of Details, IP Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	Private NAT status Active: Running Creating: In progress Deleting: In progress Error: An error occurred
     Delete Private NAT	Button to delete Private NAT

     Table. Private NAT status information and additional features

Detailed Information

Private NAT List page allows you to view detailed information of the selected resource and edit the information if necessary.

IP Management

Private NAT List page allows you to view the Private NAT IP, and you can reserve or release it.

Tag

On the Private NAT List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Private NAT List page, you can view the operation history of the selected resource.

Managing Private NAT IP

You can reserve or release a Private NAT IP.

Reserve Private NAT IP

To reserve a Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Private NAT List Go to the page.
3. Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. Click the IP Management tab page’s Private NAT IP Reservation button. 5. The Private NAT IP reservation window appears.
6. Enter the Private NAT IP to be used in the Private NAT IP reservation window and click the Confirm button. 6. A notification confirmation dialog appears.
7. In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added to the IP list.

Return Private NAT IP

To return the Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Navigate to the Private NAT List page.
3. On the Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. On the IP Management tab page, click the Return button for the IP item you want to return. 5. A notification confirmation dialog appears.
6. Verify that the selected resource has been deleted from the IP list.

Delete Private NAT

You can cancel unused Private NAT to reduce operating costs.

To cancel Private NAT, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. On the Private NAT List page, click the resource to delete. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the Delete Private NAT button.
5. After termination is complete, check whether the resource has been deleted from the Private NAT list.

Preliminary service

This service must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.

1.2.7 - VPC Endpoint

Create VPC Endpoint

You can create and use a VPC Endpoint service in the Samsung Cloud Platform Console.

To create a VPC Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.

2. On the Service Home page, click the Create VPC Endpoint button. You will be taken to the Create VPC Endpoint page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     VPC name	Required	Select the VPC to create the Endpoint Click + Create new to create a VPC and then select it
     Usage > Target Service	Required	Select the target service for which to create the VPC Endpoint
     Purpose > Connected Resources	Required	Select the resource to create a VPC Endpoint
     VPC Endpoint name	Required	Enter the VPC Endpoint name Enter using letters and numbers, 3 ~ 20 characters
     VPC Endpoint IP > Subnet name	Required	Select VPC Endpoint Subnet + Create New Click to create a Subnet and then select it
     VPC Endpoint IP > IP	Required	Enter the IP to be used for the VPC Endpoint Example: 192.168.x.x
     description	Select	Enter a description for the VPC Endpoint

     Table. VPC Endpoint Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Whether required	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource Add Tag button after clicking, input or select Key, Value values

     Table. VPC Endpoint additional information input fields
     Reference

     After registering the VPC Endpoint, you need to configure the Direct Connect firewall to integrate internal services of the Samsung Cloud Platform. Refer to the port information for each service and register the firewall rules.

     Service	Port information
     DNS	TCP 53, UDP 53
     Object Storage	TCP 8080, 8443, 80, 443, 4430
     File Storage	(NFS) TCP/UDP common 111, 300, 302, 304, 2049, 635, 4045, 4046, 4049 (CIFS) UDP 135, 137, 138, 389 / TCP 135, 139, 445, 40001
     Container Registry (authentication server, Registry)	TCP 443

     Table: Allowed ports per target service

3. Summary Verify the detailed information and estimated billing amount generated in the panel, then click the Create button.

   • When creation is complete, check the created resources on the VPC Endpoint List page.

Check VPC Endpoint details

The VPC Endpoint service allows you to view and edit the full list of resources and detailed information. VPC Endpoint Details page consists of Details, Tags, Activity Log tabs.

Endpoint To view detailed information, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. Click the VPC Endpoint menu on the Service Home page. You will be taken to the VPC Endpoint List page.
3. On the VPC Endpoint List page, click the resource for which you want to view detailed information. You will be taken to the VPC Endpoint Details page.
   • VPC Endpoint Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Endpoint status Active: operating normally Creating: creation in progress Deleting: deleting resource connection Deleted: resource connection deleted
     Delete VPC Endpoint	Button to delete the VPC Endpoint connection resource

     Table. VPC Endpoint status information and additional features

Detailed Information

VPC Endpoint List page lets you view detailed information of the selected resource and edit the information if needed.

tag

On the VPC Endpoint List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

VPC Endpoint List page allows you to view the operation history of the selected resource.

Delete VPC Endpoint

You can cancel unused Endpoints to reduce operating costs.

To terminate a VPC Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Endpoint menu on the Service Home page. You will be taken to the VPC Endpoint List page.
3. On the VPC Endpoint List page, click the resource you want to delete. You will be taken to the VPC Endpoint Details page.
4. On the VPC Endpoint Details page, click the Delete Endpoint button.
5. When the termination is complete, check whether the resource has been deleted from the VPC Endpoint list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

1.2.8 - VPC Peering

Users can create the service by entering the required information for the VPC Peering service and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC Peering

You can create and use the VPC Peering service in the Samsung Cloud Platform Console.

To create a VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create VPC Peering button. You will be taken to the Create VPC Peering page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPC Peering name	Required	Enter VPC Peering name Enter using letters and numbers, 3~20 characters
     Requested VPC name	Required	Select the VPC to request VPC Peering Click + New in the list to create a VPC
     Approved Account	Required	Select the account of the VPC to approve VPC peering, then select that VPC or enter its information Same account: select the approved VPC name Click + New creation in the list to create a VPC Different account: enter the approved Account ID and approved VPC ID
     description	Select	Enter a description of VPC Peering

     Table. VPC Peering service information input items
   • In the Additional Information Input area, enter or select the required information.

     Category	Whether required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. VPC Peering additional information input fields
3. Check the detailed information and estimated billing amount generated in the Summary panel, and click the Create button.
   • When connecting a VPC from another Account, the peering proceeds after an approval process, so the connection may take some time.
   • When creation is complete, check the created resource on the VPC Peering List page.

Check VPC Peering details

The VPC Peering service allows you to view and edit the full list of resources and detailed information. VPC Peering Details page consists of Details, Rules, Tags, Activity Log tabs.

To view detailed VPC Peering information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. VPC Peering List Click the resource to view detailed information on the page. You will be taken to the VPC Peering Details page.
   • VPC Peering Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Peering status Active: operational Requesting: connection or deletion request in progress Creating: connecting Creating Requesting: connection request in progress Deleting Requesting: deletion request in progress Editing: editing Rejected: rejected Canceled: canceled Error: error occurred If it persists, contact the registered administrator
     VPC Peering deletion/VPC Peering deletion request	Button to request deletion of VPC Peering resources Cancel Connection Request: Can cancel if a VPC Peering connection was requested Approve Connection: Can approve when a VPC Peering connection request is received Reject Connection: Click to reject the connection Cancel Deletion Request: Can cancel if a VPC Peering deletion was requested Approve Deletion: Can approve when a VPC Peering deletion request is received Reject Deletion: Click to reject the deletion Reapproval Request: Request reapproval when VPC approval was denied

     Table. VPC Peering status information and additional features

Detailed Information

VPC Peering List page lets you view detailed information of the selected resource and edit it if needed.

rule

VPC Peering List page lets you view the rules associated with the selected resource, and add or remove them.

tag

VPC Peering List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the VPC Peering List page.

Managing VPC Peering Rules

You can add or delete rules for VPC Peering.

Add Rule

To add a rule to VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. The Add Rule dialog appears.
6. Enter the origin and destination in the rule addition window and click the Confirm button. A notification confirmation window will appear.
   • It must not duplicate an already entered rule.
   • You can enter within the IP address range of the destination VPC.
   • It should be entered the same as the subnet range.
   • The destination IP range 0.0.0.0/0 cannot be used.
7. Click the Confirm button in the notification dialog. Verify that the resource entry has been added to the rule list.

Delete Rule

To delete a VPC Peering rule, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. Navigate to the VPC Peering Details page.
4. VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Rule tab page, click the Delete button of the item to delete. A notification confirmation dialog appears.
6. Click the Confirm button in the alert dialog. Verify that the selected resource in the rule list has been deleted.

Terminate VPC Peering

You can terminate unused VPC Peering to reduce operating costs.

Terminate VPC Peering of the same Account

To terminate a VPC peering within the same account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete button.
5. After termination is complete, verify that the resource has been deleted from the VPC Peering list.

Terminate VPC Peering connected to another account

To terminate a VPC peering connected to another account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. You will be taken to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete Request button.
5. Once the cancellation is complete, verify that the resource has been removed from the VPC Peering list.
   • The deletion request must be approved by the counterpart account for the termination to be processed correctly.

Pre-service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

1.2.9 - Transit Gateway

Users can create the service by entering the required information for the Transit Gateway service and selecting detailed options through the Samsung Cloud Platform Console.

Create Transit Gateway

You can create and use the Transit Gateway service in the Samsung Cloud Platform Console.

To create a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create Transit Gateway button. 2. Go to the Transit Gateway creation page.
   • In the Service Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Transit Gateway name	Required	Enter the Transit Gateway name Enter using letters and numbers, 3 to 20 characters
     Explanation	Selection	Enter description for Transit Gateway

     Table: Transit Gateway service information input fields
   • Additional Information Input area, please enter or select the required information.

     Category	required status	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Transit Gateway additional information input fields
3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
   • Once creation is complete, check the created resources on the Transit Gateway List page.

Check Transit Gateway Details

The Transit Gateway service lets you view and modify the complete resource list and detailed information. In the Transit Gateway Details page, it is composed of Details, Connected VPC Management, Rules, Tags, Activity History tabs.

To view the detailed information of the Transit Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to view its detailed information. 3. Go to the Transit Gateway Details page.
   • Transit Gateway Details page displays status information and additional feature information, and consists of the Details, Connected VPC Management, Rules, Tags, Activity History tabs.

     Category	Detailed description
     status	Transit Gateway status Active: Running Creating: In progress Editing: In progress Deleting: In progress Error: An error occurred
     Delete Transit Gateway	Button to delete Transit Gateway resources

     Table. Transit Gateway status information and additional features

Detailed Information

On the Transit Gateway list page, you can view detailed information of the selected resource and, if necessary, edit the information.

Connected VPC Management

Transit Gateway list page allows you to view the VPCs connected to the selected resource, and to add or delete them.

Rule

On the Transit Gateway list page, you can view the rules attached to the selected resource, and add or delete them.

Tag

On the Transit Gateway list page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

Transit Gateway list page allows you to view the operation history of the selected resource.

Manage Transit Gateway integration services

You can request, modify, and cancel the Uplink and Firewall connection services required to use the Transit Gateway service.

To request the Transit Gateway integration service, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click Linked Services (IGW, BM VPC), Quick Access to Line Request/Modification/Termination. 4. Navigate to the service request page.
5. On the Service Request page, enter or select the required information in the mandatory input fields.

   Input field	Detailed description
   Title	Enter the title of the service request Example: TGW Uplink circuit request
   Region	Select the location of Samsung Cloud Platform Automatically filled with the region corresponding to the Account
   service	Select service category and service Service Category: Networking Service: Transit Gateway
   Task classification	Select the type you want to request TGW Uplink line request/modification/termination: After selecting the work type, enter detailed information in the service request category field
   content	Fill in the detailed items of the service request form Service request type: manually enter one of Apply / Modify / Terminate Account name/ID: Enter the account name and ID Transit Gateway name/ID: Enter the created Transit Gateway name and ID Applicant information: Enter applicant’s email, phone number, etc. Service request task type: Choose and enter either Uplink line connection or BM VPC Firewall connection Firewall usage: Enter whether the firewall is used
   Attachment	If you have additional files you want to share, proceed with the upload Attached files can be up to 5 files, each within 5 MB Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached

   Table. Linked Service Creation Request Items
6. On the service request page, click the Request button.
   • After the request is completed, check the submitted details on the Support Center > Service Request List page.
   • When the service request operation is completed, you can view the requested resources on the Transit Gateway Details page.

Managing VPC connections of the Transit Gateway

You can add or remove VPCs on a Transit Gateway.

Add VPC connection

To add a VPC attachment to a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource you want to delete. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
5. On the Connected VPC Management tab page, click the Add VPC Connection button. 5. The VPC connection addition window appears.
6. In the Add VPC Connection window, select the VPC and click the Confirm button. 6. A notification confirmation window appears.
   • Click +New in the list to create a VPC and select it.
7. In the alert confirmation dialog, click the Confirm button. 7. Check whether a resource entry has been added in the VPC connection list.

Delete VPC connection

To delete a Transit Gateway’s VPC attachment, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
5. On the Connected VPC Management tab page, click the Delete button for the item you want to delete. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Verify whether the selected resource has been deleted from the VPC connection list.

Managing Transit Gateway rules

You can add or delete rules in the Transit Gateway.

Add rule

To add a rule to the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource you want to delete. 3. Transit Gateway Details Navigate to the page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Go to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. 5. The rule addition window appears.
6. In the rule addition window, enter the origin and destination, and click the Confirm button. 6. A notification confirmation dialog appears.

   Category	Detailed description
   Rule type	Select type for adding Transit Gateway rule Select from VPC-TGW rule, TGW-Uplink rule
   Connected VPC name	Select the connected VPC when choosing a VPC‑TGW rule
   origin	When selecting a VPC‑TGW rule, the destination is automatically selected when configured.
   Destination	Select rule destination When selecting a VPC‑TGW rule, set to either VPC or TGW When selecting a TGW‑Uplink rule, set to either TGW or remote Cannot register if it duplicates an existing rule; can input up to the x.x.x.x/28 range
   Destination IP range	Enter the destination IP range to use

   Table. Rule addition input items
   Caution

   • VPC-TGW rule When entering, check the following items.
     • When the destination is a VPC.
       • It can be entered within the VPC IP range.
       • It should be entered the same as the subnet range.
       • 0.0.0.0/0 cannot be used as the destination IP range.
     • When the destination is a Transit Gateway.
       • Some IP ranges are reserved for management and cannot be used.
       • The VPC IP address range cannot be entered.
       • The destination IP range 0.0.0.0/0 can be entered only when the VPC’s Internet Gateway is not attached.
   • TGW-Uplink Rule When entering, check the following items.
     • When the destination is a Transit Gateway.
       • You can enter values within the VPC IP address range connected to the Transit Gateway.
       • 0.0.0.0/0 cannot be used as the destination IP range.
     • When the destination is remote
       • You cannot enter the VPC IP address range connected to the Transit Gateway.
       • The destination IP range 0.0.0.0/0 can be entered only when the Transit Gateway does not have an Internet Gateway attached.
       • D, E class IP ranges cannot be entered.
7. In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added in the rule list.

Delete rule

To delete a Transit Gateway rule, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Navigate to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Navigate to the Rules tab page.
5. On the Rules tab page, click the Delete button of the item you want to delete. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Verify that the selected resource has been deleted from the rule list.

Managing Firewall Connections

You can attach or detach a firewall for use with the Transit Gateway.

Connect to Firewall

To add a Firewall connection to the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource to which you will connect the Firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Connect Firewall button. 5. A firewall connection confirmation window appears.
6. In the Firewall connection confirmation window, click the Confirm button. 6. Check the connection status in the Firewall connection status item.

Add Firewall

After the Firwall connection is completed, you can add a Firewall.

To add a Firewall to a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource where you want to add a Firewall. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Detailed Information tab. 4. Go to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Add button in the Firewall list. 5. The Firewall addition window appears.
6. In the Firewall add dialog, select the purpose and click the Confirm button. 6. Check whether a resource item has been added to the Firewall list.

Delete Firewall

You can delete the firewall after the firewall connection is completed.

To delete a firewall from a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to delete the firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
5. Click the Delete button on the Detailed Information tab page of the Firewall list. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Check whether the resource entry has been removed from the Firewall list.

Disconnect Firewall

You can disconnect unused Firewall connections.

To detach the firewall from the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway list page, click the resource to detach the Firewall connection. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Navigate to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Disconnect Firewall button. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Check the disconnected status in the Firewall connection status item.

Terminate Transit Gateway

You can terminate unused Transit Gateways to reduce operating costs.

To terminate the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Detail page, click the Transit Gateway Delete button.
5. After termination is complete, check whether the resource has been deleted from the Transit Gateway list.

Preliminary service

This is a service that must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.

1.2.10 - PrivateLink Service

Users can create the service by entering the required information for the PrivateLink Service and selecting detailed options through the Samsung Cloud Platform Console.

Creating a PrivateLink Service

You can create and use a PrivateLink Service in the Samsung Cloud Platform Console.

To create a PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the PrivateLink Service Create button. You will be taken to the PrivateLink Service Create page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     PrivateLink Service name	Required	Enter the PrivateLink service name
     Approval method	Required	Select approval method for PrivateLink Service input Automatic: Automatically approve when a PrivateLink Service connection request is received Manual: Manually approve after verification when a PrivateLink Service connection request is received The approval method cannot be changed after creation
     High-speed data transfer	Selection	The default setting is disabled and not displayed in the Samsung Cloud Platform Console To use high-speed data transfer, submit a service usage request via Support Center > Contact, and once processing is complete, it can be selected on the screen
     VPC name	Required	Select the VPC to connect Click + New to create a VPC and then select it
     Subnet name	Required	Select the Subnet of the VPC to connect Click + New to create a Subnet and then select it
     PrivateLink Service IP	Required	Select the Subnet to connect and enter the PrivateLink Service IP IP addresses already in use within the Subnet cannot be entered; the first and last IPs of the Subnet IP range cannot be used
     Connection resource	Required	Select resources to connect to the chosen VPC Load Balancer: Select the Load Balancer to connect (cannot select LB when using a Local subnet) IP: Enter the Compute resource IP of the selected VPC
     Security Group	Select	Click the Select button to choose the Security Group to connect Select up to 5 If you do not select a Security Group, all connections will be blocked
     explanation	Select	Enter description for PrivateLink Service

     Table. PrivateLink Service service information input items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added Add Tag button after clicking, input or select Key, Value values

     Table. PrivateLink Service additional information input fields
3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • When creation is complete, check the created resource on the PrivateLink Service list page.

View PrivateLink Service details

The PrivateLink Service allows you to view and edit the full list of resources and detailed information. PrivateLink Service Details page consists of Details, Connection Management, Tags, Activity Log tabs.

To view detailed information about the PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. From the Service Home page, click the PrivateLink Service menu. You will be taken to the PrivateLink Service list page.
3. On the PrivateLink Service List page, click the resource for which you want to view details. You will be taken to the PrivateLink Service Details page.
   • PrivateLink Service Details page displays status information and additional feature information, and consists of Details, Connection Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	PrivateLink Service status Active: Running Creating: In progress Deleting: In progress Error: Error occurred
     Delete PrivateLink Service	Button to delete PrivateLink Service resources

     Table. PrivateLink Service status information and additional features

Detailed Information

On the PrivateLink Service List page, you can view detailed information of the selected resource and edit the information if needed.

Connection Management

On the PrivateLink Service List page, you can view the connection information of the selected resource. You can review connection requests and approve or reject them.

tag

PrivateLink Service List page lets you view, add, modify, or delete tag information for the selected resource.

Job History

PrivateLink Service List page allows you to view the operation history of the selected resource.

Terminate PrivateLink Service

You can cancel unused PrivateLink Service to reduce operating costs.

To cancel the PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. From the Service Home page, click the PrivateLink Service menu. You will be taken to the PrivateLink Service List page.
3. On the PrivateLink Service List page, click the resource to delete. Go to the PrivateLink Service Details page.
4. On the PrivateLink Service Details page, click the Delete PrivateLink Service button.
5. When the termination is complete, check that the resource has been deleted from the PrivateLink Service list.

Preliminary Service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

1.2.11 - PrivateLink Endpoint

Users can create the service by entering the required information for the PrivateLink Endpoint service and selecting detailed options through the Samsung Cloud Platform Console.

Creating a PrivateLink Endpoint

You can create and use a PrivateLink Endpoint service from the Samsung Cloud Platform Console.

To create a PrivateLink Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create PrivateLink Endpoint button. You will be taken to the Create PrivateLink Endpoint page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required	Detailed description
     PrivateLink Endpoint name	Required	Enter the PrivateLink Endpoint name
     VPC name	Required	Select VPC to connect Click + Create new to create a VPC and then select it
     Subnet name	Required	Select the Subnet of the VPC to connect Click + New to create a Subnet and then select it
     PrivateLink Endpoint IP	Required	Select the Subnet to connect, then enter the PrivateLink Endpoint IP IP addresses currently in use within the Subnet cannot be entered, and the first and last IPs of the Subnet IP range cannot be used
     PrivateLink Endpoint ID	Required	Enter the PrivateLink Service ID to connect Enter using letters and numbers, within 3 to 60 characters Before applying for the service, you need to verify the Service ID of the PrivateLink Service to connect; after creating the Endpoint, you must provide the Endpoint ID to the service provider
     Security Group	Select	Click the Select button to choose the Security Group to connect Select up to 5 If no Security Group is selected, all connections are blocked
     description	Select	Enter description for PrivateLink Endpoint

     Table. PrivateLink Endpoint service information input fields
   • Enter or select the required information in the Additional Information Input area.

     Category	Required	Detailed description
     tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key and Value values

     Table. PrivateLink Endpoint additional information input fields
3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • Once creation is complete, check the created resource on the PrivateLink Endpoint List page.

Check PrivateLink Endpoint details

PrivateLink Endpoint service allows you to view and edit the full list of resources and detailed information. PrivateLink Endpoint Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the PrivateLink Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the PrivateLink Endpoint menu on the Service Home page. You will be taken to the PrivateLink Endpoint List page.
3. On the PrivateLink Endpoint List page, click the resource to view detailed information. You will be taken to the PrivateLink Endpoint Details page.
   • PrivateLink Endpoint Details page displays status information and additional feature information, and consists of Details, Connection Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	PrivateLink Endpoint status Requesting: connection request/awaiting approval, Cancel request button displayed Active: creation completed, operating Creating: in progress Deleting: in progress Disconnected: connection blocked Rejected: connection denied, Request approval again button displayed Error: error occurred Canceled: connection request canceled, Request approval again button displayed
     Delete PrivateLink Endpoint	Button to delete PrivateLink Endpoint resource

     Table. PrivateLink Endpoint status information and additional features

Detailed Information

On the PrivateLink Endpoint List page, you can view detailed information of the selected resource and edit the information if needed.

tag

PrivateLink Endpoint List page allows you to view, add, modify, or delete the tag information of the selected resource.

Job History

On the PrivateLink Endpoint List page, you can view the operation history of the selected resource.

Terminate PrivateLink Endpoint

You can terminate unused PrivateLink Endpoints to reduce operating costs.

To terminate a PrivateLink Endpoint, follow these steps.

1. All Services > Networking > VPC Click the menu. Go to the VPC’s Service Home page.
2. Click the PrivateLink Endpoint menu on the Service Home page. You will be taken to the PrivateLink Endpoint List page.
3. On the PrivateLink Endpoint List page, click the resource you want to delete. Go to the PrivateLink Endpoint Details page.
4. On the PrivateLink Endpoint Details page, click the PrivateLink Endpoint Delete button.
5. After termination is complete, check whether the resource has been deleted from the PrivateLink Endpoint list.

Pre-service

This service must be installed in advance before creating it. Please refer to the provided user guide and prepare accordingly.

1.2.12 - NAT Logging

To store NAT logs, first create a bucket in Object Storage for the logs and configure that bucket in the NAT Logging repository. Then, when you enable log storage in the NAT detail view, NAT logs will begin to be saved to the Object Storage bucket.

To store NAT logs, you need to configure the following steps in order.

1. To store NAT logs, you can create a bucket in Object Storage or use an existing bucket. To create a bucket, refer to Object Storage 생성하기.
2. To set the bucket for NAT Logging’s log repository, refer to NAT Logging 로그 저장소 사용하기.
3. To set the log storage option to Enabled in the NAT detailed view, refer to Using NAT Log Storage.

Using NAT Logging Log Repository

To set NAT log storage to enabled, you must first configure the log repository in NAT Logging.

1. Click the All Services > Management > Network Logging > NAT Logging menu. You will be taken to the NAT Logging List page.
2. NAT Logging List page, click the top Log Storage Settings button. You will be taken to the Log Storage Settings popup.
3. Log storage settings In the popup window, select the log storage bucket. When you select a bucket, the log storage path is displayed.
4. Log storage settings In the popup window, after checking Log storage bucket and Log storage path, click the Confirm button.
5. Notification After reviewing the message in the popup window, click the Confirm button.

NAT Logging list

If you configure the NAT Logging log storage bucket, the NAT Logging list will be displayed.

• Click the All Services > Management > Network Logging > NAT Logging menu. You will be taken to the NAT Logging List page.

  Category	required	Detailed description
  Resource ID	Required	NAT resource ID
  Save target	Required	NAT resource name
  Save registration date and time	Required	NAT log repository registration timestamp

  Table. NAT Logging list items

Check NAT Logging content

Refer to the information below to check the saved Log.

NAT Logging Do not use log storage

In NAT Logging, you can set the log repository to be unused.

1. All Services > Management > Network Logging > NAT Logging Click the menu. You will be taken to the NAT Logging List page.
2. On the NAT Logging List page, click the top Log Storage Settings button. It will open the Log Storage Settings popup.
3. In the Log storage settings popup, select Log storage bucket as Not used, and click the Confirm button.

1.3 - API Reference

1.4 - CLI Reference

1.5 - Release Note

VPC

2 - Security Group

2.1 - Overview

Service Overview

A Security Group is a virtual logical firewall that controls inbound/outbound traffic generated on virtual servers in Samsung Cloud Platform. The resources that can have a Security Group applied include Virtual Server, Database, Kubernetes Engine, etc. A Security Group is applied to the ports of the target resource, and multiple Security Groups can be applied depending on each resource’s characteristics.

When you first create a Security Group, it blocks all inbound and outbound traffic according to the default rule (Any/Deny).

Users can specify an IP address, port, and protocol to create inbound/outbound rules, and only traffic allowed by the created rules can access the target resources.

Component

The components that make up a Security Group are as follows.

Constraints

The Security Groups of Samsung Cloud Platform have default quotas (limits) set. There is a maximum number of Security Groups that can be created and a maximum number of Security Group rules. The Samsung Cloud Platform Console is a place where you can view and manage quotas for Samsung Cloud Platform services and request quota increases for many resources.

Preceding Service

Security Group has no preceding service.

2.2 - How-to guides

Users can create the service by entering the required information for the Security Group service and selecting detailed options through the Samsung Cloud Platform Console.

Create Security Group

You can create and use the Security Group service in the Samsung Cloud Platform Console.

To create a Security Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. Click the Create Security Group button on the Service Home page. You will be taken to the Create Security Group page.
   • Enter the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Security Group name	Required	Security Group name to create English letters, numbers, and special characters (-) can be used, and up to 255 characters can be entered Duplicate Security Group names are allowed within the project
     Whether to save logs	Select	Select whether to store Security Group logs Enabled: Store logs Disabled: Do not store logs Click Security Group Logging List Shortcut to go to the Security Group Logging list page

     Table. Security Group service information input items

* In the **Additional Information Input** area, enter or select the required information.






  



Category
Required
Detailed description




tag
Select
Add Tag
Up to 50 can be added per resource
After clicking the Add Tag button, enter or select Key and Value values


Explanation
Select
User additional description
Up to 255 characters allowed




  Table. Security Group additional information input fields

3. Check the input information and click the Create button.
   • When creation is complete, check the created resources on the Security Group List page.

Check Security Group detailed information

On the Security Group menu’s Security Group List page, you can view and edit the full resource list and detailed information.

To view detailed information about a Security Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
3. On the Security Group List page, click the resource for which you want to view detailed information. You will be taken to the Security Group Details page.
   • Security Group Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.

Detailed Information

Security Group List lets you view detailed information of the selected resource and edit the information when needed.

Rule

Security Group list page lets you view the rule list of the selected resource and add or delete rules.

tag

Security Group List page lets you view, add, modify, or delete tag information for the selected resource.

Job History

You can view the operation history of the selected resource on the Security Group List page.

Managing Security Group Resources

You can manage resources such as log storage settings and rule additions for a Security Group.

Using Log Storage

To save Security Group logs, follow the steps below.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
3. On the Security Group List page, click the resource (Security Group name) for which you want to store logs. You will be taken to the Security Group Details page.
4. Click the Edit icon of Log Save Status. You will be taken to the Log Save Status Edit popup window.
5. Modify Log Saving Option In the popup window, select Use for the log repository, and click the Confirm button.

Disable log storage

To stop storing Security Group logs, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
3. On the Security Group List page, click the resource (Security Group name) that you do not want to log. You will be taken to the Security Group Details page.
4. Click the Edit icon of Log Save Option. It navigates to the Log Save Option Edit popup.
5. Modify Log Saving Option In the popup window, deselect Use for the log repository, and click the Confirm button.
6. Notification Check the message in the popup window and click the OK button.

Add rule

To add a Security Group rule, follow the steps below.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.

3. Security Group List page, click the resource (Security Group name) to which you want to add a rule. Navigate to the Security Group Details page.

4. On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.

5. on the Rules tab, click the Add Rule button. You will be taken to the Add Rule popup.

   Category	Required	Detailed description
   Target input method	Required	Configure rule remote type CIDR: Set target address by directly entering IP Security Group: Set to target the created Security Group
   Remote > Target address	Required	If CIDR is selected, you must enter the target IP address Enter in CIDR (IP address/subnet mask) format using , and -, you can input multiple addresses at once, up to 100. Enter ‘0.0.0.0/0’ to use the entire IP range (ANY).
   Remote > Security Group	Required	When Security Group is selected, a Security Group selection is required.
   type	Required	Select protocol type to apply the rule Select destination port/Type: Select protocol type Internet Protocol: Enter protocol numbers, up to 100 can be entered All: Select the entire range for destination port/Type and protocol, meaning all ports for all protocols
   Type > Protocol	Required	Select detailed protocol for the type Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol When ICMP is selected in the protocol, you can set the ICMP Type Select a commonly used Type, such as Echo, from the values defined for ICMP Type Click the Add button to add an input value When TCP/UDP is selected in the protocol, you can choose allowed ports such as SSH, HTTP, etc. When entering manually, you can input values from 1 to 65,535, and you can enter up to 100 entries at once using commas (,) or ranges (-) Click the Add button to add an input value When Internet Protocol is selected in the type 1 ~ 254 Enter a protocol number within 1 to 254
   direction	Required	Target application criteria, traffic direction configuration Inbound rule: External → Server Outbound rule: Server → External
   Explanation	Select	Additional description provided by the user

   Table. Detailed items for adding Security Group rules

6. After reviewing the rules to be added, click the Confirm button.

Batch Create Rules

To add multiple Security Group rules at once, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. From the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
3. Security Group List page, click the resource (Security Group name) to which you want to add a rule. Security Group Details page will be displayed.
4. On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Click the Excel Download button on the Rules tab. The bulk rule entry Excel file will be downloaded.
6. Enter the rule information into the batch rule entry Excel file, then save it.
7. More > Bulk Rule Input Click the button. Bulk Rule Input popup window opens.
8. Batch Rule Input In the popup window, click Attach File, attach the Excel file you prepared, and click Upload File.
   • You cannot upload the attached Excel file if its format differs from the registration form or if the file is encrypted.
   • You can upload up to 100 batch registration rules at a time. If you exceed the maximum number of registration rules, the upload will not be allowed.
   • If you exceed the maximum number of rules that can be registered in the Account, you cannot upload the file.
9. Rule Confirmation Check the details in the popup window and click the Confirm button.

Delete rule

To delete a Security Group rule, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
3. Security Group List page, click the resource (Security Group name) for which you want to add a rule. Security Group Details page will be displayed.
4. On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.
5. In the Rules tab, click the Delete button for the rule you want to delete.

Terminate Security Group

You can delete unused Security Groups.

To delete a Security Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
2. Click the Security Group menu on the Service Home page. You will be taken to the Security Group List page.
3. On the Security Group List page, select the resource (Security Group name) to terminate, and click the Terminate Service button.
4. After termination is complete, check on the Security Group list page whether the resource has been deleted.

2.2.1 - Security Group Logging

To store Security Group logs, first create a bucket in Object Storage for log storage and configure that bucket in the Security Group Logging repository. Then, on the Security Group Details page, set up log storage, and the Security Group logs will be saved to the Object Storage bucket.

To save Security Group logs, follow these steps.

1. To store Security Group logs, you can create a bucket in Object Storage or use an existing bucket. To create a bucket, refer to Object Storage 생성하기.
2. To configure the bucket for the log repository of Security Group Logging, refer to Security Group Logging Log Repository Setup.
3. In the Security Group detail view, to set log storage to Enabled, please refer to Security Group Enable Log Storage.

Security Group Logging Configure log storage usage

To set the log storage option of a Security Group to Enabled, you must first configure a log repository in Security Group Logging.

To enable the log repository for Security Group Logging, follow these steps.

1. All Services > Management > Network Logging > Security Group Logging Click the menu. You will be taken to the Security Group Logging List page.
2. On the Security Group Logging List page, click the Log Storage Settings button at the top. You will be taken to the Log Storage Settings popup.
3. Log storage settings In the popup window, select the log storage bucket. When you select a bucket, the log storage path is displayed.
4. Log storage settings In the popup window, after checking Log storage bucket and Log storage path, click the Confirm button.
5. Notification After reviewing the message in the popup window, click the Confirm button.

Query Security Group Logging List

If you configure the log storage bucket for Security Group Logging, you can view the Security Group Logging list.

To view the Security Group Logging list, follow these steps.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. Navigate to the Security Group Logging List page.
2. Security Group Logging List page, verify the resources in use and the log storage targets.

   Category	Detailed description
   Resource ID	Security Group ID
   Save target	Security Group name
   Save registration date and time	Security Group log storage registration timestamp

   Table. Security Group Logging list items
   Reference

   After configuring the log repository for Security Group Logging, you must set the log storage option to Enabled in the Security Group detail view for logging to begin. For more details, see Security Group Log Storage Usage.

Security Group Logging Check detailed information

The stored logs have different detailed information depending on the protocol. Refer to the information below to view the details.

TCP / UDP

ICMP

IP

Security Group Logging Disable Log Storage Configuration

In Security Group Logging, you can set the log storage to unused.

To disable the log repository for Security Group Logging, follow these steps.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. You will be taken to the Security Group Logging List page.
2. Security Group Logging List page, click the top Log Storage Settings icon. You will be taken to the Log Storage Settings popup window.
3. Log storage configuration in the popup window, select log storage bucket as Not used, and click the Confirm button.

2.2.2 - Migration Rules

Users can retrieve rules created in the V1 environment of the Samsung Cloud Platform Console and apply them to the V2 service.

Getting Security Group Rules

You can import rules created in the V1 environment of the Samsung Cloud Platform Console and migrate them to the V2 service for use.

To retrieve the Security Group rules of V1, follow these steps.

1. All Services > Networking > Security Group menu, click it. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Select the rule information to retrieve from the Migration Rules page and click Done.

   Category	Detailed description
   Original rule environment	SCP v1 (Vmware) Auto-select
   Applicable target	Select the Security Group list in the account to apply the transferred rule
   Get rules	Click the Attach File button to upload the decrypted Security Group rule file After decrypting and saving the rule file extracted from the original environment, upload it
   Rule List	View uploaded Security Group rule file details Delete: Delete selected rule Edit: Modify selected rule information, see [Edit transferred Security Group rule](#이관할-Security Group-규칙-수정하기) for details

   Table. Migration Rules detailed items

4. After the Security Group rule transfer request is completed, verify that the transfer item has been added to the Security Group list.

Modify the Security Group rules to be transferred

You can edit each item when retrieving rules created in the V1 environment of the Samsung Cloud Platform Console.

To modify the Security Group rules to be imported from V1, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. In the rule import section, click Attach File to upload the Security Group rule file.

4. In the rule list, click Edit for the rule item you want to modify.

   Category	Required or not	Detailed description
   Target Input Method	Required	Remote rule type setting CIDR: Set the target address by entering the IP directly Security Group: Set to the created Security Group
   Remote > Target address	Essential	If CIDR is selected, you need to enter the target IP address Enter in CIDR (IP address/subnet mask) format , using and - you can input multiple addresses up to 100 at once. To use the entire IP range (ANY), enter ‘0.0.0.0/0’
   Remote > Security Group	Essential	When Security Group is selected, a Security Group must be chosen.
   type	Required	Select protocol type to which the rule will be applied Select destination port/Type: Select protocol type Internet Protocol: Enter protocol numbers, up to 100 entries allowed All: Select destination port/Type and protocol for the entire range, meaning all ports for all protocols
   Type > Protocol	Required	Select detailed protocol for the type Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol When ICMP is selected in the protocol, you can set the ICMP Type Select a commonly used Type, such as Echo, from the values defined for ICMP Type Click the Add button to add an input value When TCP/UDP is selected in the protocol, you can choose allowed ports such as SSH, HTTP, etc. When entering manually, you can input values from 1 to 65,535, and you can enter up to 100 entries at once using commas (,) or ranges (-) Click the Add button to add an input value When Internet Protocol is selected in the type 1 ~ 254 Enter a protocol number within the range
   direction	Essential	Set the traffic direction for the applicable target Inbound rule: external → server Outbound rule: server → external
   Explanation	Selection	Additional description written by the user

   Table. Detailed items of the Security Group rule edit window

5. When the rule information edit is complete, click Confirm in the edit window.

6. Review the edited rule information and click Done.

2.3 - API Reference

2.4 - CLI Reference

2.5 - Release Note

Security Group

3 - Load Balancer

3.1 - Overview

Service Overview

The Load Balancer (LB) service of Samsung Cloud Platform automatically distributes traffic to available servers when there is an unpredictable traffic surge or server failure, ensuring the stability and continuity of customer services.

A Load Balancer serves as the service endpoint provided to clients, is deployed in a VPC subnet according to the service type (L4 / L7), and you can configure multiple services by adding listeners to the created Load Balancer.

The Listener receives client requests through the service port and processes traffic according to routing rules. L4 supports TCP / UDP / TLS protocols, and L7 supports HTTP / HTTPS protocols; in L7, you can specify an LB server group for each routing condition or set a redirect response for the request URL.

The LB server group forwards requests received by the Listener to specific servers based on load balancing and health checks. The servers receive client requests from the Load Balancer’s Source NAT IP through the ports configured for the members, and the server status is periodically monitored by the Load Balancer’s health check IP.

LB health check defines the member health check method registered in the LB server group. You can select a default LB health check resource provided for the LB server group, or create a new one to configure monitoring suitable for the application.

Features

• Various load balancing methods: Round Robin, Least Connection, IP Hash, etc., are provided.
• SSL Authentication Encryption and Offloading: Supports SSL offloading and allows selection of encryption level.
• Enhanced Security: Use a firewall to manage Load Balancer communication and view connection logs by storing logs.

Service Architecture Diagram

Provided features

• Load Balancer: Select the service type and configure the IP to be used by the Load Balancer.
• Listener: Set the protocol, port, and routing rules. You can add multiple Listeners to a single Load Balancer.
• LB server group: Sets the load balancing method. LB server group can be attached to a single Load Balancer.
• Member: Select the server to add to the LB server group. You can choose Virtual Server or Bare Metal Server resources created in the same VPC as the Load Balancer, or enter an IP address directly.
• LB health check: Sets the member health check method. LB health checks can be registered and used across multiple LB server groups.

Component

A Load Balancer consists of a Load Balancer (Listener), LB server group (member), and LB health check.

Load Balancer

The components that make up a Load Balancer are as follows. By configuring each component, you can set up load balancing suitable for the customer’s workload.

LB server group

The elements that make up an LB server group are as follows. Traffic is delivered to members of the LB server group according to the settings of each component.

LB health check

The elements that make up the LB health check are as follows. Member health checks are performed according to the settings of each component.

Constraints

The Load Balancer of Samsung Cloud Platform has a default quota, which limits the number of Load Balancers, Listeners, LB server groups, and members that can be created. You can manage current usage through the Console and request additional quota for items that can be expanded.

Preliminary Service

This is a list of services that must be pre-configured before creating a Load Balancer service. Please refer to the guide provided for each service and prepare in advance.

3.1.1 - ServiceWatch metric

The Load Balancer sends metrics to ServiceWatch. The metrics provided by basic monitoring are data collected at 5‑minute intervals.

Basic Metrics

The following are the default metrics for the Load Balancer namespace.

The indicators whose names are displayed in bold text below are the key metrics selected from the basic metrics provided by Load Balancer. Key metrics are used to build the service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

3.2 - How-to guides

Users can create a service by entering the required Load Balancer information and selecting detailed options through the Samsung Cloud Platform Console.

Create Load Balancer

You can create and use a Load Balancer service from the Samsung Cloud Platform Console.

To create a Load Balancer, follow these steps.

1. Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
2. On the Service Home page, click the Create Load Balancer button. You will be taken to the Create Load Balancer page.
3. On the Load Balancer Creation page, enter the information required to create the service and select detailed options.
   • In the Service Information Input area, enter or select the required information.

• In the Additional Information Input area, enter or select the required information.

  Category	Required status	Detailed description
  description	Select	Enter resource description
  tag	Select	Add tags Up to 50 tags can be added per resource

  Table. Load Balancer additional information input fields

4. Check the created service information and the estimated billing amount, then click the Create button.
   • After creation is complete, check the created resources on the Load Balancer List page.
     guide

     • Load Balancer service does not provide access control for Service IP and service ports.
       
       • When creating a Load Balancer, select Use Firewall to manage communication between the client and the Load Balancer, and between the Load Balancer and members with Firewall rules, and we recommend using Save Firewall Logs to store access logs.
     • When creating a service and enabling the Firewall log storage feature, you must configure the log storage first. If the log storage is not configured, you cannot create a Load Balancer service.
     Caution

     When using a firewall, you must add rules required for Load Balancer communication. Register the rules, paying attention to the direction for each purpose.
     

     • If you do not add a rule, the Load Balancer service will not operate correctly.

     

     Purpose	Source IP	Destination IP	Protocol	Destination Port/Type	direction
     Client → LB connection	Client IP	LB Service IP	Listener protocol	Listener service port	Outbound
     LB → Member connection	LB Source NAT IP	LB server group member IP	LB server group protocol	Member port	Inbound
     LB → Member health check	LB health check IP	LB server group member IP	Health check protocol	Health check port When the health check port and member port differ, register the member port	Inbound

     Figures and tables. Add Load Balancer firewall rule

Check Load Balancer detailed information

The Load Balancer service can be viewed and edited for the resource list and detailed information in the Load Balancer menu. The Load Balancer Details page consists of Details, Connected Resources, Tags, Activity Log tabs.

Follow these steps to view detailed information about the Load Balancer service.

1. Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
2. From the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
3. Load Balancer List page, click the resource to view its details. You will be taken to the Load Balancer Details page.
   • Load Balancer Details page displays status information and additional feature information, and consists of Details, Connected Resources, Tags, Activity History tabs.

     Category	Detailed description
     status	Load Balancer resource status Active: Service is operating normally Deleting: Service termination request is being processed Creating: Service creation request is being processed Error: Unable to determine current status due to internal error Editing: Service modification request is being processed
     Service termination	Delete Load Balancer resource

     Table. Load Balancer status information and additional feature items

Detailed Information

In the Detailed Information tab, you can view the detailed information of the resource selected from the Load Balancer list and edit the necessary information.

Connected resources

Connected Resources tab lets you view the list of Listeners attached to the Load Balancer, and you can create or delete Listeners.

• In the Connected Resources tab, selecting the Listener item takes you to the Listener Details page where you can view, edit, and delete the detailed information.
• On the Listener Details page, clicking the Edit icon lets you modify the information.

tag

Load Balancer List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

Work History tab allows you to view the work history of the selected resource.

Load Balancer Resource Management

You can manage resources such as creating and deleting Load Balancer listeners.

Create Listener

Create a Listener on the Load Balancer to receive client requests and handle traffic according to the Listener configuration.

Creating a Listener in L4 Load Balancer

To create a Listener in the L4 Load Balancer, follow these steps.

1. Click the All Services > Networking > Load Balancer menu. You will be taken to the Load Balancer’s Service Home page.
2. On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
3. Load Balancer List page, click the Load Balancer resource to create a Listener. You will be taken to the Load Balancer Details page.
4. On the Load Balancer Details page, click the Connected Resources tab. You will be taken to the Connected Resources tab page.
5. On the Connected Resources tab page, click the Create Listener button in the upper right.
6. Enter or select the required information in the Service Information Input area.
   • The information that can be entered varies depending on the protocol.

7. In the Additional Information Input area, enter or select the required information.

8. Verify the created service information and click the Create button.
   • When creation is complete, verify the created resource on the Load Balancer Details page’s Connected Resources tab.

Creating a Listener in L7 Load Balancer

Follow these steps to create a Listener in an L7 Load Balancer.

1. Click the All Services > Networking > Load Balancer menu. Go to the Load Balancer’s Service Home page.
2. On the Service Home page, click the Load Balancer menu. You will be taken to the Load Balancer list page.
3. On the Load Balancer List page, click the Load Balancer resource for which you want to create a Listener. You will be taken to the Load Balancer Details page.
4. Click the Connected Resources tab on the Load Balancer Details page. You will be taken to the Connected Resources tab page.
5. On the Connected Resources tab page, click the Create Listener button in the upper right.
6. In the Service Information Input area, enter or select the required information.
   • The information that can be entered varies depending on the protocol.