Networking

• 1: VPC
• 1.1: Overview
• 1.1.1: ServiceWatch Metrics
• 1.2: How-to guides
• 1.2.1: Subnet
• 1.2.2: Port
• 1.2.3: Internet Gateway
• 1.2.4: NAT Gateway
• 1.2.5: Public IP
• 1.2.6: Private NAT
• 1.2.7: VPC Endpoint
• 1.2.8: VPC Peering
• 1.2.9: Transit Gateway
• 1.2.10: PrivateLink Service
• 1.2.11: PrivateLink Endpoint
• 1.2.12: NAT Logging
• 1.3: API Reference
• 1.4: CLI Reference
• 1.5: Release Note
• 2: Security Group
• 2.1: Overview
• 2.2: How-to guides
• 2.2.1: Security Group Logging
• 2.2.2: Address Group
• 2.2.3: Migration Rules
• 2.3: API Reference
• 2.4: CLI Reference
• 2.5: Release Note
• 3: Load Balancer
• 3.1: Overview
• 3.1.1: ServiceWatch metric
• 3.2: How-to guides
• 3.2.1: LB server group
• 3.2.2: LB health check
• 3.3: API Reference
• 3.4: CLI Reference
• 3.5: Release Note
• 4: DNS
• 4.1: Overview
• 4.1.1: TLD List
• 4.1.2: ServiceWatch Metrics
• 4.2: How-to guides
• 4.2.1: Private DNS
• 4.2.2: Hosted Zone
• 4.2.3: Public Domain Name
• 4.3: Release Note
• 5: VPN
• 5.1: Overview
• 5.1.1: ServiceWatch Metrics
• 5.2: How-to guides
• 5.2.1: VPN Tunnel
• 5.3: API Reference
• 5.4: CLI Reference
• 5.5: Release Note
• 6: Firewall
• 6.1: Overview
• 6.2: How-to guides
• 6.2.1: Firewall Logging
• 6.2.2: Migration Rules
• 6.3: API Reference
• 6.4: CLI Reference
• 6.5: Release Note
• 7: Direct Connect
• 7.1: Overview
• 7.1.1: ServiceWatch Metrics
• 7.2: How-to guides
• 7.3: API Reference
• 7.4: CLI Reference
• 7.5: Release Note
• 8: Cloud LAN-Data Center
• 8.1: Overview
• 8.2: How-to guides
• 8.2.1: vDevice
• 8.2.2: Interface
• 8.2.3: vCable
• 8.2.4: vEdge
• 8.3: Release Note
• 9: Cloud Secured SD-LAN
• 9.1: Overview
• 9.2: How-to guides
• 9.3: Release Note
• 10: Cloud WAN
• 10.1: Overview
• 10.1.1: Monitoring Metrics
• 10.2: How-to guides
• 10.3: Release Note
• 11: Cloud Virtual Circuit
• 11.1: Overview
• 11.2: How-to guides
• 11.3: Release Note
• 12: SASE
• 12.1: Overview
• 12.2: How-to guides
• 12.2.1: SASE Lastmile
• 12.3: Release Note
• 13: Cloud Last Mile
• 13.1: Overview
• 13.2: How-to guides
• 13.2.1: Circuit and Edge
• 13.3: Release Note
• 14: Global CDN
• 14.1: Overview
• 14.1.1: ServiceWatch Metrics
• 14.2: How-to guides
• 14.3: API Reference
• 14.4: CLI Reference
• 14.5: Release Note
• 15: GSLB
• 15.1: Overview
• 15.2: How-to guides
• 15.3: API Reference
• 15.4: CLI Reference
• 15.5: Release Note
• 16: Private 5G Cloud
• 16.1: Overview
• 16.2: How-to guides
• 16.3: Release Note

1 - VPC

1.1 - Overview

Service Overview

Samsung Cloud Platform provides VPC services to enable the use of logically isolated, customer‑dedicated private network spaces in the cloud environment.
VPC(Virtual Private Cloud) is a service that provides a logically isolated, customer‑dedicated private network space in a cloud environment. Depending on the intended use, you can create a General Subnet or a Local Subnet for communication between servers, and freely select NAT Gateway and Internet Gateway to configure various networks. You can create multiple VPCs and operate them independently. VPC Peering allows configuration of connections between VPCs.

Service architecture diagram

Components

Subnet

Subnet refers to the IP address range of a VPC. Depending on the purpose, use the General Subnet to create subnets for public or private use. It is a service that lets users segment the network within a VPC according to their purpose and scale. Subnet provides a standard Subnet and a Local Subnet for communication between servers.

• General Subnet Creation/Read/Deletion: When creating a VPC, a Subnet is created by default, and you use the Subnet according to its purpose. * For example, you can separate and use a Public Subnet that can access the internet and a Private Subnet that cannot.

• VPC Endpoint Subnet Create/Read/Delete: You can access the Samsung Cloud Platform via a private connection from an external network linked to the VPC, allowing entry into the VPC.

• Local Subnet Creation/Query/Deletion: It does not allow connections to other Subnets or external access, and only permits direct connections between Virtual Server-Virtual Server or Bare Metal Server-Bare Metal Server, so it can be configured only for Virtual Server-Virtual Server within the VPC.

Subnet types

A network zone that logically partitions the VPC IP range, segmenting traffic and security through routing and public/private separation. The provided Subnet types are as follows.

Internet Gateway

You can create an Internet Gateway, connect it to a VPC, view its details, or delete an Internet Gateway that is not in use. You can connect VPC resources to the internet using an Internet Gateway.
You can assign a Public IP to instances and load balancers that are internet‑connected so they can be accessed from outside.

NAT Gateway

You can create a NAT Gateway, connect it to a subnet, view its details, or delete a NAT Gateway that is not in use.
To create a NAT Gateway for a subnet, you must first create an Internet Gateway and attach it to the VPC. When you create a NAT Gateway, internet access is allowed for all resources belonging to the subnet. Apply firewall rules to restrict internet access.
A NAT Gateway can be created when it is of the General type, and it is a service that maps a single representative public IP for a Virtual Server without a public IP NAT to use the internet for outbound traffic.

Public IP

If you want to use the same IP address each time you stop and start an instance, reserve a Public IP and use it.
This is a service that creates a desired public IP within the available Public IP pool of Samsung Cloud Platform and assigns it to compute resources for use.
Compute resources assigned with the designated public IP retain the IP even after a reboot.

Port

Provides a connection point for connecting a single device, such as a server’s NIC, to the network. This allows adding NICs beyond the default provision.

VPC Endpoint

Provides an entry point for the VPC that allows access to the Samsung Cloud Platform via a private connection from an external network connected to the VPC.

VPC Peering

You can communicate via IP through a 1:1 private route between VPCs. By default, it provides peering between VPCs in the same account, and only one connection is allowed between different accounts.

Private NAT

You can map the customer’s IP and connect using Direct Connect from compute resources within the VPC.

Transit Gateway

Transit Gateway is a gateway service that easily connects the customer’s network with the Samsung Cloud Platform network and serves as a connection hub for multiple VPCs within the cloud environment.
Through the Transit Gateway, you can configure various network topologies that customers desire. Additionally, it provides independent firewall configuration and routing capabilities for each connected network segment, enabling thorough security management.

PrivateLink

It is a service that connects internal Samsung Cloud Platform data to a private path between the VPC and the SCP service without exposing it to the internet.

• PrivateLink Service is for service providers, and PrivateLink Endpoint is for service users.

Constraints

The VPC of Samsung Cloud Platform limits the number of VPCs and Subnets that can be created as follows.

Preceding Service

VPC has no prerequisite services.

1.1.1 - ServiceWatch Metrics

VPC - Internet Gateway sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at 5‑minute intervals.

Basic Metrics

Internet Gateway

The following are the basic metrics for the Internet Gateway namespace.

The indicators whose names are shown in bold below are the indicators selected as major indicators among the basic indicators provided by Internet Gateway. Key metrics are used to configure service dashboards that are automatically built for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical value is meaningful to query, and among the meaningful statistics, the values displayed in bold text are the primary statistics. In the service dashboard, primary metrics can be viewed using the primary statistical values.

1.2 - How-to guides

Users can create the service by entering the required VPC information and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC

You can create and use VPC services in the Samsung Cloud Platform Console.

To create a VPC, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC Service Home page.

2. On the Service Home page, click the Create VPC button. 2. Navigate to the VPC creation page.

   • Enter or select the required information in the Service Information Input area.

     구분	필수 여부	Detailed description
     VPC name	Required	Name of the VPC to create Enter using English letters and numbers, within 3 to 20 characters
     IP range	Required	Select IP range in IP range format /16 - /28 enter within the range Example: 192.168.0.0/24 Some IP ranges are reserved for management and cannot be used
     Description	Selection	Enter description of VPC

     Table. VPC Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	whether required	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, input or select Key, Value values

     Table. VPC additional information input items

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • When creation is complete, check the created resources on the VPC List page.

View VPC details

The VPC service can view and edit the complete resource list and detailed information. VPC Details page consists of Detailed Information, IP Range Management, Tags, Operation History tabs.

To view VPC details, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC menu. 2. Navigate to the VPC List page.
3. On the VPC List page, click the resource whose details you want to view. 3. Navigate to the VPC Details page.
   • The VPC Details page displays status information and additional feature information, and is organized into the Details, IP Range Management, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC status Active: Operating normally Deleting: Deletion in progress Creating: Creation in progress Error: Unable to determine current status If it occurs continuously, contact the registered administrator
     Service cancellation	Cancel service button If you cancel the service, the running service may be terminated immediately, so proceed with the cancellation only after fully considering the impact of service interruption

     Table. VPC status information and additional features

Detailed Information

On the VPC List page, you can view detailed information of the selected resource and, if necessary, edit the information.

IP range management

VPC List page allows you to view and add IP range information associated with the selected resource.

Tag

On the VPC List page, you can view the tag information of the selected resource, and add, modify, or delete it.

작업 이력 {#job}

VPC 목록 페이지에서 선택한 자원의 작업 이력을 확인할 수 있습니다.

VPC 해지하기 {#terminate}

사용하지 않는 VPC를 해지해 운영 비용을 절감할 수 있습니다.

VPC를 해지하려면 다음 절차를 따르세요.

모든 서비스 > Networking > VPC 메뉴를 클릭하세요. VPC의 Service Home 페이지로 이동합니다. Service Home 페이지에서 VPC 메뉴를 클릭하세요. VPC 목록 페이지로 이동합니다. VPC 목록 페이지에서 해지할 자원을 선택하고, 서비스 해지 버튼을 클릭하세요. 해지가 완료되면, VPC 목록 페이지에서 자원이 해지되었는지 확인합니다.

1.2.1 - Subnet

Create Subnet

You can create and use the VPC Subnet service from the Samsung Cloud Platform Console.

To create a Subnet, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.

2. On the Service Home page, click the Create Subnet button. 2. Go to the Subnet creation page.

   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPC name	Required	Select the VPC to which the subnet will be attached from the list of existing VPCs Display the Availability Zone information of the selected VPC Click + Create New to create a VPC and then select it
     VPC IP range	Selection	Automatically input the CIDR range of the selected VPC
     Subnet type	Required	Select Subnet type Public: Resources within the Subnet can use Public IP NAT and the Subnet’s NAT Gateway is available Private: Resources within the Subnet cannot use Public IP NAT, but can use the Subnet’s NAT Gateway Local: Available for Virtual Server and Bare Metal Server A Local Subnet is a Subnet for communication only between servers and cannot communicate with external networks VPC Endpoint: VPC Endpoint can be configured
     Subnet classification	Required	선택한 Subnet 유형에 따라 Primary/Secondary Subnet 생성 Primary Subnet을 먼저 생성한 후 하위에 동일한 유형으로 Secondary Subnet 생성 가능 네트워크 격리가 필요한 경우에는 Primary Subnet 생성 필요 VPC Endpoint 유형은 Primary Subnet만 제공
     Availability Zone	필수	선택한 VPC가 Multi-AZ인 경우, VPC의 Availability Zone 정보 표시 3가지 Availability Zone이 자동으로 지정됨
     Subnet name	Required	Subnet name to create Enter using English letters (both uppercase and lowercase) and numbers, within 3 - 20 characters
     IP range	Required	IP range to use in IP range format /16 ~ /28 enter within the range Example: 192.168.0.0/24 The IP range cannot overlap with IP ranges already in use within the VPC (other subnets)
     Gateway IP	Required	Display the Gateway IP address of the Subnet The first IP of the entered IP range is automatically filled in Cannot be modified after the service is created

     표. Subnet 서비스 정보 입력 항목
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Explanation	Selection	Enter description for Subnet
     IP allocation range	Selection	Range can be set within the IP range to be used Select between the entire IP range or individual specification Subnet sub-resources receive IP assignments from the entered entire IP range or the individually specified range by the user When individual specification is selected, enter the start IP address and the end IP address
     DNS Name Server	Selection	After selecting Use, enter the DNS Name Server IP
     Host path	Selection	Use after selecting, enter the host path Enter the destination IP range and Next Hop IP address Destination IP ranges must not overlap each other
     tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     표. Subnet 추가 정보 입력 항목

3. In the Summary panel, verify the detailed information and estimated charges you generated, and click the Create button.

   • Once creation is complete, check the created resources on the Subnet List page.

Check Subnet detailed information

The Subnet service allows you to view and edit the full resource list and detailed information. Subnet Details page consists of Detailed Information, Virtual IP Management, Tags, Operation History tabs.

To view detailed Subnet information, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Subnet button. 2. Go to the Subnet List page.
3. On the Subnet list page, click the resource to view detailed information. 3. Go to the Subnet Details page.
   • Subnet Details page displays status information and additional feature information, and consists of Details, Virtual IP Management, Tags, Operation History tabs.

     Category	Detailed description
     Status	Subnet status Creating: Creation in progress Active: Operating normally Editing: Modification in progress Deleting: Deletion in progress Failed: State where creation failed Error: Unable to determine current state If it occurs continuously, contact the registered administrator
     Delete Subnet	Delete Subnet button

     표. Subnet 상태 정보 및 부가 기능

Detailed Information

Subnet List page lets you view the operation history of the selected resource.

Virtual IP Management

Subnet list page allows you to view the virtual IP information of the selected resource, and you can reserve or delete it.

tag

On the Subnet list page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the Sunnet List page.

Managing Virtual IP

You can reserve or manage Virtual IPs to be used in a Subnet.

Reserve Virtual IP

You can reserve a Virtual IP to be used in the Subnet.

To reserve a Virtual IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Subnet button. 2. Navigate to the Subnet List page.
3. On the Subnet list page, click the resource to reserve a Virtual IP. 3. Subnet Details Navigate to the page.
4. On the Subnet Details page, click the Virtual IP Management tab. 4. Navigate to the Virtual IP Management tab page.
5. Click the Virtual IP Reservation button on the Virtual IP Management tab page. 5. The Virtual IP reservation window opens.
6. In the Virtual IP reservation window, set the detailed items and click OK.
   • Virtual IP: When you select Auto-Generate, an automatically generated IP is reserved, and when you select Enter, you can reserve a manually entered IP.
   • Description: Enter additional description for Virtual IP.
7. When the reservation confirmation window appears, click Confirm.

Check Virtual IP detailed information

You can view detailed information about the Virtual IP.

To view detailed information about the Virtual IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the Service Home page of VPC.
2. On the Service Home page, click the Subnet button. 2. Go to the Subnet List page.
3. On the Subnet list page, click the resource to reserve a Virtual IP. 3. Subnet Details page.
4. On the Subnet Details page, click the Virtual IP Management tab. 4. Virtual IP Management Navigate to the tab page.
5. Virtual IP Management Click the resource to view on the tab page. 5. Navigate to the Virtual IP Details page.
   • *Virtual IP details The page displays the connected ports and detailed information.

     Category	Detailed description
     Virtual IP	Virtual IP address
     Public NAT IP	Public NAT IP address and status Edit icon can be clicked to edit Use after setting, you can select an existing IP or create one to add Public NAT IP cannot be modified after configuration; changes require reconfiguration
     Connection Port	Port information connected to the Virtual IP Add button click to add a connected port, you can also connect an existing port or create one to add Disconnect button click to disconnect the port
     Explanation	Virtual IP description Edit click the icon to edit
     Constructor	User who reserved a Virtual IP
     Creation date and time	Virtual IP reservation date and time
     Modifier	User who modified the Virtual IP information
     Modification date and time	Date and time the Virtual IP information was modified

     표. Virtual IP 상세 정보 항목

Virtual IP Release

You can release unused Virtual IPs in a Subnet.

To return the Virtual IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet button. 2. Go to the Subnet List page.
3. On the Subnet List page, click the resource to release the Virtual IP. 3. Go to the Subnet details page.
4. On the Subnet Details page, click the Virtual IP Management tab. 4. Go to the Virtual IP Management tab page.
5. On the Virtual IP Management tab page, select the Virtual IP to return and click the Return button.
6. When the return confirmation window appears, click Confirm.

Terminate Subnet

You can delete an unused Subnet.

To delete a Subnet, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. 2. Navigate to the Subnet list page.
3. On the Subnet list page, click the resource to delete. 3. Go to the Subnet Details page.
4. On the Subnet Details page, click the Delete Subnet button.
5. After the deletion is complete, verify that the resource has been removed from the Subnet list.

Preliminary Service

This is a list of services that must be pre‑configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.2 - Port

Create Port

You can create and use the Port service in the Samsung Cloud Platform Console.

To create a port, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create Port button. 2. Navigate to the Port creation page.

   • In the Service Information Input area, enter or select the required information.

     Category	required status	Detailed description
     VPC name	Required	Select the VPC to create the Port + Create New click to create VPC and then select
     Subnet name	Required	Select the Subnet to create the Port + New. Click to create a Subnet, then you can select it
     Port name	Required	Port a name that is easy to identify English letters, numbers, - using enter within 3 - 20 characters
     IP allocation method	Required	Select IP allocation method Automatic allocation: IP is automatically assigned within the IP allocation range of the Subnet Manual entry: The entered IP is assigned within the Subnet’s range When Manual entry is selected, enter the IP address to be used for the Port in Fixed IP address
     Explanation	Selection	Enter description for Port
     Security Group	Selection	When Use is selected, click the Select button to select up to 5 Security Groups.

     Table. Port service information input items
   • Enter or select the required information in the Additional Information Input area.

     구분	required status	Detailed description
     Tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Port additional information input fields

3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

   • When creation is complete, check the created resources on the Port List page.

Check detailed port information

The Port service allows you to view and edit the complete resource list and detailed information. Port Details page consists of Details, Tags, Activity Log tabs.

To view detailed port information, follow these steps.

1. All Services > Networking > VPC menu, click. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. 2. Navigate to the Port list page.
3. On the Port List page, click the resource (Port name) to view detailed information. 3. Navigate to the Port Details page.
   • Port Details page displays status information and additional feature information, and is composed of Details, Tags, Work History tabs.

     Category	Detailed description
     status	Port status Active: Operating normally Down: Not connected to the resource, or connected but not operating Error: Current status cannot be determined If it occurs continuously, contact the registered administrator
     Delete Port	Button to delete the port

     Table. Port status information and additional functions

Detailed Information

Port list page lets you view detailed information of the selected resource and, if needed, modify the information.

Tag

On the Port List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

On the Port List page, you can view the operation history of the selected resource.

Delete Port

You can decommission unused ports to reduce operating costs.

To delete a Port, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. 2. Go to the Port list page.
3. On the Port list page, click the resource (Port name) you want to delete. 3. Navigate to the Port Details page.
4. On the Port Details page, click the Delete Port button.
5. After the deletion is complete, verify that the resource has been removed from the Port list.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.3 - Internet Gateway

Create Internet Gateway

You can create and use the Internet Gateway service in the Samsung Cloud Platform Console.

To create an Internet Gateway, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Create Internet Gateway button. 2. Go to the Create Internet Gateway page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPC명	필수	Internet Gateway와 연결되는 VPC를 선택 선택한 VPC의 Availability Zone 정보 표시 + 신규 생성을 클릭하면 VPC 생성 후 선택 가능 Internet Gateway는 VPC의 Availability Zone에 따라 생성, 3개의 AZ를 사용하는 VPC를 선택하면 Internet Gateway도 3개의 Multi-AZ로 자동 생성
     구분	필수	Internet Gateway 유형을 선택 전용 Internet Gateway, Secured Internet Gateway, Group Gateway 중에서 선택
     Internet Gateway 명	선택	IGW 종류_{VPC명}으로 자동 생성
     설명	선택	Internet Gateway에 대한 설명 입력
     Use firewall	Selection	Select firewall usage
     Whether to save firewall logs	Selection	Select whether to save Firewall logs When using the Firewall, save connection logs For details, refer to Firewall 로그 저장 사용하기

     Table. Internet Gateway service information entry items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Internet Gateway additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • After creation is complete, verify the created resource on the Internet Gateway List page.

Check Internet Gateway detailed information

The Internet Gateway service allows you to view and edit the full resource list and detailed information. Internet Gateway Details page consists of Details, Tags, Activity History tabs.

To view detailed information about the Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the Service Home page of VPC.
2. On the Service Home page, click the Internet Gateway menu. 2. Go to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource to view detailed information. 3. Go to the Internet Gateway Details page.
   • Internet Gateway Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	Internet Gateway status Creating: Creating resource Ative: Normal connection status Deleting: Deletion in progress Error: Unable to determine current status If it occurs continuously, contact the registered administrator
     Delete Internet Gateway	Internet Gateway Delete Button

     Table. Internet Gateway status information and additional functions

Detailed Information

Internet Gateway list page lets you view detailed information of the selected resource and, if needed, modify the information.

tag

On the Internet Gateway List page, you can view, add, modify, or delete the tag information of the selected resource.

Job History

On the Internet Gateway list page, you can view the operation history of the selected resource.

Internet Gateway Resource Management

You can manage resources, such as enabling Internet Gateway log storage.

Using NAT Log Storage

To enable NAT log storage, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. 2. Go to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource to view detailed information. 3. Navigate to the Internet Gateway Details page.
4. Click the Edit NAT Log Save Option button. 4. Modify NAT log storage setting Navigate to the popup window.
5. Modify NAT log storage In the popup window, select Use for the log storage, and click the Confirm button.

Disable NAT log storage

To use NAT log storage, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Internet Gateway menu. 2. Go to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource to view detailed information. 3. Go to the Internet Gateway Details page.
4. Click the Modify NAT log saving option button. 4. Modify NAT log storage setting Go to the popup window.
5. Modify NAT log storage In the popup window, deselect Use for the log storage, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Delete Internet Gateway

To delete an Internet Gateway, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. 2. Go to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource you want to delete. 3. Internet Gateway Details go to the page.
4. Click the Delete button on the Internet Gateway Details page.
5. After deletion is complete, check in the Internet Gateway list whether the resource has been removed.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.4 - NAT Gateway

Creating a NAT Gateway

You can create and use the NAT Gateway service in the Samsung Cloud Platform Console.

To create a NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Create NAT Gateway button. 2. Go to the Create NAT Gateway page.
   • In the Service Information Input area, enter or select the required information.

     Category	whether required	Detailed description
     VPC name	Required	연결될 VPC를 선택 선택한 VPC의 Availability Zone 정보 표시 + 신규 생성을 클릭하면 VPC 생성 후 선택 가능
     Subnet명	필수	연결된 Subnet을 선택 선택한 Subnet의 Availability Zone 정보 표시 + 신규 생성을 클릭하면 Subnet 생성 후 선택 가능
     NAT Gateway명	선택	NAT_GW_{서브넷명}으로 생성
     Multi-AZ 사용 여부	선택	Multi-AZ 사용 여부 선택 2개 이상의 Availability Zone에 연결된 Subnet을 선택한 경우에만 표시됨
     NAT Gateway용 IP	필수	Select a Public IP for NAT Gateway If you click + Create new, you can generate the IP and then select it
     Explanation	Selection	Enter description for NAT Gateway

     Table. NAT Gateway service information input items
   • Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     tag	Selection	Add Tag Up to 50 per resource can be added Add Tag 버튼을 클릭한 후 Key, Value 값을 입력 또는 선택

     Table. NAT Gateway additional information input items
3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
   • Once creation is complete, check the created resources on the NAT Gateway List page.

Check NAT Gateway detailed information

The NAT Gateway service allows you to view and modify the full list of resources and detailed information. The NAT Gateway Details page consists of Detailed Information, Tags, Operation History tabs.

1. Click the All Services > Networking > VPC menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the NAT Gateway menu. 2. Go to the NAT Gateway List page.
3. On the NAT Gateway List page, click the resource to view detailed information. 3. Navigate to the NAT Gateway Details page.
   • NAT Gateway Details page displays status information and additional feature information, and is organized into Details, Tags, Activity History tabs.

     Category	Detailed description
     Status	NAT Gateway status Creating: In progress Active: Operating normally Deleting: In progress
     Delete NAT Gateway	Button to terminate the service Terminate the NAT Gateway when there are no connected services If you terminate the service, the running service may be stopped immediately, so proceed with the termination only after fully considering the impact of service interruption

     Table. NAT Gateway status information and additional features

Detailed Information

NAT Gateway List page lets you view detailed information of the selected resource and edit it if needed.

tag

On the NAT Gateway List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the NAT Gateway List page.

Delete NAT Gateway

To delete the NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the Service Home page of VPC.
2. On the Service Home page, click the NAT Gateway menu. 2. Go to the NAT Gateway List page.
3. On the NAT Gateway List page, click the resource to view detailed information. 3. Navigate to the NAT Gateway Details page.
4. NAT Gateway Details on the page, click the Delete button.
5. When the deletion is complete, verify that the resource has been removed from the NAT Gateway list.

Preliminary Service

This is a list of services that must be pre‑configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

1.2.5 - Public IP

Create Public IP

You can create and use the Public IP service from the Samsung Cloud Platform Console.

To create a Public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Public IP reservation button. 2. Go to the Public IP reservation page.

   • Service Information Input area: enter or select the required information.

     Category	Required	Detailed description
     Category	Required	Select the gateway to reserve the Public IP Default: Internet Gateway
     Availability Zone	필수	Public IP의 Availability Zone 선택
     설명	선택	Public IP에 대한 설명 입력

     표. Public IP 서비스 정보 입력 항목
   • In the Additional Information Input area, enter or select the required information.

     구분	필수 여부	상세 설명
     태그	선택	태그 추가 자원 당 최대 50개까지 추가 가능 태그 추가 버튼을 클릭한 후 Key, Value 값을 입력 또는 선택

     표. Public IP 추가 정보 입력 항목

3. Summary Review the detailed information and estimated charges generated in the panel, and click the Create button.

   • Once creation is complete, check the created resources on the Public IP List page.

Check detailed information of Public IP

The Public IP service allows you to view and edit the full resource list and detailed information. Public IP Details page consists of Details, Tags, Activity History tabs.

To view detailed information about the Public IP, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.
2. Click the Public IP menu on the Service Home page. 2. Go to the Public IP List page.
3. On the Public IP List page, click the resource to view detailed information. 3. Navigate to the Public IP Details page.
   • Public IP Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     구분	Detailed description
     Status	Public IP status Attached: connected state Reserved: reserved state Error: status unknown If it occurs continuously, contact the registered administrator
     Return Public IP	Public IP Return Button

     표. Public IP 상태 정보 및 부가 기능

Detailed Information

Public IP List page lets you view detailed information of the selected resource and, if needed, modify the information.

Tag

On the Public IP List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

Public IP List page allows you to view the operation history of the selected resource.

Return Public IP

To delete a Public IP, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Public IP button. 2. Go to the Public IP List page.
3. On the Public IP List page, click the resource to view its detailed information. 3. Navigate to the Public IP Details page.
4. On the Public IP Details page, click the Public IP Return button.
5. After the return is completed, check whether the resource has been deleted from the Public IP list.

Preliminary Service

This service must be installed in advance before creating it. Please prepare by referring to the user guide provided in advance.

1.2.6 - Private NAT

Users can create the Private NAT service by entering the required information and selecting detailed options through the Samsung Cloud Platform Console.

Creating Private NAT

You can create a Private NAT service in the Samsung Cloud Platform Console and use it.

To create a Private NAT, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create Private NAT button. 2. Navigate to the Create Private NAT page.

   • In the Service Information Input area, enter or select the required information.

     Category	required status	Detailed description
     Private NAT name	Required	Enter the Private NAT name Enter using letters and numbers, 3 to 20 characters
     Connection resource type	Required	Select the connection resource to connect the Private NAT You can choose between Direct Connect and Transit Gateway Transit Gateway can be selected after connecting the uplink line
     Connection resource name	Essential	Display entries of the selected connection resource Click + New Creation in the list to create a connection resource
     NAT IP range	Essential	Enter the NAT IP range to use Enter in CIDR format, e.g., 192.168.2.0/23 Cannot overlap with the connected VPC IP or other Private NAT IP ranges
     Explanation	Selection	Enter description for Private NAT

     Table. Private NAT Service Information Input Items
     Reference

     • It must not overlap with the IP range of the VPC connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with other Private NAT ranges that are connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with the IP range of the on‑premise network connected to the selected Direct Connect or Transit Gateway.
     • Some IP ranges are reserved for management and cannot be used.

   • Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Private NAT additional information input fields

3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

   • When creation is complete, verify the created resources on the Private NAT List page.

Check Private NAT detailed information

The Private NAT service allows you to view and edit the complete resource list and detailed information. On the Private NAT Details page, it consists of Detail Information, IP Management, Tags, Operation History tabs.

To view detailed information about Private NAT, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. Private NAT List page, click the resource to view detailed information. 3. Navigate to the Private NAT Details page.
   • Private NAT Details page displays status information and additional feature information, and consists of Details, IP Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	Private NAT status Active: Running Creating: In progress Deleting: In progress Error: An error occurred
     Delete Private NAT	Button to delete Private NAT

     Table. Private NAT status information and additional features

Detailed Information

Private NAT List page allows you to view detailed information of the selected resource and edit the information if necessary.

IP Management

Private NAT List page allows you to view the Private NAT IP, and you can reserve or release it.

Tag

On the Private NAT List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Private NAT List page, you can view the operation history of the selected resource.

Managing Private NAT IP

You can reserve or release a Private NAT IP.

Reserve Private NAT IP

To reserve a Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Private NAT List Go to the page.
3. Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. Click the IP Management tab page’s Private NAT IP Reservation button. 5. The Private NAT IP reservation window appears.
6. Enter the Private NAT IP to be used in the Private NAT IP reservation window and click the Confirm button. 6. A notification confirmation dialog appears.
7. In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added to the IP list.

Return Private NAT IP

To return the Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Navigate to the Private NAT List page.
3. On the Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. On the IP Management tab page, click the Return button for the IP item you want to return. 5. A notification confirmation dialog appears.
6. Verify that the selected resource has been deleted from the IP list.

Delete Private NAT

You can cancel unused Private NAT to reduce operating costs.

To cancel Private NAT, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. On the Private NAT List page, click the resource to delete. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the Delete Private NAT button.
5. After termination is complete, check whether the resource has been deleted from the Private NAT list.

Preliminary service

This service must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.

1.2.7 - VPC Endpoint

Create VPC Endpoint

You can create and use a VPC Endpoint service from the Samsung Cloud Platform Console.

To create a VPC Endpoint, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create VPC Endpoint button. 2. VPC Endpoint creation page.

   • Enter or select the required information in the Service Information Input area.

     구분	필수 여부	상세 설명
     VPC명	Required	Select the VPC to create the Endpoint Display the Availability Zone information of the selected VPC + Create new click to create the VPC and then select it
     Usage purpose > Target service	Required	Select the target service for creating the VPC Endpoint
     Usage > Connected Resources	Required	Select the resource to create the VPC Endpoint
     VPC Endpoint name	Required	Enter VPC Endpoint name Enter using letters and numbers, 3 to 20 characters
     VPC Endpoint IP > Subnet name	required	Select VPC Endpoint Subnet Display the Availability Zone information of the selected Subnet Click + Create new to create a Subnet and then select it
     VPC Endpoint IP > IP	Required	Enter the IP to be used for the VPC Endpoint Example: 192.168.x.x
     Description	Selection	Enter description for VPC Endpoint

     Table. VPC Endpoint Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. VPC Endpoint additional information input fields
     Reference

     After registering the VPC Endpoint, you must configure the Direct Connect firewall to integrate internal services of the Samsung Cloud Platform. Refer to the port information for each service and register the firewall rules.

     service	Port information
     DNS	TCP 53, UDP 53
     Object Storage	TCP 8080, 8443, 80, 443, 4430
     File Storage	(NFS) TCP/UDP common 111, 300, 302, 304, 2049, 635, 4045, 4046, 4049 (CIFS) UDP 135, 137, 138, 389 / TCP 135, 139, 445, 40001
     Container Registry (authentication server, Registry)	TCP 443

     Table: Allowed ports per target service

3. Summary Verify the detailed information and estimated charges generated in the panel, then click the Create button.

   • Once creation is complete, check the created resources on the VPC Endpoint List page.

Check VPC Endpoint detailed information

The VPC Endpoint service lets you view and modify the full list of resources and detailed information. VPC Endpoint Detail page consists of Detail Information, Tags, Operation History tabs.

Endpoint To view detailed information, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Go to the VPC Service Home page.
2. On the Service Home page, click the VPC Endpoint menu. 2. Navigate to the VPC Endpoint List page.
3. On the VPC Endpoint List page, click the resource to view detailed information. 3. VPC Endpoint Details Navigate to the page.
   • VPC Endpoint Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Endpoint status Active: operating normally Creating: creation in progress Deleting: deleting resource attachment Deleted: resource attachment deleted
     Delete VPC Endpoint	Button to delete the VPC Endpoint connection resource

     Table. VPC Endpoint status information and additional features

Detailed Information

On the VPC Endpoint List page, you can view detailed information of the selected resource and, if necessary, edit the information.

Tag

VPC Endpoint List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

VPC Endpoint List You can view the operation history of the selected resource on this page.

Delete VPC Endpoint

You can terminate unused Endpoints to reduce operating costs.

VPC Endpoint를 해지하려면 다음 절차를 따르세요. 모든 서비스 > Networking > VPC 메뉴를 클릭하세요. VPC의 Service Home 페이지로 이동합니다. Service Home 페이지에서 VPC Endpoint 메뉴를 클릭하세요. VPC Endpoint 목록 페이지로 이동합니다. VPC Endpoint 목록 페이지에서 삭제할 자원을 클릭하세요. VPC Endpoint 상세 페이지로 이동합니다. VPC Endpoint 상세 페이지에서 Endpoint 삭제 버튼을 클릭하세요. 해지가 완료되면, VPC Endpoint 목록에서 자원이 삭제되었는지 확인하세요.

선행 서비스 {#service}

해당 서비스를 생성하기 전에 미리 구성되어 있어야 하는 서비스 목록입니다. 자세한 내용은 각 서비스 별로 제공되는 가이드를 참고하여 사전에 준비해주세요.

1.2.8 - VPC Peering

Users can create the service by entering the required information for the VPC Peering service and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC Peering

You can create and use the VPC Peering service in the Samsung Cloud Platform Console.

To create a VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create VPC Peering button. You will be taken to the Create VPC Peering page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPC Peering name	Required	Enter VPC Peering name Enter using letters and numbers, 3~20 characters
     Requested VPC name	Required	Select the VPC to request VPC Peering Click + New in the list to create a VPC
     Approved Account	Required	Select the account of the VPC to approve VPC peering, then select that VPC or enter its information Same account: select the approved VPC name Click + New creation in the list to create a VPC Different account: enter the approved Account ID and approved VPC ID
     description	Select	Enter a description of VPC Peering

     Table. VPC Peering service information input items
   • In the Additional Information Input area, enter or select the required information.

     Category	Whether required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. VPC Peering additional information input fields
3. Check the detailed information and estimated billing amount generated in the Summary panel, and click the Create button.
   • When connecting a VPC from another Account, the peering proceeds after an approval process, so the connection may take some time.
   • When creation is complete, check the created resource on the VPC Peering List page.

Check VPC Peering details

The VPC Peering service allows you to view and edit the full list of resources and detailed information. VPC Peering Details page consists of Details, Rules, Tags, Activity Log tabs.

To view detailed VPC Peering information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. VPC Peering List Click the resource to view detailed information on the page. You will be taken to the VPC Peering Details page.
   • VPC Peering Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Peering status Active: operational Requesting: connection or deletion request in progress Creating: connecting Creating Requesting: connection request in progress Deleting Requesting: deletion request in progress Editing: editing Rejected: rejected Canceled: canceled Error: error occurred If it persists, contact the registered administrator
     VPC Peering deletion/VPC Peering deletion request	Button to request deletion of VPC Peering resources Cancel Connection Request: Can cancel if a VPC Peering connection was requested Approve Connection: Can approve when a VPC Peering connection request is received Reject Connection: Click to reject the connection Cancel Deletion Request: Can cancel if a VPC Peering deletion was requested Approve Deletion: Can approve when a VPC Peering deletion request is received Reject Deletion: Click to reject the deletion Reapproval Request: Request reapproval when VPC approval was denied

     Table. VPC Peering status information and additional features

Detailed Information

VPC Peering List page lets you view detailed information of the selected resource and edit it if needed.

rule

VPC Peering List page lets you view the rules associated with the selected resource, and add or remove them.

tag

VPC Peering List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the VPC Peering List page.

Managing VPC Peering Rules

You can add or delete rules for VPC Peering.

Add Rule

To add a rule to VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. The Add Rule dialog appears.
6. Enter the origin and destination in the rule addition window and click the Confirm button. A notification confirmation window will appear.
   • It must not duplicate an already entered rule.
   • You can enter within the IP address range of the destination VPC.
   • It should be entered the same as the subnet range.
   • The destination IP range 0.0.0.0/0 cannot be used.
7. Click the Confirm button in the notification dialog. Verify that the resource entry has been added to the rule list.

Delete Rule

To delete a VPC Peering rule, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. Navigate to the VPC Peering Details page.
4. VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Rule tab page, click the Delete button of the item to delete. A notification confirmation dialog appears.
6. Click the Confirm button in the alert dialog. Verify that the selected resource in the rule list has been deleted.

Terminate VPC Peering

You can terminate unused VPC Peering to reduce operating costs.

Terminate VPC Peering of the same Account

To terminate a VPC peering within the same account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete button.
5. After termination is complete, verify that the resource has been deleted from the VPC Peering list.

Terminate VPC Peering connected to another account

To terminate a VPC peering connected to another account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. You will be taken to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete Request button.
5. Once the cancellation is complete, verify that the resource has been removed from the VPC Peering list.
   • The deletion request must be approved by the counterpart account for the termination to be processed correctly.

Pre-service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

1.2.9 - Transit Gateway

Users can create the service by entering the required information for the Transit Gateway service and selecting detailed options through the Samsung Cloud Platform Console.

Create Transit Gateway

You can create and use the Transit Gateway service from the Samsung Cloud Platform Console.

To create a Transit Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Go to the VPC Service Home page.
2. Service Home page, click the Create Transit Gateway button. 2. Navigate to the Create Transit Gateway page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required	Detailed description
     Transit Gateway name	Required	Enter the Transit Gateway name Enter using letters and numbers, 3 to 20 characters
     Explanation	Selection	Enter a description of the Transit Gateway

     표. Transit Gateway 서비스 정보 입력 항목
   • Additional Information Input area, please enter or select the required information.

     Category	Required status	Detailed description
     tag	Selection	Add Tag Up to 50 can be added per resource Add Tag 버튼을 클릭한 후 Key, Value 값을 입력 또는 선택

     Table. Transit Gateway additional information input fields
3. Summary Review the detailed information and estimated charges generated in the panel, then click the Create button.
   • Once creation is complete, verify the created resource on the Transit Gateway List page.

Check Transit Gateway detailed information

You can view and edit the full list of resources and detailed information for the Transit Gateway service. Transit Gateway Details page consists of Detailed Information, Connected VPC Management, Rules, Tags, Activity History tabs.

To view detailed information about the Transit Gateway, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.
2. Click the Transit Gateway menu on the Service Home page. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to view detailed information. 3. Go to the Transit Gateway details page.
   • Transit Gateway Details page displays status information and additional feature information, and consists of Details, Connected VPC Management, Rules, Tags, Activity History tabs.

     Category	Detailed description
     Status	Transit Gateway status Active: operating Creating: creating Editing: editing Deleting: deleting Error: error occurred
     Delete Transit Gateway	Button to delete Transit Gateway resources

     Table. Transit Gateway status information and additional features

Detailed Information

Transit Gateway List page lets you view detailed information of the selected resource and edit it if needed.

Connected VPC Management

Transit Gateway List page allows you to view the VPCs attached to the selected resource, and add or delete them.

rule

On the Transit Gateway List page, you can view the rules linked to the selected resource and add or delete them.

Tag

On the Transit Gateway list page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

Transit Gateway List page allows you to view the operation history of the selected resource.

Manage Transit Gateway Integration Services

You can request, modify, and cancel the Uplink and Firewall connection services required to use the Transit Gateway service.

To apply for the Transit Gateway integration service, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Go to the VPC Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click Connected Services (IGW, BM VPC), Quick Access to Line Request/Modification/Cancellation. 4. Navigate to the service request page.
5. On the Service Request page, enter or select the required information in the mandatory input fields.

   Input field	Detailed description
   Title	Enter the title of the service request Example: TGW Uplink circuit request
   Region	Select the location of Samsung Cloud Platform Automatically filled with the region corresponding to the Account
   Service	Select service category and service Service Category: Networking Service: Transit Gateway
   Task classification	Select the type you want to request TGW Uplink line application/modification/termination: After selecting the work classification, enter detailed information in the service request classification item
   Content	Fill in the detailed items of the service request form Service request type: manually enter one of Apply / Modify / Terminate Account name/ID: Enter the account name and ID Transit Gateway name/ID: Enter the created Transit Gateway name and ID Applicant information: Enter applicant’s email, phone number, etc. Service request task type: select and enter either Uplink line connection or BM VPC Firewall connection Firewall usage: Enter whether the firewall is used
   Attachment	If you have additional files you want to share, proceed with the upload You can attach up to 5 files, each within 5 MB Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached

   Table. Linked Service Creation Request Items
6. On the service request page, click the Request button.
   • After the request is completed, check the submitted details on the Support Center > Service Request List page.
   • When the service request operation is completed, you can view the requested resources on the Transit Gateway Details page.

Managing VPC connections of Transit Gateway

You can add or remove VPCs in a Transit Gateway.

Add VPC connection

To add a VPC attachment to a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Manage Connected VPC tab. 4. Connected VPC Management tab page.
5. On the Connection VPC Management tab page, click the Add VPC Connection button. 5. The VPC connection addition window appears.
6. In the VPC addition window, select the VPC and click the Confirm button. 6. A notification confirmation window appears.
   • Click +New in the list to create and select a VPC.
7. Click the Confirm button in the alert dialog. 7. Check whether a resource item has been added in the VPC connection list.

Delete VPC connection

To delete a Transit Gateway’s VPC attachment, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Go to the Connected VPC Management tab page.
5. Connected VPC Management tab page, click the Delete button for the item you want to delete. 5. A notification confirmation window appears.
6. In the notification dialog, click the Confirm button. 6. Verify that the selected resource has been deleted from the VPC connection list.

Managing Transit Gateway Rules

You can add or delete rules in the Transit Gateway.

Add rule

To add a rule to the Transit Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Transit Gateway Details Navigate to the page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Go to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. 5. The rule addition window appears.
6. In the rule addition window, enter the origin and destination, and click the Confirm button. 6. A notification confirmation window appears.

   Category	Detailed description
   Rule type	Select type for adding Transit Gateway rule Select between VPC‑TGW rule and TGW‑Uplink rule
   Connected VPC name	Select the connected VPC when choosing a VPC‑TGW rule
   origin	When selecting a VPC‑TGW rule, the destination is automatically selected when configured.
   Destination	Select rule destination When selecting a VPC-TGW rule, set between VPC and TGW When selecting a TGW-Uplink rule, set between TGW and remote site Cannot register duplicate of existing rules; can input up to the x.x.x.x/28 range
   Destination IP range	Enter the destination IP range to use

   Table. Add rule input item
   Caution

   • VPC-TGW Rules When entering, please check the following items.
     • When the destination is a VPC.
       • You can enter within the VPC IP address range.
       • It should be entered the same as the subnet range.
       • The destination IP range 0.0.0.0/0 cannot be used.
     • When the destination is a Transit Gateway.
       • Some IP ranges cannot be used because they are reserved for management.
       • The VPC IP address range cannot be entered.
       • The destination IP range 0.0.0.0/0 can be entered only when the VPC’s Internet Gateway is not attached.
   • TGW-Uplink Rule When entering, check the following items.
     • When the destination is a Transit Gateway.
       • You can enter it within the IP address range of the VPC connected to the Transit Gateway.
       • The destination IP range 0.0.0.0/0 cannot be used.
     • When the destination is remote
       • The VPC IP address range connected to the Transit Gateway cannot be entered.
       • The destination IP range 0.0.0.0/0 can be entered only when the Transit Gateway does not have an Internet Gateway attached.
       • D and E class IP ranges cannot be entered.
7. Click the Confirm button in the notification dialog. 7. Verify that a resource entry has been added to the rule list.

Delete rule

To delete a Transit Gateway rule, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource to delete. 3. Transit Gateway Details Navigate to the page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Navigate to the Rules tab page.
5. Click the Delete button for the item to be deleted on the Rules tab page. 5. A notification confirmation window appears.
6. In the notification dialog, click the Confirm button. 6. Verify that the selected resource has been deleted from the rule list.

Firewall Connection Management

You can attach or detach a firewall for use with the Transit Gateway.

Connect to Firewall

Follow these steps to add a Firewall connection to the Transit Gateway.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to connect the Firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
5. Detailed Information tab page, click the Firewall Connection button. 5. Firewall connection confirmation window appears.
6. In the Firewall connection confirmation window, click the Confirm button. 6. Verify the connection status in the Firewall connection status item.

Add Firewall

After the Firwall connection is completed, you can add a Firewall.

Follow these steps to add a Firewall to the Transit Gateway.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to which you want to add a Firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Detailed Information tab. 4. Navigate to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Add button in the Firewall list. 5. Firewall addition window appears.
6. In the Firewall addition window, select the purpose and the connection center, then click the Confirm button. 6. Verify that a resource item has been added to the Firewall list.
   • Connection Center can be selected only when the selected firewall is Multi-AZ. * When you select the Active connection center, the Standby connection center is assigned automatically.

Delete Firewall

After the Firwall connection is completed, you can delete the Firewall.

To delete a firewall from a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the VPC Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to delete the Firewall. 3. Transit Gateway Details Navigate to the page.
4. On the Transit Gateway Details page, click the Details tab. 4. Navigate to the Detailed Information tab page.
5. Click the Delete button on the Detailed Information tab page of the Firewall list. 5. A notification confirmation window appears.
6. Click the Confirm button in the notification dialog. 6. Verify that the resource entry has been removed from the Firewall list.

Disconnect Firewall

You can disconnect unused Firewall connections.

To detach the Firewall from the Transit Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the Service Home page of the VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to detach the Firewall connection. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Navigate to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Disconnect Firewall button. 5. A notification confirmation window appears.
6. Click the Confirm button in the alert dialog. 6. Check the disconnected status in the Firewall connection status item.

Terminate Transit Gateway

You can terminate unused Transit Gateways to reduce operating costs.

To cancel the Transit Gateway, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Transit Gateway Delete button.
5. After termination is complete, check whether the resource has been deleted from the Transit Gateway list.

Preliminary Service

This service must be installed in advance before creating it. Please refer to the user guide provided in advance and prepare.

1.2.10 - PrivateLink Service

Users can create the PrivateLink Service by entering the required information through the Samsung Cloud Platform Console and selecting detailed options.

Create PrivateLink Service

You can create and use a PrivateLink Service in the Samsung Cloud Platform Console.

To create a PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create PrivateLink Service button. 2. Navigate to the Create PrivateLink Service page.
   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     PrivateLink Service name	Required	Enter PrivateLink Service name
     Approval method	Required	PrivateLink Service approval method selection input Automatic: Automatic approval when a PrivateLink Service connection request is received Manual: Manual approval after verification when a PrivateLink Service connection request is received The approval method cannot be changed after creation
     High-speed data transmission	Selection	The default setting is not used and does not appear in the Samsung Cloud Platform Console To use high-speed data transfer, submit a service usage request in Support Center > 문의하기, and once processing is complete, it can be selected on the screen
     VPC name	Required	Select VPC to connect + New click to create a VPC and then select it
     Subnet name	required	Select the Subnet of the VPC to connect Click + Create new to create a Subnet and then select it
     PrivateLink Service IP	Required	Select the Subnet to connect and enter the PrivateLink Service IP IP addresses already in use within the Subnet cannot be entered, and the first/last IP of the Subnet IP range cannot be used
     connection resource	Required	Select resources to connect to the selected VPC Load Balancer: Select the Load Balancer to connect (cannot select LB when using a Local subnet) IP: Enter the Compute resource IP of the selected VPC
     Security Group	Select	Select button to click and choose the Security Group to connect Up to 5 can be selected If no Security Group is selected, all connections are blocked
     Description	Select	Enter a description for the PrivateLink Service

     Table. PrivateLink Service service information input items
   • Additional Information Input area, please enter or select the required information.

     Category	required status	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource Add Tag button, then enter or select Key, Value values

     Table. PrivateLink Service additional information input fields
3. Summary Verify the detailed information and estimated charges generated in the panel, then click the Create button.
   • When creation is complete, check the created resource on the PrivateLink Service List page.

Check PrivateLink Service detailed information

The PrivateLink Service lets you view and modify the complete list of resources and detailed information. The PrivateLink Service Details page consists of the Details, Connection Management, Tags, Activity Log tabs.

To view detailed information about the PrivateLink Service, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the PrivateLink Service menu. 2. Go to the PrivateLink Service List page.
3. PrivateLink Service List on the page, click the resource to view detailed information. 3. Navigate to the PrivateLink Service Details page.
   • The PrivateLink Service Details page displays status information and additional feature information, and is composed of Details, Connection Management, Tags, Activity History tabs.

     Category	Detailed description
     status	PrivateLink Service 상태 Active: Running Creating: Creating Deleting: Deleting Error: Error occurred
     Delete PrivateLink Service	Button to delete PrivateLink Service resources

     Table. PrivateLink Service status information and additional features

Detailed Information

PrivateLink Service List page lets you view detailed information of the selected resource and edit the information if needed.

연결 관리 {#admin}

PrivateLink Service 목록 페이지에서 선택한 자원의 연결 정보를 확인할 수 있습니다. 연결 요청을 확인하고 승인하거나 거부할 수 있습니다.

태그 {#tag}

PrivateLink Service 목록 페이지에서 선택한 자원의 태그 정보를 확인하고, 추가하거나 변경 또는 삭제할 수 있습니다.

Job History

On the PrivateLink Service List page, you can view the operation history of the selected resource.

Terminate PrivateLink Service

You can cancel unused PrivateLink services to reduce operating costs.

To cancel the PrivateLink Service, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the PrivateLink Service menu. 2. PrivateLink Service List Navigate to the page.
3. On the PrivateLink Service List page, click the resource you want to delete. 3. Go to the PrivateLink Service Details page.
4. On the PrivateLink Service Details page, click the PrivateLink Service Delete button.
5. Once termination is complete, verify that the resource has been deleted from the PrivateLink Service list.

Preliminary Service

This service must be installed in advance before creating it. Please prepare by referring to the user guide provided in advance.

1.2.11 - PrivateLink Endpoint

Users can create the service by entering the required information for the PrivateLink Endpoint service and selecting detailed options through the Samsung Cloud Platform Console.

Creating a PrivateLink Endpoint

You can create and use a PrivateLink Endpoint service from the Samsung Cloud Platform Console.

To create a PrivateLink Endpoint, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create PrivateLink Endpoint button. 2. Navigate to the PrivateLink Endpoint creation page.
   • Enter or select the required information in the Service Information Input area.

     구분	필수 여부	상세 설명
     PrivateLink Endpoint명	Required	Enter the PrivateLink Endpoint name
     VPC name	Required	Select the VPC to connect + Create new click to create the VPC and then select it
     Subnet name	Required	Select the Subnet of the VPC to connect Click + New to create a Subnet, then you can select it
     PrivateLink Endpoint IP	required	Select the Subnet to connect and enter the PrivateLink Endpoint IP Subnet IP addresses already in use cannot be entered, and the first/last IP of the Subnet IP range cannot be used
     PrivateLink Endpoint ID	Required	Enter the PrivateLink Service ID to connect Enter using letters and numbers, within 3 to 60 characters Before requesting the service, you need to verify the Service ID of the PrivateLink Service to connect, and after creating the Endpoint, you must provide the Endpoint ID to the service provider
     Security Group	Select	Click the Select button to choose the Security Group to connect You can select up to 5 If you do not select a Security Group, all connections will be blocked
     Description	Selection	Enter a description for the PrivateLink Endpoint

     Table. PrivateLink Endpoint service information input fields
   • Additional Information Input area, please enter or select the required information.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, input or select Key, Value values

     Table. PrivateLink Endpoint additional information input fields
3. In the Summary panel, review the detailed information and estimated billing amount, then click the Create button.
   • Once creation is complete, verify the created resource on the PrivateLink Endpoint List page.

Check PrivateLink Endpoint detailed information

The PrivateLink Endpoint service allows you to view and edit the full list of resources and detailed information. PrivateLink Endpoint Details page consists of Details, Tags, Activity History tabs.

To view detailed information about the PrivateLink Endpoint, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Go to the Service Home page of VPC.
2. On the Service Home page, click the PrivateLink Endpoint menu. 2. Go to the PrivateLink Endpoint List page.
3. On the PrivateLink Endpoint List page, click the resource to view detailed information. 3. PrivateLink Endpoint Details Navigate to the page.
   • The PrivateLink Endpoint Details page displays status information and additional feature information, and is organized into Details, Connection Management, Tags, Activity History tabs.

     Category	Detailed description
     status	PrivateLink Endpoint status Requesting: Connection request pending approval, Cancel request button displayed Active: Creation complete, operating Creating: Creating Deleting: Deleting Disconnected: Connection blocked Rejected: Connection rejected, Re-request approval button displayed Error: Error occurred Canceled: Connection request canceled, Re-request approval button displayed
     Delete PrivateLink Endpoint	Button to delete the PrivateLink Endpoint resource

     Table. PrivateLink Endpoint status information and additional features

Detailed Information

On the PrivateLink Endpoint List page, you can view detailed information of the selected resource and, if necessary, edit the information.

Tag

On the PrivateLink Endpoint List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

On the PrivateLink Endpoint List page, you can view the operation history of the selected resource.

Terminate PrivateLink Endpoint

You can terminate unused PrivateLink Endpoints to reduce operational costs.

To cancel a PrivateLink Endpoint, follow these steps.

모든 서비스 > Networking > VPC 메뉴를 클릭하세요. VPC의 Service Home 페이지로 이동합니다. Service Home 페이지에서 PrivateLink Endpoint 메뉴를 클릭하세요. PrivateLink Endpoint 목록 페이지로 이동합니다. PrivateLink Endpoint 목록 페이지에서 삭제할 자원을 클릭하세요. PrivateLink Endpoint 상세 페이지로 이동합니다. PrivateLink Endpoint 상세 페이지에서 PrivateLink Endpoint 삭제 버튼을 클릭하세요. 해지가 완료되면, PrivateLink Endpoint 목록에서 자원이 삭제되었는지 확인하세요.

선행 서비스 {#service}

본 서비스를 생성하기 전에 미리 설치가 되어야 하는 서비스입니다. 사전에 안내된 사용자 가이드를 참고하여 준비해주세요.

1.2.12 - NAT Logging

To store NAT logs, first create a bucket in Object Storage for the logs, and then configure that bucket in the NAT Logging log repository. Then, when you enable log storage in the NAT detail view, NAT logs will start being saved to the Object Storage bucket.

To store NAT logs, you need to configure in the following order.

1. To store NAT logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Create Object Storage.
2. To set the bucket for the NAT Logging log repository, please refer to Using NAT Logging Log Repository.
3. To set the log storage option to Enabled in the NAT detail view, refer to Using NAT Log Storage.

Using NAT Logging Log Repository

To set NAT log storage to enabled, you must first configure the log repository in NAT Logging.

1. Click the All Services > Management > Network Logging > NAT Logging menu. 1. Navigate to the NAT Logging List page.
2. Click the Log Repository Settings button at the top of the NAT Logging List page. 2. Log Repository Settings Navigate to the popup window.
3. Log storage configuration In the popup window, select the log storage bucket. 3. When you select a bucket, the log storage path is displayed.
4. Log storage settings In the popup window, verify the log storage bucket and log storage path, then click the Confirm button.
5. Notification After checking the popup window’s message, click the Confirm button.

NAT Logging List

When you configure the NAT Logging log storage bucket, the NAT Logging list is displayed.

• All Services > Management > Network Logging > NAT Logging Click the menu. * Go to the NAT Logging List page.

  구분	필수	상세 설명
  자원 ID	필수	NAT 자원 ID
  저장 대상	필수	NAT 자원 이름
  Registration Date and Time	Required	NAT log repository registration date and time

  Table. NAT Logging list items

Check NAT Logging contents

Refer to the following information to review the saved log entries.

NAT Logging 로그 저장소 미사용하기 {#use-1}

NAT Logging에서 로그 저장소를 미사용으로 설정할 수 있습니다.

모든 서비스 > Management > Network Logging > NAT Logging 메뉴를 클릭하세요. NAT Logging 목록 페이지로 이동합니다. NAT Logging 목록 페이지에서 상단 로그 저장소 설정 버튼을 클릭하세요. 로그 저장소 설정 팝업창으로 이동합니다. 로그 저장소 설정 팝업창에서 로그 저장소 버킷을 미사용으로 선택하고, 확인 버튼을 클릭하세요.

1.3 - API Reference

1.4 - CLI Reference

1.5 - Release Note

VPC

2 - Security Group

2.1 - Overview

Service Overview

A Security Group is a virtual logical firewall that controls inbound/outbound traffic generated on virtual servers in Samsung Cloud Platform. The resources that can have a Security Group applied include Virtual Server, Database, Kubernetes Engine, etc. Security Groups are applied to the ports of target resources, and multiple Security Groups can be applied depending on each resource’s characteristics.

When a Security Group is first created, it blocks all inbound and outbound traffic according to the default rule (Any/Deny).

Users can specify an IP address, port, and protocol to create inbound/outbound rules, and only traffic allowed by the created rules can access the target resources.

Components

The components that make up a Security Group are as follows.

Constraints

Samsung Cloud Platform’s Security Group has a default quota (limit) set. There is a maximum number of Security Groups and Security Group rules that can be created. The Samsung Cloud Platform Console is a space where you can view and manage quotas for the Samsung Cloud Platform service and request quota increases for many resources.

Preceding service

Security Group has no prerequisite service.

2.2 - How-to guides

Users can create the service by entering the required information for the Security Group service and selecting detailed options through the Samsung Cloud Platform Console.

Create Security Group

You can create and use the Security Group service from the Samsung Cloud Platform Console.

To create a Security Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Create Security Group button. 2. Go to the Create Security Group page.
   • Enter the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Security Group name	Essential	Name of the Security Group to create English letters (both uppercase and lowercase), numbers, and special characters (-) can be used, and up to 255 characters can be entered Duplicate Security Group names are allowed within the project
     Log saving option	Selection	Select whether to save Security Group logs Enabled: Save logs Disabled: Do not save logs Click Security Group Logging List Shortcut to go to the Security Group Logging list page

     Table. Security Group service information input items

* **Additional Information Input** area, enter or select the required information.

3. Check the input information and click the Create button.
   • When creation is complete, verify the created resources on the Security Group list page.

Check Security Group detailed information

Security Group menu’s Security Group List page allows you to view and edit the full resource list and detailed information.

To view detailed information about the Security Group, follow the steps below.

1. All Services > Networking > Security Group menu, click it. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. On the Security Group list page, click the resource to view detailed information. 3. Navigate to the Security Group Details page.
   • The Security Group Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.

Detailed Information

View the detailed information of the resource selected from the Security Group list, and modify the information if needed.

rule

Security Group List page allows you to view the rule list of the selected resource and add or delete rules.

tag

Security Group List page allows you to view the tag information of the selected resource, and add, modify, or delete it.

Security Group List page allows you to view the operation history of the selected resource.

Security Group Resource Management

You can manage resources such as log storage settings and rule additions for a Security Group.

Using Log Storage

To store Security Group logs, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. On the Security Group list page, click the resource (Security Group name) to store logs. 3. Navigate to the Security Group Details page.
4. Click the log saving status edit icon. 4. Edit Log Save Setting Navigate to the popup window.
5. Modify Log Saving Option In the popup window, select Use for the log repository, and click the Confirm button.

Disable Log Saving

To stop saving Security Group logs, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. On the Security Group List page, click the resource (Security Group name) that will not have logs saved. 3. Security Group Details go to the page.
4. Click the Edit icon of Log Save Option. 4. Edit Log Save Setting Navigate to the popup window.
5. Modify Log Saving Option In the popup window, deselect Use for the log repository, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Add rule

To add a Security Group rule, follow the steps below.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. On the Security Group List page, click the resource (Security Group name) for which you want to add a rule. 3. Navigate to the Security Group Details page.
4. On the Security Group Details page, click the Rules tab. 4. Go to the Rules tab page.
5. Click the Add Rule button in the Rule tab. 5. Navigate to the Add Rule page.
6. Direct Input tab page, please enter the required information.
7. After reviewing the rules to add, click the Done button.
   Caution

   If you navigate to another page without clicking the Complete button after entering content on the Add Rule page, be aware that all entered items will be reset.

Create rules in bulk

To add multiple Security Group rules at once, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. Security Group list page, click the resource (Security Group name) for which you want to add a rule. 3. Go to the Security Group Details page.
4. On the Security Group Details page, click the Rules tab. 4. Go to the Rules tab page.
5. In the Rules tab, click the Add Rule button. 5. Add Rule page is accessed.
6. On the Add Rule page, click the Bulk Rule Input tab.
7. Click the Form Download button in File Selection. 8. The rule batch input Excel file will be downloaded.
8. Enter the rule information into the batch rule input Excel file, then save it.
9. From File Selection, click Attach File to attach the Excel file you created, and click Add.
   • You cannot upload the file if the attached Excel file format differs from the registration form or if the file is encrypted.
   • You can upload up to 100 batch registration rules at a time. * Upload is not possible when the maximum number of registered rules is exceeded.
   • If you exceed the maximum number of rules that can be registered per Account/Security Group, you cannot upload the file.
10. If the Excel file is added successfully, click the File Upload button.
    • If any uploaded rule contains invalid entries, a rule verification window will appear. * Click Confirm to apply all items except the invalid rules.

Delete rule

To delete a Security Group rule, follow the steps below.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Navigate to the Security Group list page.
3. On the Security Group List page, click the resource (Security Group name) to which you want to add a rule. 3. Security Group Details Navigate to the page.
4. On the Security Group Details page, click the Rules tab. 4. Go to the Rules tab page.
5. In the Rule tab, click the Delete button for the rule you want to delete.

Security Group Termination

You can delete unused Security Groups.

To cancel the Security Group, follow the steps below.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Security Group menu. 2. Go to the Security Group list page.
3. Security Group List page, select the resource (Security Group name) to terminate, and click the Terminate Service button.
4. After termination is complete, check the Security Group list page to see if the resource has been deleted.

2.2.1 - Security Group Logging

To store Security Group logs, first create a bucket in Object Storage for the logs, and then set that bucket as the log repository in Security Group Logging. Next, on the Security Group Details page, when you enable log storage, the Security Group logs are saved to an Object Storage bucket.

To store Security Group logs, follow the steps below.

1. To store Security Group logs, you can create a bucket in Object Storage or use an existing bucket. 1. To create a bucket, please refer to Object Storage 생성하기.
2. To set the bucket for the log storage of Security Group Logging, refer to Security Group Logging 로그 저장소 사용 설정하기.
3. In the Security Group detail view, to set the log storage option to Enabled, refer to Security Group 로그 저장 사용하기.

Security Group Logging Configure log storage usage

To set the log storage option of a Security Group to Enabled, you must first configure a log repository in Security Group Logging.

To enable the log repository for Security Group Logging, follow the steps below.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Go to the Security Group Logging List page.
2. Security Group Logging List Click the drop-down list located at the top of the page and select Log storage bucket. 2. When you select a bucket, log storage path is displayed.
3. After verifying the log storage bucket and log storage path, click the Apply button.

Retrieve Security Group Logging List

If you configure the log storage bucket for Security Group Logging, you can view the Security Group Logging list.

To view the Security Group Logging list, follow these steps.

1. All Services > Management > Network Logging > Security Group Logging Click the menu. 1. Go to the Security Group Logging List page.
2. Security Group Logging List On the page, check the resources in use and the log storage targets.

   Category	Detailed description
   Resource ID	Security Group ID
   Save target	Security Group name
   Save registration date and time	Security Group log storage registration timestamp

   Table. Security Group Logging list items
   Reference

   After setting the log repository for Security Group Logging, you must set the log storage option to Enabled in the Security Group detail view for logging to start. For more details, see Security Group 로그 저장 사용하기.

Check detailed information of Security Group Logging

Stored logs contain different detailed information for each protocol. Please refer to the content below for details.

TCP / UDP

ICMP

IP

Security Group Logging Configure to Not Use Log Storage

In Security Group Logging, you can set the log storage to not be used.

To disable the log repository for Security Group Logging, follow these steps.

1. Click the All Services > Management > Network Logging > Security Group Logging menu. 1. Security Group Logging List Navigate to the page.
2. On the Security Group Logging List page, click the Log Storage Settings icon at the top. 2. Log repository settings Navigate to the popup window.
3. Log storage settings in the popup window, select log storage bucket as Not used, and click the Confirm button.

2.2.2 - Address Group

The user can enter the required information for the Address Group service in the Samsung Cloud Platform Console, select detailed options, and create the service.

Add Address Group

You can create and use the Address Group service in the Samsung Cloud Platform Console.

To create an Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.

3. On the Address Group page, click the Add Address Group button. 3. Go to the Add Address Group page.

   • Enter the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Address Group name	Required	Name of the Address Group to create English letters, numbers, special characters (-_) can be used, and up to 100 characters can be entered The same Address Group name cannot be used within the Account

     Table. Address Group Service Information Input Items

   • Additional Information Input area, please enter or select the required information.

     Category	Required status	Detailed description
     tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, input or select Key, Value values
     Explanation	Selection	User additional description Up to 255 characters can be entered

     Table. Address Group additional information input fields

4. Check the input information and click the Done button.

   • After creation is complete, check the created resource on the Address Group List page.

Check detailed information of Address Group

Address Group menu’s Address Group List page allows you to view the full resource list and detailed information.

To view detailed information of the Address Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group list page, click the resource to view detailed information. 3. Go to the Address Group Details page.
   • Address Group Details page displays status information and additional feature information, and consists of Details, Target Addresses, Tags, Operation History tabs.

Detailed Information

Address Group list lets you view the detailed information of the selected resource and, if needed, modify the information.

Target address

Address Group List page lets you view the target address list of the selected resource and add or remove target addresses.

Tag

Address Group List page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the Address Group list page.

Address Group Managing Resources

You can add or remove target addresses in an Address Group.

Add Address Group

To add a target address to the Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group List page, click the resource to add the target address. 3. Navigate to the Address Group Details page.
4. On the Address Group Details page, click the Target Address tab. 4. Go to the Target Address tab page.
5. Click the Add Target Address button on the Target Address tab. 5. Add target address A popup window opens.
6. After entering the target address, click Confirm.
   • The target address can be entered up to 100 at a time in CIDR (IP address/subnet mask) format using ,and-.
     • In the destination address, you cannot use ‘0.0.0.0/0’, which specifies the entire IP range (ANY).

Delete Address Group

To delete the target address in an Address Group, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. Address Group list 페이지에서 대상 주소를 삭제할 자원을 클릭하세요. 3. Go to the Address Group Details page.
4. On the Address Group Details page, click the Target Address tab. 4. Go to the Target Address tab page.
5. In the Target address tab, select the rule to delete and click the Delete button.

Terminate Address Group

You can delete unused Address Groups.

To delete an Address Group, follow these steps.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.
2. On the Service Home page, click the Address Group menu. 2. Go to the Address Group page.
3. On the Address Group List page, select the resource for which you want to delete the service and click the Delete button.
4. When the termination is complete, check on the Address Group List page whether the resource has been deleted.

2.2.3 - Migration Rules

Users can retrieve rules created in the V1 environment of the Samsung Cloud Platform Console and apply them to the V2 service.

Security Group Rule Retrieval

You can import rules created in the V1 environment of the Samsung Cloud Platform Console and migrate them to the V2 service for use.

To retrieve the Security Group rules of V1, follow these steps.

1. All Services > Networking > Security Group Click the menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Select the rule information to retrieve from the Migration Rules page and click Complete.

   Category	Detailed description
   Original rule environment	SCP v1 (Vmware) Auto-select
   Applicable target	Select the Security Group list in the account to apply the transferred rule
   Retrieve rules	Click the Attach File button to upload the decrypted Security Group rule file After decrypting and saving the rule file extracted from the original environment, upload it
   List of rules	View uploaded Security Group rule file details Delete: Delete selected rule Edit: Modify selected rule information, see Modify the Security Group rules to be transferred for details

   Table: Migration Rules detailed items

4. After the Security Group rule transfer request is completed, verify that the transfer item has been added to the Security Group list.

Modify the Security Group rules to be transferred

You can edit each item when retrieving rules created in the V1 environment of the Samsung Cloud Platform Console.

Follow these steps to modify the Security Group rules to be imported from V1.

1. Click the All Services > Networking > Security Group menu. 1. Navigate to the Service Home page of the Security Group.

2. On the Service Home page, click the Migration Rules menu. 2. Go to the Migration Rules page.

3. Click Attach File in the Import Rules item to upload the Security Group rule file.

4. Click Edit on the rule item you want to modify in the rule list.

   Category	Required status	Detailed description
   Target Input Method	Required	Rule remote type setting CIDR: Set target address by directly entering IP Address Group: Set to target the created Address Group Security Group: Set to target the created Security Group, select when allowing access to all members within the chosen security group
   Target address	Required	If CIDR is selected, you need to enter the target IP address Enter in CIDR (IP address/subnet mask) format ,and-using you can input multiple addresses up to a maximum of 100 at once. To use the entire IP range (ANY), enter ‘0.0.0.0/0’
   Address Group name	Required	When Address Group is selected, Address Group selection is required.
   Security Group name	Required	If Security Group is selected, a Security Group selection is required
   type	Required	Select protocol type to apply the rule Destination Port/Type Selection: Select protocol type Internet Protocol: Enter protocol numbers, up to 100 entries All: Select destination port/Type and protocol for the entire range, meaning all ports for all protocols
   Type > Protocol	Required	Select detailed protocol for the type Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol When ICMP is selected in the protocol, you can set the ICMP Type Select a commonly used Type such as Echo from the values defined for ICMP Type Click the Add button to add an input value When TCP/UDP is selected in the protocol, you can choose allowed ports such as SSH, HTTP, etc. When entering manually, you can input values from 1 to 65535, and you can enter up to 100 entries at once using commas (,) or ranges (-) Click the Add button to add an input value When Internet Protocol is selected in the type Enter a protocol number within 1 to 254
   Direction	Required	Configure the traffic direction for the applicable target criteria Inbound rule: External → Server Outbound rule: Server → External
   Explanation	Selection	Additional description written by the user

   Table. Detailed items of the Security Group rule edit window

5. Click Confirm when the rule information edit is complete.

6. Verify the modified rule information and click Complete.

2.3 - API Reference

2.4 - CLI Reference

2.5 - Release Note

Security Group

3 - Load Balancer

3.1 - Overview

Service Overview

The Load Balancer (LB) service of Samsung Cloud Platform automatically distributes traffic to available servers when there is an unpredictable traffic surge or server failure, ensuring the stability and continuity of customer services.

A Load Balancer serves as the service endpoint provided to clients, is deployed in a VPC subnet according to the service type (L4 / L7), and you can configure multiple services by adding listeners to the created Load Balancer.

The Listener receives client requests through the service port and processes traffic according to routing rules. L4 supports TCP / UDP / TLS protocols, and L7 supports HTTP / HTTPS protocols; in L7, you can specify an LB server group for each routing condition or set a redirect response for the request URL.

The LB server group forwards requests received by the Listener to specific servers based on load balancing and health checks. The servers receive client requests from the Load Balancer’s Source NAT IP through the ports configured for the members, and the server status is periodically monitored by the Load Balancer’s health check IP.

LB health check defines the member health check method registered in the LB server group. You can select a default LB health check resource provided for the LB server group, or create a new one to configure monitoring suitable for the application.

Features

• Various load balancing methods: Round Robin, Least Connection, IP Hash, etc., are provided.
• SSL Authentication Encryption and Offloading: Supports SSL offloading and allows selection of encryption level.
• Enhanced Security: Use a firewall to manage Load Balancer communication and view connection logs by storing logs.

Service Architecture Diagram

Provided features

• Load Balancer: Select the service type and configure the IP to be used by the Load Balancer.
• Listener: Set the protocol, port, and routing rules. You can add multiple Listeners to a single Load Balancer.
• LB server group: Sets the load balancing method. LB server group can be attached to a single Load Balancer.
• Member: Select the server to add to the LB server group. You can choose Virtual Server or Bare Metal Server resources created in the same VPC as the Load Balancer, or enter an IP address directly.
• LB health check: Sets the member health check method. LB health checks can be registered and used across multiple LB server groups.

Component

A Load Balancer consists of a Load Balancer (Listener), LB server group (member), and LB health check.

Load Balancer

The components that make up a Load Balancer are as follows. By configuring each component, you can set up load balancing suitable for the customer’s workload.

LB server group

The elements that make up an LB server group are as follows. Traffic is delivered to members of the LB server group according to the settings of each component.

LB health check

The elements that make up the LB health check are as follows. Member health checks are performed according to the settings of each component.

Constraints

The Load Balancer of Samsung Cloud Platform has a default quota, which limits the number of Load Balancers, Listeners, LB server groups, and members that can be created. You can manage current usage through the Console and request additional quota for items that can be expanded.

Preliminary Service

This is a list of services that must be pre-configured before creating a Load Balancer service. Please refer to the guide provided for each service and prepare in advance.

3.1.1 - ServiceWatch metric

The Load Balancer sends metrics to ServiceWatch. The metrics provided by basic monitoring are data collected at 5‑minute intervals.

Basic Metrics

The following are the default metrics for the Load Balancer namespace.

The indicators whose names are displayed in bold text below are the key metrics selected from the basic metrics provided by Load Balancer. Key metrics are used to build the service dashboards that are automatically created for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical values are meaningful when querying that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using primary statistical values.

3.2 - How-to guides

Users can create a service by entering the required Load Balancer information and selecting detailed options through the Samsung Cloud Platform Console.

Create Load Balancer

You can create and use a Load Balancer service from the Samsung Cloud Platform Console.

To create a Load Balancer, follow these steps.

1. All Services > Networking > Load Balancer click the menu. 1. Go to the Load Balancer’s Service Home page.
2. Service Home on the page, click the Create Load Balancer button. 2. Go to the Load Balancer creation page.
3. On the Load Balancer creation page, enter the information required to create the service and select detailed options.
   • Enter or select the required information in the Service Information Input area.

• In the Additional Information Input area, enter or select the required information.

  Category	Required status	Detailed description
  Explanation	Select	Enter resource description
  tag	Select	Add tags Up to 50 tags can be added per resource

  Table. Load Balancer additional information input fields

4. Check the created service information and the estimated billing amount, and click the Create button.
   • Once creation is complete, check the created resources on the Load Balancer List page.
     Information

     • Load Balancer service does not provide access control for Service IP and service ports.
       
       • When creating a Load Balancer, select Use Firewall to manage communication between the client and the Load Balancer, and between the Load Balancer and members with firewall rules, and enable Save Firewall Logs to store access logs, which is recommended.
     • When creating a service and using the Firewall log storage feature, you must configure the log repository first. * If the log storage configuration is not completed, you cannot create a Load Balancer service.
     Caution

     If you use a firewall, you must add the rules required for Load Balancer communication. Register the rules, paying attention to the direction for each purpose.
     

     • If you do not add a rule, the Load Balancer service will not operate correctly.

     

     Purpose	Source IP	Destination IP	Protocol	Destination Port/Type	Direction
     Client → LB connection	Client IP	LB Service IP	Listener protocol	Listener service port	Outbound
     LB → Member connection	LB Source NAT IP	LB server group member IP	LB server group protocol	Member port	Inbound
     LB → Member health check	LB health check IP	LB server group member IP	Health check protocol	Health check port When the health check port and member port are different, register the member port	Inbound

     Figure and table. Add Load Balancer Firewall rule

Load Balancer View detailed information

The Load Balancer service can be viewed and edited for resource lists and detailed information in the Load Balancer menu. The Load Balancer Details page consists of the Details, Connected Resources, Tags, Operation History tabs.