VPC

• 1: Overview
• 1.1: ServiceWatch Metrics
• 2: How-to guides
• 2.1: Subnet
• 2.2: Port
• 2.3: Internet Gateway
• 2.4: NAT Gateway
• 2.5: Public IP
• 2.6: Private NAT
• 2.7: VPC Endpoint
• 2.8: VPC Peering
• 2.9: Transit Gateway
• 2.10: PrivateLink Service
• 2.11: PrivateLink Endpoint
• 2.12: NAT Logging
• 3: API Reference
• 4: CLI Reference
• 5: Release Note

1 - Overview

Service Overview

Samsung Cloud Platform provides VPC services to support the use of a logically isolated, customer-dedicated private network space in the cloud environment.
VPC (Virtual Private Cloud) is a service that provides a logically isolated, customer-dedicated private network space in a cloud environment. Depending on the use case, you can create a General Subnet and a Local Subnet for communication between servers, and freely select NAT Gateway and Internet Gateway to configure various networks. You can create multiple VPCs and operate them independently. VPC Peering enables connectivity configuration between VPCs.

Service Architecture Diagram

Component

Subnet

A Subnet refers to the IP address range of a VPC. Depending on the purpose, use a General Subnet to create Subnets for Public or Private use. It is a service that lets users segment the network within a VPC to match their purpose and scale. Subnet provides a regular Subnet and a Local Subnet for communication between servers.

• General Subnet Creation/Query/Deletion: When creating a VPC, a Subnet is created by default and can be used according to its purpose. For example, you can separate and use a Public Subnet that can access the Internet and a Private Subnet that cannot.

• VPC Endpoint Subnet Create/Read/Delete: Access to the Samsung Cloud Platform is possible via a private connection from an external network linked to the VPC, enabling entry into the VPC.

• Local Subnet Creation/Query/Deletion: It does not allow connections to other subnets or external access, and only permits direct connections between Virtual Server-Virtual Server or Bare Metal Server-Bare Metal Server, so it can be configured only for Virtual Server-Virtual Server communication within the VPC.

Subnet types

It denotes a Sub_network, an IP address space subdivided into smaller units for use in an IP network. Subnet types are divided based on how routing for the Subnet is configured.

Internet Gateway

Create an Internet Gateway to connect it to a VPC, view its details, or delete an unused Internet Gateway. You can use an Internet Gateway to connect VPC resources to the Internet.
You can assign a Public IP to instances and load balancers that are connected to the internet, allowing external access.

NAT Gateway

You can create a NAT Gateway, connect it to a subnet, view its details, or delete an unused NAT Gateway.
To create a NAT Gateway for a subnet, you must first create an Internet Gateway and attach it to the VPC. When you create a NAT Gateway, internet access is allowed for all resources in the subnet. To restrict internet access, apply firewall rules.
A NAT Gateway can be created for the General type, and it is a service that maps a single representative public IP to a Virtual Server without a public IP NAT for outbound internet usage.

Public IP

If you want to use the same IP address each time you stop and start an instance, reserve a Public IP and use it.
This is a service that creates a desired public IP within the available Public IP Pool of Samsung Cloud Platform and assigns it to compute resources for use.
Compute resources assigned with the designated public IP will not have their IP changed even after reboot.

Port

Provides a connection point to attach a single device, such as a server’s NIC, to the network. This enables adding additional NICs beyond the default provision.

VPC Endpoint

Provides an entry point for the VPC that enables access to the Samsung Cloud Platform via a private connection from an external network connected to the VPC.

VPC Peering

You can communicate via IP through a 1:1 private route between VPCs. By default, peering is provided between VPCs in the same account, and only one connection is allowed between different accounts.

Private NAT

From compute resources within the VPC, you can use Direct Connect to map the customer’s IP and establish a connection.

Transit Gateway

Transit Gateway is a gateway service that easily connects the customer’s network with the Samsung Cloud Platform network and serves as a connection hub for multiple VPCs within the cloud environment.
Through the Transit Gateway, you can configure a variety of network topologies that meet customer requirements. Additionally, it provides independent firewall configurations and routing capabilities for each connected network segment, enabling thorough security management.

PrivateLink

It is a service that connects internal Samsung Cloud Platform data to a private path between the VPC and the SCP service without exposing it to the internet.

• PrivateLink Service is for service providers, and PrivateLink Endpoint is for service users.

Constraints

Samsung Cloud Platform’s VPC limits the number of VPCs and subnets that can be created as follows.

Prior Service

VPC has no prerequisite services.

1.1 - ServiceWatch Metrics

VPC - Internet Gateway sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at 5‑minute intervals.

Basic Metrics

Internet Gateway

The following are the basic metrics for the Internet Gateway namespace.

The indicators whose names are shown in bold below are the indicators selected as major indicators among the basic indicators provided by Internet Gateway. Key metrics are used to configure service dashboards that are automatically built for each service in ServiceWatch.

Each metric provides guidance in the user guide on which statistical value is meaningful to query, and among the meaningful statistics, the values displayed in bold text are the primary statistics. In the service dashboard, primary metrics can be viewed using the primary statistical values.

2 - How-to guides

Users can create the service by entering the required information for the VPC service and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC

You can create and use a VPC service in the Samsung Cloud Platform Console.

To create a VPC, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create VPC button. You will be taken to the Create VPC page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Name of the VPC to create Enter using English letters and numbers, 3 to 20 characters
     IP range	Required	IP range to use in IP range format /16 ~ /28 enter within the range Example: 192.168.0.0/24
     Explanation	Select	Enter description for VPC

     Table. VPC Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. VPC additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • Once creation is complete, check the created resources on the VPC List page.

Check VPC detailed information

The VPC service allows you to view and edit the full list of resources and detailed information. The VPC Details page consists of the Details, IP Range Management, Tags, Activity Log tabs.

To view detailed VPC information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC menu. You will be taken to the VPC List page.
3. VPC List page, click the resource to view its details. You will be taken to the VPC Detail page.
   • VPC Details page displays status information and additional feature information, and consists of the Details, IP Range Management, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC status Active: operating normally Deleting: deletion in progress Creating: creation in progress Error: unable to determine current status If it persists, contact the registered administrator
     Service termination	Cancel service button If you cancel the service, the running service may be terminated immediately, so consider the impact of service interruption thoroughly before proceeding with the cancellation

     Table. VPC status information and additional features

Detailed Information

VPC List page lets you view detailed information of the selected resource and edit it if necessary.

IP range management

On the VPC List page, you can view and add the IP range information associated with the selected resource.

tag

On the VPC List page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the VPC List page.

Terminate VPC

You can terminate unused VPCs to reduce operating costs.

To terminate the VPC, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC menu. You will be taken to the VPC List page.
3. On the VPC List page, select the resource to terminate, and click the Terminate Service button.
4. After termination is complete, verify on the VPC List page that the resource has been terminated.

2.1 - Subnet

Create Subnet

You can create and use the VPC Subnet service in the Samsung Cloud Platform Console.

To create a Subnet, follow these steps.

1. All Services > Networking > VPC Click the menu. Go to the VPC’s Service Home page.

2. On the Service Home page, click the Create Subnet button. You will be taken to the Create Subnet page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     Subnet type	Required	Select Subnet type General: Can configure as Public or Private Local: Can be assigned by selecting either Virtual Server or Bare Metal Server A Local Subnet is a Subnet for communication only between servers and cannot communicate with the outside VPC Endpoint: VPC Endpoint can be configured
     VPC name	Required	Select the VPC to which the subnet will be attached from the list of existing VPCs Click + Create New to create a VPC and then select it
     VPC IP range	Select	Automatically input the CIDR range of the selected VPC
     Subnet name	Required	Subnet name to create Enter using English letters and numbers, within 3 to 20 characters
     IP range	Required	IP range to use in IP range format /16 ~ /28 Enter within the range Example: 192.168.0.0/24 IP ranges cannot overlap with IP ranges (other subnets) already in use within the VPC
     Gateway IP	Required	Display the Gateway IP address of the Subnet The first IP of the entered IP range is automatically filled in Cannot be modified after service creation

     Table. Subnet service information input fields
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     description	Selection	Enter description for Subnet
     IP allocation range	Selection	You can set the range within the IP range to be used Select either the entire IP range or an individual specification Subnet sub-resources receive IP assignments from the entered entire IP range or from the individually specified range set by the user When selecting individual specification, enter the starting IP address and the ending IP address
     DNS Name Server	Selection	After selecting Use, enter DNS Name Server IP.
     Host path	Select	Use after selection, enter the host path Enter the destination IP range and Next Hop IP address Destination IP ranges must not overlap each other
     tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Subnet additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • After creation is complete, check the created resources on the Subnet List page.

Check Subnet detailed information

The Subnet service allows you to view and edit the full resource list and detailed information. Subnet Details page consists of Details, Virtual IP Management, Tags, Activity Log tabs.

To view detailed Subnet information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the Subnet button on the Service Home page. You will be taken to the Subnet List page.
3. On the Subnet List page, click the resource for which you want to view detailed information. You will be taken to the Subnet Details page.
   • Subnet Details page displays status information and additional feature information, and consists of Details, Virtual IP Management, Tags, Operation History tabs.

     Category	Detailed description
     status	Subnet status Creating: Creation in progress Active: Operating normally Editing: Modification in progress Deleting: Deletion in progress Failed: State where creation failed Error: Current status unknown If it occurs continuously, contact the registered administrator
     Delete Subnet	Subnet Delete Button

     Table. Subnet status information and additional features

Detailed Information

On the Subnet List page, you can view the operation history of the selected resource.

Virtual IP Management

Subnet List page lets you view the virtual IP information of the selected resource, and you can reserve or delete it.

tag

On the Subnet List page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

On the Sunnet List page, you can view the operation history of the selected resource.

Managing Virtual IP

You can reserve or manage Virtual IPs for use in a Subnet.

Reserve Virtual IP

You can reserve a Virtual IP for use in the Subnet.

To reserve a Virtual IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the Subnet button on the Service Home page. You will be taken to the Subnet List page.
3. On the Subnet list page, click the resource to reserve a Virtual IP. You will be taken to the Subnet details page.
4. On the Subnet Details page, click the Virtual IP Management tab. You will be taken to the Virtual IP Management tab page.
5. On the Virtual IP Management tab page, click the Virtual IP Reservation button. The Virtual IP reservation window opens.
6. In the Virtual IP Reservation window, set the detailed items and click OK.
   • Virtual IP: If you select Auto-Generated, an automatically generated IP will be reserved, and if you select Input, you can reserve an IP that you manually entered.
   • Description: Enter additional description for Virtual IP.
7. When the reservation confirmation window appears, click Confirm.

Check Virtual IP detailed information

You can view detailed information about the Virtual IP.

To view detailed information about the Virtual IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet button. You will be taken to the Subnet List page.
3. Subnet list page, click the resource to reserve a Virtual IP. Subnet details page will be displayed.
4. On the Subnet Details page, click the Virtual IP Management tab. You will be taken to the Virtual IP Management tab page.
5. Click the resource to view on the Virtual IP Management tab page. You will be taken to the Virtual IP Details page.
   • *Virtual IP Details The page displays the connected ports and detailed information.

     Category	Detailed description
     Virtual IP	Virtual IP address
     Public NAT IP	Public NAT IP address and status Edit icon can be clicked to edit Enable after setting, you can select an existing IP or create one to add Public NAT IP cannot be modified after configuration; changes require reconfiguration
     Connection Port	Port information connected to the Virtual IP Add button to click to add a connected port, you can add by connecting an existing port or creating a new one Delete button to click to remove the connected port
     Explanation	Virtual IP description Click the Edit icon to modify
     constructor	User who reserved a Virtual IP
     Creation date	Virtual IP reservation date and time
     Editor	User who modified the Virtual IP information
     Modification date	Date and time the Virtual IP information was modified

     Table. Virtual IP detailed information items

Terminate Subnet

You can delete an unused Subnet.

To delete a Subnet, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. You will be taken to the Subnet List page.
3. On the Subnet List page, click the resource to delete. Navigate to the Subnet Details page.
4. On the Subnet Details page, click the Delete button.
5. After deletion is complete, check the Subnet list to confirm that the resource has been removed.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

2.2 - Port

Create Port

You can create and use a Port service in the Samsung Cloud Platform Console.

To create a port, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC Service Home page.

2. On the Service Home page, click the Create Port button. You will be taken to the Create Port page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC to create the Port Click + Create New to create the VPC and then select it
     Subnet name	Required	Select the Subnet to create the Port Click + Create New to create a Subnet and then select it
     Port name	Required	Port name that is easy to identify Enter using English letters, numbers, - within 3 to 20 characters
     IP allocation method	Required	Select IP allocation method Automatic allocation: IP is automatically assigned within the IP allocation range of the Subnet Manual entry: The entered IP is assigned within the Subnet’s range When Manual entry is selected, enter the IP address to use for the Port in Fixed IP address
     Explanation	Selection	Enter description for Port
     Security Group	Select	When Use is selected, you can select up to 5 Security Groups.

     Table. Port service information input fields
   • Enter or select the required information in the Additional Information Input area.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. Port additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • After creation is complete, check the created resources on the Port List page.

Check detailed information of Port

The Port service allows you to view and edit the full resource list and detailed information. Port Details page consists of Details, Tags, Activity Log tabs.

To view detailed port information, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. You will be taken to the Port List page.
3. Port List page, click the resource (Port name) to view detailed information. You will be taken to the Port Details page.
   • Port Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

     Category	Detailed description
     status	Port status Active: Operating normally Down: Not connected to the resource, or connected but not functioning Error: Current status cannot be determined If it occurs continuously, contact the registered administrator
     Delete Port	Button to delete the port

     Table. Port status information and additional functions

Detailed Information

On the Port list page, you can view detailed information of the selected resource and edit the information if needed.

tag

Port list page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Port list page, you can view the operation history of the selected resource.

Delete Port

You can release unused ports to reduce operating costs.

To delete a Port, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Port menu. You will be taken to the Port List page.
3. On the Port List page, click the resource (Port name) you want to delete. You will be taken to the Port Detail page.
4. On the Port Details page, click the Delete Port button.
5. After the deletion is complete, check whether the resource has been removed from the Port list.

Preliminary Service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

2.3 - Internet Gateway

Create Internet Gateway

You can create and use the Internet Gateway service in the Samsung Cloud Platform Console.

To create an Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway Creation button. You will be taken to the Internet Gateway Creation page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC that connects to the Internet Gateway Click + New to create a VPC and then select it
     Category	Required	Select Internet Gateway type Choose from Dedicated Internet Gateway, Secured Internet Gateway, Group Gateway
     Internet Gateway name	Selection	Automatically create IGW_{VPC name}
     Explanation	Select	Enter a description of the Internet Gateway
     Use firewall	Select	Select whether to use the firewall
     Whether to save firewall logs	Select	Select whether to save Firewall logs When using the Firewall, save connection logs For more details, see Using Firewall Log Saving

     Table. Internet Gateway Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values

     Table. Internet Gateway additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • Once creation is complete, check the created resource on the Internet Gateway List page.

Internet Gateway Check detailed information

The Internet Gateway service allows you to view and edit the full resource list and detailed information. Internet Gateway Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. On the Service Home page, click the Internet Gateway menu. Navigate to the Internet Gateway list page.
3. On the Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
   • Internet Gateway Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	Internet Gateway status Creating: Creating resource Ative: Normal connection status Deleting: Deletion in progress Error: Unable to determine current status If it persists, contact the registered administrator
     Delete Internet Gateway	Internet Gateway Delete Button

     Table. Internet Gateway status information and additional features

Detailed Information

On the Internet Gateway List page, you can view detailed information of the selected resource and edit the information if needed.

tag

Internet Gateway list page lets you view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Internet Gateway List page, you can view the operation history of the selected resource.

Managing Internet Gateway Resources

You can manage resources, such as enabling Internet Gateway log storage.

Using NAT Log Storage

To use NAT log storage, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. Navigate to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
4. Click the Modify NAT log storage setting button. You will be taken to the Modify NAT log storage setting popup.
5. Modify NAT Log Storage Setting In the popup window, select Use for the log repository, and click the Confirm button.

Do not use NAT log storage

To use NAT log storage, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. Internet Gateway List page, click the resource to view detailed information. You will be taken to the Internet Gateway Details page.
4. Click the Modify NAT log storage setting button. You will be taken to the Modify NAT log storage setting popup.
5. Modify NAT log storage setting In the popup window, deselect Use for the log storage, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Delete Internet Gateway

To delete an Internet Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. On the Internet Gateway List page, click the resource you want to delete. Navigate to the Internet Gateway Details page.
4. On the Internet Gateway Details page, click the Delete button.
5. After the deletion is complete, verify that the resource has been removed from the Internet Gateway list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

2.4 - NAT Gateway

Creating NAT Gateway

You can create and use the NAT Gateway service in the Samsung Cloud Platform Console.

To create a NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create NAT Gateway button. You will be taken to the Create NAT Gateway page.
   • In the Service Information Input area, enter or select the required information.

     Category	Required	Detailed description
     VPC name	Required	Select the VPC to connect + Create new to create a VPC and then select it
     Subnet name	Required	Select the connected Subnet Click + Create New to create a Subnet and then select it
     NAT Gateway name	Select	Create NAT_GW_{subnet name}
     IP for NAT Gateway	Required	Select a Public IP for NAT Gateway + New Click to create an IP and then select it
     description	Select	Enter a description for the NAT Gateway

     Table. NAT Gateway Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Whether required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. NAT Gateway additional information input fields
3. In the Summary panel, review the detailed information and estimated billing amount, then click the Create button.
   • When creation is complete, verify the created resource on the NAT Gateway list page.

Check NAT Gateway detailed information

The NAT Gateway service allows you to view and edit the full resource list and detailed information. NAT Gateway Details page consists of Details, Tags, Activity Log tabs.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the NAT Gateway menu. You will be taken to the NAT Gateway List page.
3. On the NAT Gateway List page, click the resource whose details you want to view. You will be taken to the NAT Gateway Details page.
   • NAT Gateway Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	NAT Gateway status Creating: Creation in progress Active: Operating normally Deleting: Deletion in progress
     Delete NAT Gateway	Button to terminate the service Terminate the NAT Gateway when there are no connected services Since terminating the service may cause the running service to stop immediately, proceed with the termination only after fully considering the impact of service interruption

     Table. NAT Gateway status information and additional features

Detailed Information

NAT Gateway List page lets you view detailed information of the selected resource and modify it if necessary.

tag

NAT Gateway List page lets you view, add, modify, or delete the tag information of the selected resource.

Job History

You can view the operation history of the selected resource on the NAT Gateway List page.

Delete NAT Gateway

To delete a NAT Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the NAT Gateway menu. Navigate to the NAT Gateway List page.
3. Click the resource to view detailed information on the NAT Gateway List page. You will be taken to the NAT Gateway Details page.
4. On the NAT Gateway Details page, click the Delete button.
5. After deletion is complete, verify that the resource has been removed from the NAT Gateway list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

2.5 - Public IP

Create Public IP

You can create and use a Public IP service in the Samsung Cloud Platform Console.

To create a Public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Public IP reservation button. You will be taken to the Public IP reservation page.

   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Category	Required	Select the gateway to reserve the Public IP Default: Internet Gateway
     description	Select	Enter description for Public IP

     Table. Public IP Service Information Input Items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. Public IP additional information input fields

3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • Once creation is complete, check the created resources on the Public IP List page.

View detailed information of Public IP

The Public IP service allows you to view and edit the full resource list and detailed information. Public IP Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP menu. You will be taken to the Public IP List page.
3. On the Public IP List page, click the resource to view detailed information. You will be taken to the Public IP Detail page.
   • Public IP Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

     Category	Detailed description
     status	Public IP status Attached: attached state Reserved: reserved state Error: cannot determine current state If it occurs continuously, contact the registered administrator
     Return Public IP	Public IP Return Button

     Table. Public IP status information and additional features

Detailed Information

Public IP List page lets you view detailed information of the selected resource and edit the information if needed.

tag

On the Public IP List page, you can view the tag information of the selected resource and add, modify, or delete it.

Job History

On the Public IP List page, you can view the operation history of the selected resource.

Return Public IP

To delete a Public IP, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the Public IP button. You will be taken to the Public IP List page.
3. On the Public IP List page, click the resource to view detailed information. You will be taken to the Public IP Details page.
4. On the Public IP Details page, click the Public IP Release button.
5. After the return is completed, check whether the resource has been deleted from the Public IP list.

Pre-service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

2.6 - Private NAT

Users can create the Private NAT service by entering the required information and selecting detailed options through the Samsung Cloud Platform Console.

Creating Private NAT

You can create a Private NAT service in the Samsung Cloud Platform Console and use it.

To create a Private NAT, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.

2. On the Service Home page, click the Create Private NAT button. 2. Navigate to the Create Private NAT page.

   • In the Service Information Input area, enter or select the required information.

     Category	required status	Detailed description
     Private NAT name	Required	Enter the Private NAT name Enter using letters and numbers, 3 to 20 characters
     Connection resource type	Required	Select the connection resource to connect the Private NAT You can choose between Direct Connect and Transit Gateway Transit Gateway can be selected after connecting the uplink line
     Connection resource name	Essential	Display entries of the selected connection resource Click + New Creation in the list to create a connection resource
     NAT IP range	Essential	Enter the NAT IP range to use Enter in CIDR format, e.g., 192.168.2.0/23 Cannot overlap with the connected VPC IP or other Private NAT IP ranges
     Explanation	Selection	Enter description for Private NAT

     Table. Private NAT Service Information Input Items
     Reference

     • It must not overlap with the IP range of the VPC connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with other Private NAT ranges that are connected to the selected Direct Connect or Transit Gateway.
     • It must not overlap with the IP range of the on‑premise network connected to the selected Direct Connect or Transit Gateway.
     • Some IP ranges are reserved for management and cannot be used.

   • Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Private NAT additional information input fields

3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

   • When creation is complete, verify the created resources on the Private NAT List page.

Check Private NAT detailed information

The Private NAT service allows you to view and edit the complete resource list and detailed information. On the Private NAT Details page, it consists of Detail Information, IP Management, Tags, Operation History tabs.

To view detailed information about Private NAT, follow these steps.

1. All Services > Networking > VPC menu, click it. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. Private NAT List page, click the resource to view detailed information. 3. Navigate to the Private NAT Details page.
   • Private NAT Details page displays status information and additional feature information, and consists of Details, IP Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	Private NAT status Active: Running Creating: In progress Deleting: In progress Error: An error occurred
     Delete Private NAT	Button to delete Private NAT

     Table. Private NAT status information and additional features

Detailed Information

Private NAT List page allows you to view detailed information of the selected resource and edit the information if necessary.

IP Management

Private NAT List page allows you to view the Private NAT IP, and you can reserve or release it.

Tag

On the Private NAT List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the Private NAT List page, you can view the operation history of the selected resource.

Managing Private NAT IP

You can reserve or release a Private NAT IP.

Reserve Private NAT IP

To reserve a Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Private NAT List Go to the page.
3. Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. Click the IP Management tab page’s Private NAT IP Reservation button. 5. The Private NAT IP reservation window appears.
6. Enter the Private NAT IP to be used in the Private NAT IP reservation window and click the Confirm button. 6. A notification confirmation dialog appears.
7. In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added to the IP list.

Return Private NAT IP

To return the Private NAT IP, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Navigate to the Private NAT List page.
3. On the Private NAT List page, click the resource to reserve an IP. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the IP Management tab. 4. Navigate to the IP Management tab page.
5. On the IP Management tab page, click the Return button for the IP item you want to return. 5. A notification confirmation dialog appears.
6. Verify that the selected resource has been deleted from the IP list.

Delete Private NAT

You can cancel unused Private NAT to reduce operating costs.

To cancel Private NAT, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Private NAT menu. 2. Go to the Private NAT List page.
3. On the Private NAT List page, click the resource to delete. 3. Go to the Private NAT Details page.
4. On the Private NAT Details page, click the Delete Private NAT button.
5. After termination is complete, check whether the resource has been deleted from the Private NAT list.

Preliminary service

This service must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.

2.7 - VPC Endpoint

Create VPC Endpoint

You can create and use a VPC Endpoint service in the Samsung Cloud Platform Console.

To create a VPC Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.

2. On the Service Home page, click the Create VPC Endpoint button. You will be taken to the Create VPC Endpoint page.

   • In the Service Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     VPC name	Required	Select the VPC to create the Endpoint Click + Create new to create a VPC and then select it
     Usage > Target Service	Required	Select the target service for which to create the VPC Endpoint
     Purpose > Connected Resources	Required	Select the resource to create a VPC Endpoint
     VPC Endpoint name	Required	Enter the VPC Endpoint name Enter using letters and numbers, 3 ~ 20 characters
     VPC Endpoint IP > Subnet name	Required	Select VPC Endpoint Subnet + Create New Click to create a Subnet and then select it
     VPC Endpoint IP > IP	Required	Enter the IP to be used for the VPC Endpoint Example: 192.168.x.x
     description	Select	Enter a description for the VPC Endpoint

     Table. VPC Endpoint Service Information Input Items
   • Enter or select the required information in the Additional Information Input area.

     Category	Whether required	Detailed description
     tag	Select	Add Tag Up to 50 can be added per resource Add Tag button after clicking, input or select Key, Value values

     Table. VPC Endpoint additional information input fields
     Reference

     After registering the VPC Endpoint, you need to configure the Direct Connect firewall to integrate internal services of the Samsung Cloud Platform. Refer to the port information for each service and register the firewall rules.

     Service	Port information
     DNS	TCP 53, UDP 53
     Object Storage	TCP 8080, 8443, 80, 443, 4430
     File Storage	(NFS) TCP/UDP common 111, 300, 302, 304, 2049, 635, 4045, 4046, 4049 (CIFS) UDP 135, 137, 138, 389 / TCP 135, 139, 445, 40001
     Container Registry (authentication server, Registry)	TCP 443

     Table: Allowed ports per target service

3. Summary Verify the detailed information and estimated billing amount generated in the panel, then click the Create button.

   • When creation is complete, check the created resources on the VPC Endpoint List page.

Check VPC Endpoint details

The VPC Endpoint service allows you to view and edit the full list of resources and detailed information. VPC Endpoint Details page consists of Details, Tags, Activity Log tabs.

Endpoint To view detailed information, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. Click the VPC Endpoint menu on the Service Home page. You will be taken to the VPC Endpoint List page.
3. On the VPC Endpoint List page, click the resource for which you want to view detailed information. You will be taken to the VPC Endpoint Details page.
   • VPC Endpoint Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Endpoint status Active: operating normally Creating: creation in progress Deleting: deleting resource connection Deleted: resource connection deleted
     Delete VPC Endpoint	Button to delete the VPC Endpoint connection resource

     Table. VPC Endpoint status information and additional features

Detailed Information

VPC Endpoint List page lets you view detailed information of the selected resource and edit the information if needed.

tag

On the VPC Endpoint List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

VPC Endpoint List page allows you to view the operation history of the selected resource.

Delete VPC Endpoint

You can cancel unused Endpoints to reduce operating costs.

To terminate a VPC Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Endpoint menu on the Service Home page. You will be taken to the VPC Endpoint List page.
3. On the VPC Endpoint List page, click the resource you want to delete. You will be taken to the VPC Endpoint Details page.
4. On the VPC Endpoint Details page, click the Delete Endpoint button.
5. When the termination is complete, check whether the resource has been deleted from the VPC Endpoint list.

Pre-service

This is a list of services that must be pre-configured before creating the service. Please refer to the guide provided for each service for details and prepare in advance.

2.8 - VPC Peering

Users can create the service by entering the required information for the VPC Peering service and selecting detailed options through the Samsung Cloud Platform Console.

Create VPC Peering

You can create and use the VPC Peering service in the Samsung Cloud Platform Console.

To create a VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create VPC Peering button. You will be taken to the Create VPC Peering page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPC Peering name	Required	Enter VPC Peering name Enter using letters and numbers, 3~20 characters
     Requested VPC name	Required	Select the VPC to request VPC Peering Click + New in the list to create a VPC
     Approved Account	Required	Select the account of the VPC to approve VPC peering, then select that VPC or enter its information Same account: select the approved VPC name Click + New creation in the list to create a VPC Different account: enter the approved Account ID and approved VPC ID
     description	Select	Enter a description of VPC Peering

     Table. VPC Peering service information input items
   • In the Additional Information Input area, enter or select the required information.

     Category	Whether required	Detailed description
     Tag	Select	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key and Value values

     Table. VPC Peering additional information input fields
3. Check the detailed information and estimated billing amount generated in the Summary panel, and click the Create button.
   • When connecting a VPC from another Account, the peering proceeds after an approval process, so the connection may take some time.
   • When creation is complete, check the created resource on the VPC Peering List page.

Check VPC Peering details

The VPC Peering service allows you to view and edit the full list of resources and detailed information. VPC Peering Details page consists of Details, Rules, Tags, Activity Log tabs.

To view detailed VPC Peering information, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. VPC Peering List Click the resource to view detailed information on the page. You will be taken to the VPC Peering Details page.
   • VPC Peering Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.

     Category	Detailed description
     status	VPC Peering status Active: operational Requesting: connection or deletion request in progress Creating: connecting Creating Requesting: connection request in progress Deleting Requesting: deletion request in progress Editing: editing Rejected: rejected Canceled: canceled Error: error occurred If it persists, contact the registered administrator
     VPC Peering deletion/VPC Peering deletion request	Button to request deletion of VPC Peering resources Cancel Connection Request: Can cancel if a VPC Peering connection was requested Approve Connection: Can approve when a VPC Peering connection request is received Reject Connection: Click to reject the connection Cancel Deletion Request: Can cancel if a VPC Peering deletion was requested Approve Deletion: Can approve when a VPC Peering deletion request is received Reject Deletion: Click to reject the deletion Reapproval Request: Request reapproval when VPC approval was denied

     Table. VPC Peering status information and additional features

Detailed Information

VPC Peering List page lets you view detailed information of the selected resource and edit it if needed.

rule

VPC Peering List page lets you view the rules associated with the selected resource, and add or remove them.

tag

VPC Peering List page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

You can view the operation history of the selected resource on the VPC Peering List page.

Managing VPC Peering Rules

You can add or delete rules for VPC Peering.

Add Rule

To add a rule to VPC Peering, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. The Add Rule dialog appears.
6. Enter the origin and destination in the rule addition window and click the Confirm button. A notification confirmation window will appear.
   • It must not duplicate an already entered rule.
   • You can enter within the IP address range of the destination VPC.
   • It should be entered the same as the subnet range.
   • The destination IP range 0.0.0.0/0 cannot be used.
7. Click the Confirm button in the notification dialog. Verify that the resource entry has been added to the rule list.

Delete Rule

To delete a VPC Peering rule, follow these steps.

1. Click the All Services > Networking > VPC menu. Go to the VPC’s Service Home page.
2. On the Service Home page, click the VPC Peering menu. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. Navigate to the VPC Peering Details page.
4. VPC Peering Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Rule tab page, click the Delete button of the item to delete. A notification confirmation dialog appears.
6. Click the Confirm button in the alert dialog. Verify that the selected resource in the rule list has been deleted.

Terminate VPC Peering

You can terminate unused VPC Peering to reduce operating costs.

Terminate VPC Peering of the same Account

To terminate a VPC peering within the same account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource to delete. Navigate to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete button.
5. After termination is complete, verify that the resource has been deleted from the VPC Peering list.

Terminate VPC Peering connected to another account

To terminate a VPC peering connected to another account, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the VPC Peering menu on the Service Home page. You will be taken to the VPC Peering List page.
3. On the VPC Peering List page, click the resource you want to delete. You will be taken to the VPC Peering Details page.
4. On the VPC Peering Details page, click the VPC Peering Delete Request button.
5. Once the cancellation is complete, verify that the resource has been removed from the VPC Peering list.
   • The deletion request must be approved by the counterpart account for the termination to be processed correctly.

Pre-service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

2.9 - Transit Gateway

Users can create the service by entering the required information for the Transit Gateway service and selecting detailed options through the Samsung Cloud Platform Console.

Create Transit Gateway

You can create and use the Transit Gateway service in the Samsung Cloud Platform Console.

To create a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create Transit Gateway button. 2. Go to the Transit Gateway creation page.
   • In the Service Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     Transit Gateway name	Required	Enter the Transit Gateway name Enter using letters and numbers, 3 to 20 characters
     Explanation	Selection	Enter description for Transit Gateway

     Table: Transit Gateway service information input fields
   • Additional Information Input area, please enter or select the required information.

     Category	required status	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key, Value values

     Table. Transit Gateway additional information input fields
3. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
   • Once creation is complete, check the created resources on the Transit Gateway List page.

Check Transit Gateway Details

The Transit Gateway service lets you view and modify the complete resource list and detailed information. In the Transit Gateway Details page, it is composed of Details, Connected VPC Management, Rules, Tags, Activity History tabs.

To view the detailed information of the Transit Gateway, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to view its detailed information. 3. Go to the Transit Gateway Details page.
   • Transit Gateway Details page displays status information and additional feature information, and consists of the Details, Connected VPC Management, Rules, Tags, Activity History tabs.

     Category	Detailed description
     status	Transit Gateway status Active: Running Creating: In progress Editing: In progress Deleting: In progress Error: An error occurred
     Delete Transit Gateway	Button to delete Transit Gateway resources

     Table. Transit Gateway status information and additional features

Detailed Information

On the Transit Gateway list page, you can view detailed information of the selected resource and, if necessary, edit the information.

Connected VPC Management

Transit Gateway list page allows you to view the VPCs connected to the selected resource, and to add or delete them.

Rule

On the Transit Gateway list page, you can view the rules attached to the selected resource, and add or delete them.

Tag

On the Transit Gateway list page, you can view the tag information of the selected resource, and add, modify, or delete it.

Job History

Transit Gateway list page allows you to view the operation history of the selected resource.

Manage Transit Gateway integration services

You can request, modify, and cancel the Uplink and Firewall connection services required to use the Transit Gateway service.

To request the Transit Gateway integration service, follow the steps below.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click Linked Services (IGW, BM VPC), Quick Access to Line Request/Modification/Termination. 4. Navigate to the service request page.
5. On the Service Request page, enter or select the required information in the mandatory input fields.

   Input field	Detailed description
   Title	Enter the title of the service request Example: TGW Uplink circuit request
   Region	Select the location of Samsung Cloud Platform Automatically filled with the region corresponding to the Account
   service	Select service category and service Service Category: Networking Service: Transit Gateway
   Task classification	Select the type you want to request TGW Uplink line request/modification/termination: After selecting the work type, enter detailed information in the service request category field
   content	Fill in the detailed items of the service request form Service request type: manually enter one of Apply / Modify / Terminate Account name/ID: Enter the account name and ID Transit Gateway name/ID: Enter the created Transit Gateway name and ID Applicant information: Enter applicant’s email, phone number, etc. Service request task type: Choose and enter either Uplink line connection or BM VPC Firewall connection Firewall usage: Enter whether the firewall is used
   Attachment	If you have additional files you want to share, proceed with the upload Attached files can be up to 5 files, each within 5 MB Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached

   Table. Linked Service Creation Request Items
6. On the service request page, click the Request button.
   • After the request is completed, check the submitted details on the Support Center > Service Request List page.
   • When the service request operation is completed, you can view the requested resources on the Transit Gateway Details page.

Managing VPC connections of the Transit Gateway

You can add or remove VPCs on a Transit Gateway.

Add VPC connection

To add a VPC attachment to a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource you want to delete. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
5. On the Connected VPC Management tab page, click the Add VPC Connection button. 5. The VPC connection addition window appears.
6. In the Add VPC Connection window, select the VPC and click the Confirm button. 6. A notification confirmation window appears.
   • Click +New in the list to create a VPC and select it.
7. In the alert confirmation dialog, click the Confirm button. 7. Check whether a resource entry has been added in the VPC connection list.

Delete VPC connection

To delete a Transit Gateway’s VPC attachment, follow these steps.

1. Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
5. On the Connected VPC Management tab page, click the Delete button for the item you want to delete. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Verify whether the selected resource has been deleted from the VPC connection list.

Managing Transit Gateway rules

You can add or delete rules in the Transit Gateway.

Add rule

To add a rule to the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource you want to delete. 3. Transit Gateway Details Navigate to the page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Go to the Rules tab page.
5. On the Rule tab page, click the Add Rule button. 5. The rule addition window appears.
6. In the rule addition window, enter the origin and destination, and click the Confirm button. 6. A notification confirmation dialog appears.

   Category	Detailed description
   Rule type	Select type for adding Transit Gateway rule Select from VPC-TGW rule, TGW-Uplink rule
   Connected VPC name	Select the connected VPC when choosing a VPC‑TGW rule
   origin	When selecting a VPC‑TGW rule, the destination is automatically selected when configured.
   Destination	Select rule destination When selecting a VPC‑TGW rule, set to either VPC or TGW When selecting a TGW‑Uplink rule, set to either TGW or remote Cannot register if it duplicates an existing rule; can input up to the x.x.x.x/28 range
   Destination IP range	Enter the destination IP range to use

   Table. Rule addition input items
   Caution

   • VPC-TGW rule When entering, check the following items.
     • When the destination is a VPC.
       • It can be entered within the VPC IP range.
       • It should be entered the same as the subnet range.
       • 0.0.0.0/0 cannot be used as the destination IP range.
     • When the destination is a Transit Gateway.
       • Some IP ranges are reserved for management and cannot be used.
       • The VPC IP address range cannot be entered.
       • The destination IP range 0.0.0.0/0 can be entered only when the VPC’s Internet Gateway is not attached.
   • TGW-Uplink Rule When entering, check the following items.
     • When the destination is a Transit Gateway.
       • You can enter values within the VPC IP address range connected to the Transit Gateway.
       • 0.0.0.0/0 cannot be used as the destination IP range.
     • When the destination is remote
       • You cannot enter the VPC IP address range connected to the Transit Gateway.
       • The destination IP range 0.0.0.0/0 can be entered only when the Transit Gateway does not have an Internet Gateway attached.
       • D, E class IP ranges cannot be entered.
7. In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added in the rule list.

Delete rule

To delete a Transit Gateway rule, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Navigate to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Rules tab. 4. Navigate to the Rules tab page.
5. On the Rules tab page, click the Delete button of the item you want to delete. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Verify that the selected resource has been deleted from the rule list.

Managing Firewall Connections

You can attach or detach a firewall for use with the Transit Gateway.

Connect to Firewall

To add a Firewall connection to the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource to which you will connect the Firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Connect Firewall button. 5. A firewall connection confirmation window appears.
6. In the Firewall connection confirmation window, click the Confirm button. 6. Check the connection status in the Firewall connection status item.

Add Firewall

After the Firwall connection is completed, you can add a Firewall.

To add a Firewall to a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway List page, click the resource where you want to add a Firewall. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Detailed Information tab. 4. Go to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Add button in the Firewall list. 5. The Firewall addition window appears.
6. In the Firewall add dialog, select the purpose and click the Confirm button. 6. Check whether a resource item has been added to the Firewall list.

Delete Firewall

You can delete the firewall after the firewall connection is completed.

To delete a firewall from a Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource to delete the firewall. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
5. Click the Delete button on the Detailed Information tab page of the Firewall list. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Check whether the resource entry has been removed from the Firewall list.

Disconnect Firewall

You can disconnect unused Firewall connections.

To detach the firewall from the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. Transit Gateway list page, click the resource to detach the Firewall connection. 3. Navigate to the Transit Gateway Details page.
4. On the Transit Gateway Details page, click the Details tab. 4. Navigate to the Detailed Information tab page.
5. On the Detailed Information tab page, click the Disconnect Firewall button. 5. A notification confirmation window appears.
6. In the alert dialog, click the Confirm button. 6. Check the disconnected status in the Firewall connection status item.

Terminate Transit Gateway

You can terminate unused Transit Gateways to reduce operating costs.

To terminate the Transit Gateway, follow these steps.

1. All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
3. On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
4. On the Transit Gateway Detail page, click the Transit Gateway Delete button.
5. After termination is complete, check whether the resource has been deleted from the Transit Gateway list.

Preliminary service

This is a service that must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.

2.10 - PrivateLink Service

Users can create the service by entering the required information for the PrivateLink Service and selecting detailed options through the Samsung Cloud Platform Console.

Creating a PrivateLink Service

You can create and use a PrivateLink Service in the Samsung Cloud Platform Console.

To create a PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the PrivateLink Service Create button. You will be taken to the PrivateLink Service Create page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     PrivateLink Service name	Required	Enter the PrivateLink service name
     Approval method	Required	Select approval method for PrivateLink Service input Automatic: Automatically approve when a PrivateLink Service connection request is received Manual: Manually approve after verification when a PrivateLink Service connection request is received The approval method cannot be changed after creation
     High-speed data transfer	Selection	The default setting is disabled and not displayed in the Samsung Cloud Platform Console To use high-speed data transfer, submit a service usage request via Support Center > Contact, and once processing is complete, it can be selected on the screen
     VPC name	Required	Select the VPC to connect Click + New to create a VPC and then select it
     Subnet name	Required	Select the Subnet of the VPC to connect Click + New to create a Subnet and then select it
     PrivateLink Service IP	Required	Select the Subnet to connect and enter the PrivateLink Service IP IP addresses already in use within the Subnet cannot be entered; the first and last IPs of the Subnet IP range cannot be used
     Connection resource	Required	Select resources to connect to the chosen VPC Load Balancer: Select the Load Balancer to connect (cannot select LB when using a Local subnet) IP: Enter the Compute resource IP of the selected VPC
     Security Group	Select	Click the Select button to choose the Security Group to connect Select up to 5 If you do not select a Security Group, all connections will be blocked
     explanation	Select	Enter description for PrivateLink Service

     Table. PrivateLink Service service information input items
   • In the Additional Information Input area, enter or select the required information.

     Category	Required status	Detailed description
     tag	Select	Add Tag Up to 50 per resource can be added Add Tag button after clicking, input or select Key, Value values

     Table. PrivateLink Service additional information input fields
3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • When creation is complete, check the created resource on the PrivateLink Service list page.

View PrivateLink Service details

The PrivateLink Service allows you to view and edit the full list of resources and detailed information. PrivateLink Service Details page consists of Details, Connection Management, Tags, Activity Log tabs.

To view detailed information about the PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. From the Service Home page, click the PrivateLink Service menu. You will be taken to the PrivateLink Service list page.
3. On the PrivateLink Service List page, click the resource for which you want to view details. You will be taken to the PrivateLink Service Details page.
   • PrivateLink Service Details page displays status information and additional feature information, and consists of Details, Connection Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	PrivateLink Service status Active: Running Creating: In progress Deleting: In progress Error: Error occurred
     Delete PrivateLink Service	Button to delete PrivateLink Service resources

     Table. PrivateLink Service status information and additional features

Detailed Information

On the PrivateLink Service List page, you can view detailed information of the selected resource and edit the information if needed.

Connection Management

On the PrivateLink Service List page, you can view the connection information of the selected resource. You can review connection requests and approve or reject them.

tag

PrivateLink Service List page lets you view, add, modify, or delete tag information for the selected resource.

Job History

PrivateLink Service List page allows you to view the operation history of the selected resource.

Terminate PrivateLink Service

You can cancel unused PrivateLink Service to reduce operating costs.

To cancel the PrivateLink Service, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. From the Service Home page, click the PrivateLink Service menu. You will be taken to the PrivateLink Service List page.
3. On the PrivateLink Service List page, click the resource to delete. Go to the PrivateLink Service Details page.
4. On the PrivateLink Service Details page, click the Delete PrivateLink Service button.
5. When the termination is complete, check that the resource has been deleted from the PrivateLink Service list.

Preliminary Service

This is a service that must be installed in advance before creating this service. Please refer to the provided user guide and prepare accordingly.

2.11 - PrivateLink Endpoint

Users can create the service by entering the required information for the PrivateLink Endpoint service and selecting detailed options through the Samsung Cloud Platform Console.

Creating a PrivateLink Endpoint

You can create and use a PrivateLink Endpoint service from the Samsung Cloud Platform Console.

To create a PrivateLink Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Create PrivateLink Endpoint button. You will be taken to the Create PrivateLink Endpoint page.
   • Enter or select the required information in the Service Information Input area.

     Category	Required	Detailed description
     PrivateLink Endpoint name	Required	Enter the PrivateLink Endpoint name
     VPC name	Required	Select VPC to connect Click + Create new to create a VPC and then select it
     Subnet name	Required	Select the Subnet of the VPC to connect Click + New to create a Subnet and then select it
     PrivateLink Endpoint IP	Required	Select the Subnet to connect, then enter the PrivateLink Endpoint IP IP addresses currently in use within the Subnet cannot be entered, and the first and last IPs of the Subnet IP range cannot be used
     PrivateLink Endpoint ID	Required	Enter the PrivateLink Service ID to connect Enter using letters and numbers, within 3 to 60 characters Before applying for the service, you need to verify the Service ID of the PrivateLink Service to connect; after creating the Endpoint, you must provide the Endpoint ID to the service provider
     Security Group	Select	Click the Select button to choose the Security Group to connect Select up to 5 If no Security Group is selected, all connections are blocked
     description	Select	Enter description for PrivateLink Endpoint

     Table. PrivateLink Endpoint service information input fields
   • Enter or select the required information in the Additional Information Input area.

     Category	Required	Detailed description
     tag	Selection	Add Tag Up to 50 per resource can be added After clicking the Add Tag button, enter or select Key and Value values

     Table. PrivateLink Endpoint additional information input fields
3. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.
   • Once creation is complete, check the created resource on the PrivateLink Endpoint List page.

Check PrivateLink Endpoint details

PrivateLink Endpoint service allows you to view and edit the full list of resources and detailed information. PrivateLink Endpoint Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the PrivateLink Endpoint, follow these steps.

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the PrivateLink Endpoint menu on the Service Home page. You will be taken to the PrivateLink Endpoint List page.
3. On the PrivateLink Endpoint List page, click the resource to view detailed information. You will be taken to the PrivateLink Endpoint Details page.
   • PrivateLink Endpoint Details page displays status information and additional feature information, and consists of Details, Connection Management, Tags, Activity Log tabs.

     Category	Detailed description
     status	PrivateLink Endpoint status Requesting: connection request/awaiting approval, Cancel request button displayed Active: creation completed, operating Creating: in progress Deleting: in progress Disconnected: connection blocked Rejected: connection denied, Request approval again button displayed Error: error occurred Canceled: connection request canceled, Request approval again button displayed
     Delete PrivateLink Endpoint	Button to delete PrivateLink Endpoint resource

     Table. PrivateLink Endpoint status information and additional features

Detailed Information

On the PrivateLink Endpoint List page, you can view detailed information of the selected resource and edit the information if needed.

tag

PrivateLink Endpoint List page allows you to view, add, modify, or delete the tag information of the selected resource.

Job History

On the PrivateLink Endpoint List page, you can view the operation history of the selected resource.

Terminate PrivateLink Endpoint

You can terminate unused PrivateLink Endpoints to reduce operating costs.

To terminate a PrivateLink Endpoint, follow these steps.

1. All Services > Networking > VPC Click the menu. Go to the VPC’s Service Home page.
2. Click the PrivateLink Endpoint menu on the Service Home page. You will be taken to the PrivateLink Endpoint List page.
3. On the PrivateLink Endpoint List page, click the resource you want to delete. Go to the PrivateLink Endpoint Details page.
4. On the PrivateLink Endpoint Details page, click the PrivateLink Endpoint Delete button.
5. After termination is complete, check whether the resource has been deleted from the PrivateLink Endpoint list.

Pre-service

This service must be installed in advance before creating it. Please refer to the provided user guide and prepare accordingly.

2.12 - NAT Logging

To store NAT logs, first create a bucket in Object Storage for the logs and configure that bucket in the NAT Logging repository. Then, when you enable log storage in the NAT detail view, NAT logs will begin to be saved to the Object Storage bucket.

To store NAT logs, you need to configure the following steps in order.

1. To store NAT logs, you can create a bucket in Object Storage or use an existing bucket. To create a bucket, refer to Object Storage 생성하기.
2. To set the bucket for NAT Logging’s log repository, refer to NAT Logging 로그 저장소 사용하기.
3. To set the log storage option to Enabled in the NAT detailed view, refer to Using NAT Log Storage.

Using NAT Logging Log Repository

To set NAT log storage to enabled, you must first configure the log repository in NAT Logging.

1. Click the All Services > Management > Network Logging > NAT Logging menu. You will be taken to the NAT Logging List page.
2. NAT Logging List page, click the top Log Storage Settings button. You will be taken to the Log Storage Settings popup.
3. Log storage settings In the popup window, select the log storage bucket. When you select a bucket, the log storage path is displayed.
4. Log storage settings In the popup window, after checking Log storage bucket and Log storage path, click the Confirm button.
5. Notification After reviewing the message in the popup window, click the Confirm button.

NAT Logging list

If you configure the NAT Logging log storage bucket, the NAT Logging list will be displayed.

• Click the All Services > Management > Network Logging > NAT Logging menu. You will be taken to the NAT Logging List page.

  Category	required	Detailed description
  Resource ID	Required	NAT resource ID
  Save target	Required	NAT resource name
  Save registration date and time	Required	NAT log repository registration timestamp

  Table. NAT Logging list items

Check NAT Logging content

Refer to the information below to check the saved Log.

NAT Logging Do not use log storage

In NAT Logging, you can set the log repository to be unused.

1. All Services > Management > Network Logging > NAT Logging Click the menu. You will be taken to the NAT Logging List page.
2. On the NAT Logging List page, click the top Log Storage Settings button. It will open the Log Storage Settings popup.
3. In the Log storage settings popup, select Log storage bucket as Not used, and click the Confirm button.

3 - API Reference

4 - CLI Reference

5 - Release Note

VPC