Service Overview

Samsung Cloud Platform provides VPC services to enable the use of logically isolated, customer‑dedicated private network spaces in the cloud environment.
VPC(Virtual Private Cloud) is a service that provides a logically isolated, customer‑dedicated private network space in a cloud environment. Depending on the intended use, you can create a General Subnet or a Local Subnet for communication between servers, and freely select NAT Gateway and Internet Gateway to configure various networks. You can create multiple VPCs and operate them independently. VPC Peering allows configuration of connections between VPCs.

Service architecture diagram

Components

Subnet

Subnet refers to the IP address range of a VPC. Depending on the purpose, use the General Subnet to create subnets for public or private use. It is a service that lets users segment the network within a VPC according to their purpose and scale. Subnet provides a standard Subnet and a Local Subnet for communication between servers.

• General Subnet Creation/Read/Deletion: When creating a VPC, a Subnet is created by default, and you use the Subnet according to its purpose. * For example, you can separate and use a Public Subnet that can access the internet and a Private Subnet that cannot.

• VPC Endpoint Subnet Create/Read/Delete: You can access the Samsung Cloud Platform via a private connection from an external network linked to the VPC, allowing entry into the VPC.

• Local Subnet Creation/Query/Deletion: It does not allow connections to other Subnets or external access, and only permits direct connections between Virtual Server-Virtual Server or Bare Metal Server-Bare Metal Server, so it can be configured only for Virtual Server-Virtual Server within the VPC.

Subnet types

A network zone that logically partitions the VPC IP range, segmenting traffic and security through routing and public/private separation. The provided Subnet types are as follows.

Internet Gateway

You can create an Internet Gateway, connect it to a VPC, view its details, or delete an Internet Gateway that is not in use. You can connect VPC resources to the internet using an Internet Gateway.
You can assign a Public IP to instances and load balancers that are internet‑connected so they can be accessed from outside.

NAT Gateway

You can create a NAT Gateway, connect it to a subnet, view its details, or delete a NAT Gateway that is not in use.
To create a NAT Gateway for a subnet, you must first create an Internet Gateway and attach it to the VPC. When you create a NAT Gateway, internet access is allowed for all resources belonging to the subnet. Apply firewall rules to restrict internet access.
A NAT Gateway can be created when it is of the General type, and it is a service that maps a single representative public IP for a Virtual Server without a public IP NAT to use the internet for outbound traffic.

Public IP

If you want to use the same IP address each time you stop and start an instance, reserve a Public IP and use it.
This is a service that creates a desired public IP within the available Public IP pool of Samsung Cloud Platform and assigns it to compute resources for use.
Compute resources assigned with the designated public IP retain the IP even after a reboot.

Port

Provides a connection point for connecting a single device, such as a server’s NIC, to the network. This allows adding NICs beyond the default provision.

VPC Endpoint

Provides an entry point for the VPC that allows access to the Samsung Cloud Platform via a private connection from an external network connected to the VPC.

VPC Peering

You can communicate via IP through a 1:1 private route between VPCs. By default, it provides peering between VPCs in the same account, and only one connection is allowed between different accounts.

Private NAT

You can map the customer’s IP and connect using Direct Connect from compute resources within the VPC.

Transit Gateway

Transit Gateway is a gateway service that easily connects the customer’s network with the Samsung Cloud Platform network and serves as a connection hub for multiple VPCs within the cloud environment.
Through the Transit Gateway, you can configure various network topologies that customers desire. Additionally, it provides independent firewall configuration and routing capabilities for each connected network segment, enabling thorough security management.

PrivateLink

It is a service that connects internal Samsung Cloud Platform data to a private path between the VPC and the SCP service without exposing it to the internet.

• PrivateLink Service is for service providers, and PrivateLink Endpoint is for service users.

Constraints

The VPC of Samsung Cloud Platform limits the number of VPCs and Subnets that can be created as follows.

Preceding Service

VPC has no prerequisite services.