Controlled Network Design
By defining static routes on the router, you control which network traffic flows through. This is a fundamental building block for enterprise network architectures that require security zones and traffic flow control.
Router (Virtual Router)
Connect your private networks securely without exposing them to the internet
Regions: tr-ist-01 (İstanbul) · tr-ank-01 (Ankara).
Application, data and management networks are isolated private networks.
Every packet between networks reaches the router, which forwards it by consulting the route table.
The table states which network may reach which: application to data, management to all.
The default route goes to egress; the internet is reached only through this path.
Answer
What is Router?
Router is the virtual router for traffic between private networks. You set the path with a static route.
Cost depends on router runtime, connected networks and subnets, traffic and external connectivity components. Review the current estimate in the cost calculator.Calculate Cost
Live capacity and quota depend on the selected resource; service level terms are explained on the SLA page.
Features
Key Features
- Routing traffic between private networks and to the internet
- Static route definition support
- Ability to build multi-tier network topologies
How it works
How the infrastructure works
Router, Subnet and NAT
A router is created in the console through a single dialog: a name, an optional description and the "Enable NAT" option. With NAT enabled, subnets attached to the router reach the internet through the router's NAT address and servers on the private network can receive Floating IPs; with NAT disabled, the router only routes between private networks and no subnet is exposed. That option is deliberately left off for segments such as a management network that must never reach the internet.
Ports and Static Routes
The router detail page shows two tables. Ports lists which subnets the router is attached to; each row shows the port id, the router's fixed IP on that subnet (usually the subnet gateway address) and the MAC address, and "Add Port" attaches another subnet. Static Routes is filled with destination CIDR and next-hop pairs; it is used when a target network must be reached through a gateway the router does not know directly, such as an office network behind a VPN server. A route applies only to subnets attached to this router.
Segmentation with Security Groups
The router routes between subnets while Security Groups decide which traffic reaches each server; together they form a tiered network. A common layout uses three subnets: an internet-facing web tier, an application tier reachable only from the web tier, and a data tier reachable only from the application tier. The rule dialog in the console offers presets such as SSH, HTTP, HTTPS, MySQL and RDP; choosing one fills protocol and port, and the source field takes a CIDR or another Security Group. Use "0.0.0.0/0" as the source only on ports that genuinely must be open to everyone.
Responsibility Boundary
PortvMind Cloud operates the router, the NAT layer and the ports attached to the router. The subnet plan, which subnet attaches to which router, static routes and Security Group rules belong to your team. Router and subnet quota appears under Quota. Traffic that leaves for the internet through NAT falls under Network Data Transfer.
Scenarios
Use Cases
- Isolating application, database and management networks
- Hybrid connectivity and custom routing scenarios
Decision criteria
Responsibility, setup and boundaries
Who manages what?
PortvMind Cloud
- Provide the control plane for creating and managing network resources
Customer team
- Define addressing, routes, ports, access and traffic policy for the workload
What shapes cost?
- Router runtime
- Connected networks and subnets
- Traffic and external connectivity components
Service boundaries
- Quota and capacity appear in your project settings.
- Regions are limited to İstanbul (tr-ist-01) and Ankara (tr-ank-01).
How do you start in the console?
Hover or press play; the steps light up in time with the recording.
- Name the network
- Enter the CIDR range
- Save the scope
- Name the router
- Enable NAT and add a description
- See ports and routes on the detail page
- Define the security group
- Add an ingress rule
- Pick the HTTPS preset and set the source
FAQ
Related Questions
How do I get started?
Create an account in the console, complete email, phone and card verification, then open your first virtual server in Compute. Use calculator.portvmind.com to plan the cost.
Which security and compliance standards does PortvMind Cloud hold?
Security, business-continuity and privacy certificates are issued to vMind Information Technologies. Current documents are on the vMind certificate page. KVKK and sector obligations are completed through your organisation’s own legal and security assessment.
Next step
Test Router against your own workload.
Create the resource in the console. For a migration or scaling plan, continue together in an architecture consultation.
Model your scenario in the cost calculator.Calculate Cost