Questions and answers about Virtual Private Cloud

What is VPC?

VPC (Yandex Virtual Private Cloud) is a way to connect and organize cloud resources using virtual networks.

Which network technologies are available to Yandex Cloud users?

VPC enables you to assign VMs private and public IP addresses and create cloud networks and subnets.

How do I create a cloud network?

When you create a folder through the management console, the service will automatically create a network in it. You can also create a cloud network manually using the management console.

How do I create a subnet?

Subnets in the default folder will be created automatically. You can create additional subnets using the management console or CLI.

Which resources can be assigned IP addresses?

You can assign addresses to virtual machines and hosts in database clusters.

How are IP addresses assigned to cloud resources?

You can have public IPs assigned to cloud resources automatically or select IPs from the list of reserved static addresses. You can assign internal addresses automatically or manually when creating a VM.

How do I make a public IP address static?

You can make a public IP address static using the VPC IP addresses tab in the management console.

What limitations apply when creating subnets?

Subnets can only use private IPv4 addresses from the ranges defined by RFC 1918.

Why is my connection for Yandex Cloud services slow?

Yandex Cloud doesn't impose any limits on connection speed. Please provide the following information to help troubleshoot potential problems:

• The direction of the connection that is producing the issue: local to the cloud network, cloud network to the internet, or the internet to the cloud network.
• Type of traffic producing the issue: incoming or outgoing.
• Source and target settings: virtual machine IDs, IPs, FQDNs.
• Output for the mtr <target_IP_or_domain> command.
• Speed results from Yandex.Internetometer, including Technical Information.

Prepare this information and send it to technical support.

What do I do if email traffic is blocked?

Yandex Cloud only blocks traffic sent from pubic IPs on port 25. Traffic sent to Yandex email servers is the exception.

To prevent email traffic from being blocked, reconfigure your email sever to use ports 465 and 587. To do this, use these ports as an email gateway and delegate your domain to Yandex servers with Yandex Mail for Domains.

If you need port 25, assign your virtual machine a new IP:

1. Request a new IP with port 25 open. When making the request, tell support:

   • The ID of the folder where you need the IP address.
   • The availability zone.
   • The PTR record domain, if required.

2. Unbind the current IP from the virtual machine. To do this, run the following CLI command:

   yc compute instance remove-one-to-one-nat \
     --id=<virtual_machine_ID> \
     --network-interface-index=0
   

3. Bind the new IP received from support.

We reserve the right to block an IP and/or suspend a VM if we receive complaints about spam originating from that IP address.

Does the service meet the requirements under Federal Law No. 152-FZ On personal data?

Yes, you can read the full security audit conclusion.

Can I get logs of my operations with services?

Yes, you can request log records about your resources from Yandex Cloud services. For more information, see Data requests.