You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/vpc/faq.mdx
-4Lines changed: 0 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,10 +40,6 @@ Yes, [VPC routing](/vpc/concepts#routing) allows you to automize the routing of
40
40
41
41
This is not currently possible. You may consider using a VPN tunnel to achieve this, for example [IPsec](https://en.wikipedia.org/wiki/IPsec) or [WireGuard](https://en.wikipedia.org/wiki/WireGuard). Scaleway also offers an [OpenVPN InstantApp](/tutorials/openvpn-instant-app/), making it easy to install a VPN directly on an Instance.
42
42
43
-
### Why can I not route traffic to my Managed Database on another Private Network?
44
-
45
-
Managed Databases do not currently support VPC routing - see our [dedicated documentation](/vpc/reference-content/understanding-routing/#limitations)
46
-
47
43
### Can I control traffic flow between my VPC's Private Networks?
48
44
49
45
Yes, use the [Network ACL feature](/vpc/reference-content/understanding-nacls/) to filter packets flowing between the different Private Networks of your VPC. By default, all traffic is allowed to pass, until you start to add rules to the VPC's NACL.
Copy file name to clipboardExpand all lines: pages/vpc/how-to/manage-routing.mdx
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ Routing is used to manage and control the flow of traffic within a VPC. It tells
18
18
Read more about the VPC routing feature, including detailed explanations, usage considerations, limitations and best practices in our [dedicated reference content](/vpc/reference-content/understanding-routing/).
19
19
20
20
<Macroid="requirements" />
21
-
21
+
22
22
- A Scaleway account logged into the [console](https://console.scaleway.com)
23
23
24
24
## How to activate routing
@@ -44,7 +44,7 @@ To activate routing on a pre-existing VPC, follow these steps:
44
44
Two types of auto-generated routes exist:
45
45
46
46
-**Local subnet route**: Generated when you create a Private Network in a VPC. Allows traffic to be routed between different Private Networks in the VPC.
47
-
-**Default route to internet**: Generated when you attach a Public Gateway to a Private Network in the VPC, and set it to advertise a [default route](/public-gateways/concepts/#default-route). Allows traffic to be routed to addresses outside the VPC (i.e. the public internet) via the gateway.
47
+
-**Default route to internet**: Generated when you attach a Public Gateway to a Private Network in the VPC, and set it to advertise a [default route](/public-gateways/concepts/#default-route). Allows traffic to be routed to addresses outside the VPC (i.e. the public internet) via the gateway.
48
48
49
49
<Messagetype="note">
50
50
Public Gateways remain scoped to the Private Network(s) to which they are attached. They do not advertise the default route on other Private Networks in the VPC. For example, an Instance attached to Private Network A will not be able to access the internet via a Public Gateway in Private Network B.
@@ -64,17 +64,17 @@ Your VPC's **route table** can be found in its **Routing** tab. The route table
64
64
65
65
Routes are automatically generated and added to the route table when you:
66
66
67
-
- Create a Private Network in the VPC (this generates a **local subnet route**, which allows the VPC to automatically route traffic between Private Networks), or
67
+
- Create a Private Network in the VPC (this generates a **local subnet route**, which allows the VPC to automatically route traffic between Private Networks), or
68
68
- Attach a Public Gateway to a Private Network and set it to advertise a default route. This generates a **default route to the internet**.
69
69
- Create a custom route
70
-
70
+
71
71
When your route table starts to populate, it will look something like this:
72
72
73
73
<Lightboxsrc="scaleway-route-table.webp"alt="" />
74
74
75
75
For help with understanding the route table and how to read it, [refer to our documentation about route tables](/vpc/reference-content/understanding-routing/#route-table).
76
76
77
-
### How to view VPC routes in IPV6
77
+
### How to view VPC routes in IPV6
78
78
79
79
Scaleway VPC routing supports both IPv4 and IPv6 protocols. Managed routes to Private Networks are simultaneously generated for both IPV4 and IPV6, and both are added to the route table. Use the toggle above the route table to switch from the default view of **IPV4** routes to a view of **IPV6** routes.
80
80
@@ -110,7 +110,7 @@ Follow the steps below to define a custom route:
110
110
111
111
8. Enter a **next hop** for the route. The VPC will route traffic for the destination IP to the resource designated as next hop.
112
112
- Select the Private Network which the next hop resource is attached to.
113
-
- Select a resource type: **Instance**, **Public Gateway** or **Elastic Metal**. Routing is not yet compatible with Managed Databases, nor with other types of Scaleway resources which are not integrated with VPC.
113
+
- Select a resource type: **Instance**, **Public Gateway** or **Elastic Metal**.
114
114
- Select the **name** of the specific resource you want to route traffic to. The resource must be attached to a Private Network in this VPC.
115
115
116
116
<Messagetype="note">
@@ -123,15 +123,15 @@ Follow the steps below to define a custom route:
123
123
124
124
### How to fix a broken custom route
125
125
126
-
If you delete a resource used as a next hop in a custom route, or detach it from the Private Network, the custom route will cease to function. A **Not found!** warning will display in the **Next hop** column for this route in the route table.
126
+
If you delete a resource used as a next hop in a custom route, or detach it from the Private Network, the custom route will cease to function. A **Not found!** warning will display in the **Next hop** column for this route in the route table.
127
127
128
128
<Lightboxsrc="scaleway-route-not-found.webp"alt="A VPC route table displays in the Scaleway console, with a red 'Not found!' text in the next hop column of a custom route" />
129
129
130
130
To resolve this, you must either:
131
131
132
132
-[Reattach the next hop resource to the Private Network](/vpc/how-to/attach-resources-to-pn/#how-to-attach-a-resource-to-a-private-network)**and** then [edit the route](#how-to-edit-a-custom-route) to reselect the next hop resource, or
133
133
-[Edit the route](#how-to-edit-a-custom-route) to select a new next hop, or
134
-
-[Delete the route](#how-to-delete-a-custom-route)
134
+
-[Delete the route](#how-to-delete-a-custom-route)
Copy file name to clipboardExpand all lines: pages/vpc/reference-content/understanding-nacls.mdx
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -50,18 +50,18 @@ When defining a NACL rule, you must enter the following settings:
50
50
-**Protocol**: Either `TCP`, `UDP`, or `ICMP`. The rule will apply only to traffic matching this protocol. Alternatively, you can choose to apply it to traffic matching any protocol.
51
51
52
52
-**Source** and **destination**: The rule will apply to traffic originating from this source and being sent to this destination. For both, enter an IP range in [CIDR format](/vpc/concepts/#cidr-block), and a port or port range. Alternatively, you can opt for the rule to apply to all IPs and/or all ports.
53
-
53
+
54
54
-**Action**: The NACL will either **Allow** (accept) or **Deny** (drop) traffic that matches the rule, to proceed to its destination.
55
55
56
56
## Rule priority and application
57
57
58
-
The Network Access Control List should be read from top to bottom. Rules closer to the top of the list are applied first. If traffic matches a rule for an **Allow** or **Deny** action, the action is applied immediately. That traffic is not then subject to any further filtering or any further actions by any rules that follow.
58
+
The Network Access Control List should be read from top to bottom. Rules closer to the top of the list are applied first. If traffic matches a rule for an **Allow** or **Deny** action, the action is applied immediately. That traffic is not then subject to any further filtering or any further actions by any rules that follow.
59
59
60
60
## Statelessness
61
61
62
62
**NACL rules are stateless**. This means the state of connections is not tracked, and inbound and outbound traffic is filtered separately. Return traffic is not automatically allowed, just because the outbound request was allowed. Explicit rules are required for each direction of traffic.
63
63
64
-
Therefore, if you create a rule to allow traffic in one direction, you may also need a separate rule to allow the response in the opposite direction.
64
+
Therefore, if you create a rule to allow traffic in one direction, you may also need a separate rule to allow the response in the opposite direction.
65
65
66
66
## Default rule
67
67
@@ -77,7 +77,7 @@ The table below shows an example of a NACL for IPv4 traffic:
77
77
78
78
<Lightboxsrc="scaleway-nacl-example.webp"alt="A table shows a number of NACL rules" />
79
79
80
-
- A number of TCP rules allow connections to the specific ports necessary for SSH, HTTP, and HTTPS traffic. These rules allow all IPv4 sources within the VPC to connect to these ports, for all IPv4 destinations.
80
+
- A number of TCP rules allow connections to the specific ports necessary for SSH, HTTP, and HTTPS traffic. These rules allow all IPv4 sources within the VPC to connect to these ports, for all IPv4 destinations.
81
81
82
82
- An ICMP rule allows all ICMP traffic from/to all IPv4 addresses on all ports, effectively permitting all ping requests within the VPC to function.
83
83
@@ -95,9 +95,9 @@ Network ACLs cannot be used to block or filter the traffic to or from the follow
95
95
- Scaleway DHCP
96
96
- Scaleway Instance metadata
97
97
- Kubernetes Kapsule task metadata endpoints
98
-
- License activation for Windows installation on Elastic Metal or Instances
98
+
- License activation for Windows installation on Elastic Metal or Instances
99
99
100
-
NACLs have the same resource limitations as [VPC routing](/vpc/reference-content/understanding-routing/#limitations), they cannot currently be used to filter Managed Database traffic, though this functionality is planned for the future.
100
+
NACLs have the same resource limitations as [VPC routing](/vpc/reference-content/understanding-routing/#limitations).
101
101
102
102
NACLs are currently available only via the Scaleway API and developer tools. They are not yet available in the Scaleway console.
Copy file name to clipboardExpand all lines: pages/vpc/troubleshooting/vpc-limitations.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,4 +27,4 @@ This page sets out some current limitations of Scaleway's VPC.
27
27
- Managed Databases for Redis™ (only during the process of creating the database)
28
28
- Kubernetes Kapsule (only during the process of creating the Kapsule cluster)
29
29
- Private Networks are not supported on some legacy Instance offers which have reached EOL, e.g. `VC1`, `START1` and `X64-*GB`. Note that all Instance offers in the [current product catalogue](https://www.scaleway.com/en/pricing/?tags=compute) are supported.
30
-
- Managed Databases are not currently compatible with VPC routing. The VPC cannot automatically route between Managed Databases on different Private Networks, or (for example) between a Managed Database on one Private Network and an Instance on a different Private Network.
Copy file name to clipboardExpand all lines: pages/vpc/troubleshooting/vpc-pn-routing-connectivity-issues.mdx
-4Lines changed: 0 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,10 +17,6 @@ You may have problems with connectivity between resources in a VPC or Private Ne
17
17
18
18
This page helps you solve potential errors that are related to VPC connectivity and routing.
19
19
20
-
## My Managed Database cannot communicate with other resources in my VPC
21
-
22
-
This is normal, as VPC routing is not yet supported by Managed Databases for PostgreSQL and MySQL, nor Managed Databases for Redis. Adding support for Managed Databases is planned for the future.
0 commit comments