VPCs with full routing
Build the network for your applications: subnets, routes, internet and NAT gateways, security groups, and interfaces.
VPCs, subnets, and route tables
Internet gateways
NAT gateways (billed separately)
Security groups and interfaces
Subject to per-region quotas
No charge for VPC/subnet/SG
What you configure
The same resources you find in the networking console.
VPCs and subnets
Isolate environments with their own CIDRs and public or private subnets.
Route tables
Control where traffic goes: local, internet gateway, or NAT.
Internet and NAT gateways
Public ingress through an internet gateway; controlled egress from private subnets through NAT.
Security groups
Stateful firewall on interfaces. Inbound and outbound rules by protocol and port.
Organize your infrastructure
Environment isolation
Keep production, staging, and development in separate VPCs.
Multi-tier
Public frontend, private app, and data confined to the internal subnet.
Controlled egress
Use NAT for IPv4 egress from private workloads, with route tables and security groups controlling access.
Interfaces
Attach several NICs to instances and associate security groups.
Examples of default limits per organization and region (overrides may apply):
10 VPCs · 20 subnets · 10 extra route tables · 20 security groups
NAT addresses and public IPv4 floating IPs share a quota. IPv6 has a separate quota.
Within your organization’s quotas
VPCs, subnets, security groups, and routes have no resource charge. NAT gateways, public IPv4 floating IPs, and outbound transfer are billed separately. Consult Quotas in the console for your organization’s regional limits.
Start with R$ 100 in credits
Eligible new accounts receive credits after activation. Check the amount and expiry in Billing.
Create a free account