Security Groups
Stateful virtual firewalls for your instance ports.
Learn moreVirtual Networks
Build isolated networks with subnets and routers, see your topology live, and find out why a server can or cannot reach the internet.
ICT Cloud console · illustrative data
Isolated networks, subnets, and routers, with a live topology and an internet access check.
Isolated by design
Networks belong to your project. Servers attach to subnets you define.
See the whole picture
A live topology shows how networks, routers, and servers connect, with public and private paths drawn differently.
Diagnose the path
The internet access check walks the path from a server to the internet and tells you which step fails and how to fix it.
In the console
Internet access check
Six steps, each passed or failed with a reason: network interface, subnet gateway, router, external gateway, public address, and outbound security rules.
- Explains SNAT versus Floating IP paths
- A link to the right page for each failed step
- Derived from your networks, routers, IPs, and security groups
Features
Networks and subnets
Create a network and its first subnet in one request; add more subnets later.
Routers
Connect subnets and reach external networks through a gateway with SNAT.
Static routes
Add static routes to a router for networks behind a next hop.
Ports and fixed IPs
Reserve a fixed IP on a network and attach it to an instance later.
Port security
Anti-spoofing and security-group filtering per port, with allowed address pairs.
Live topology
See what is reachable from the internet and what is private.
Specifications
| Network | Isolated layer-2 network per project |
|---|---|
| Subnets | CIDR, gateway, and host routes |
| Routers | External gateway, SNAT, static routes |
| Ports | Fixed IPs, port security, allowed address pairs, admin state |
| Diagnostics | Six-step internet access check |
| Visibility | Live topology, public and private paths |
| Region | Istanbul 1 |
FAQ
What does the internet access check verify?
The network interface, subnet gateway, router, external gateway, public address, and outbound security rules. It does not check port security, static routes, or external firewalls.
Can a server reach the internet without a Floating IP?
Yes, if its router has SNAT enabled: outbound traffic uses the router’s SNAT address.
Start building on ICT Cloud.
Creating an account is free. Resources are billed per second, with a 60-second minimum.