Dedicated server networking
Public, private VLAN, IPMI, and cross-region private network.
3 min read
Each dedicated server has three logical network interfaces: one public 10 Gbps port (25 Gbps on Pro+), one private VLAN port for inter-service traffic, and the BMC/IPMI port on a separate management VLAN.
The public port carries your customer-facing traffic. It sits behind our 1.5 Tbps anti-DDoS edge; clean traffic reaches you, garbage is dropped at the edge. You don't need to configure anything for this.
The private VLAN is customer-isolated — only your services see it. Use it for database replication, application-tier RPC, and anything else that shouldn't traverse the public internet. Cross-region private network (the same VLAN extended to another region over our backbone) is available on the Enterprise tier.
The IPMI/BMC port is on a separate management VLAN you reach via our jump host (SSH key-authed). You can't expose IPMI to the public internet; we won't let you, for everyone's safety.