Skip to main content
Updated May 8, 2026 A Virtual Private Cloud (VPC) on Raff is an isolated private network for VMs in the same region. VPCs are opt-in — create one when you want two or more VMs to talk to each other privately at near-line-rate without going over the public internet, or to put a fleet behind a single internet gateway. A VM that doesn’t join a VPC is still fully usable; it just reaches the internet through its public IP and has no private peer network. Under the hood, every VPC is a VXLAN segment with its own 24-bit VNI — that’s what makes them isolated, and why two VPCs can use the same CIDR and still never see each other.
Networking page on the Diagram tab showing eight VPC cards in a row, each as a green dashed box with a VM and a public IP chip. The four tabs across the top are Diagram, VPCs (8), Public IPs (8), and Firewall (1).
The dashboard’s Networking page opens to this live diagram of every VPC, every VM in one, and every public IP attached to a VM. The four tabs across the top — Diagram / VPCs / Public IPs / Firewall — are how you move between the visual map, the flat lists, and the firewall rules. Most network management starts and ends here.

​
What you can do

​
Most viewed

Use the Networking diagram

Visualize every VPC and IP, manage them inline.

Create a VPC

Pick a CIDR, attach VMs, share privately.

Attach a VM

Move a VM into an existing VPC.

VXLAN, CIDR, and isolation

Why CIDR overlap is allowed and what’s reserved.

​
Browse

Quickstart & guides

Diagram, create, attach, list CIDRs, delete.

Concepts

VXLAN, CIDR, isolation, MTU.

Details

Limits, prefix sizes, region scope.

Troubleshooting

Common VPC issues and fixes.

API Reference

VPC endpoints.

Changelog

All API updates and changes.
Last modified on May 11, 2026