Virtual Private Cloud networking on Raff — VXLAN-isolated private networks for VMs in the same region
Updated May 8, 2026A Virtual Private Cloud (VPC) on Raff is an isolated private network for VMs in the same region. VPCs are opt-in — create one when you want two or more VMs to talk to each other privately at near-line-rate without going over the public internet, or to put a fleet behind a single internet gateway. A VM that doesn’t join a VPC is still fully usable; it just reaches the internet through its public IP and has no private peer network. Under the hood, every VPC is a VXLAN segment with its own 24-bit VNI — that’s what makes them isolated, and why two VPCs can use the same CIDR and still never see each other.
The dashboard’s Networking page opens to this live diagram of every VPC, every VM in one, and every public IP attached to a VM. The four tabs across the top — Diagram / VPCs / Public IPs / Firewall — are how you move between the visual map, the flat lists, and the firewall rules. Most network management starts and ends here.
