Skip to main content
Updated May 8, 2026 The raff vpc command group manages Virtual Private Clouds. See VPC overview for the model — VXLAN isolation, opt-in membership, allowed CIDR ranges.

Subcommand index


list

get

create

Create a VPC with a custom CIDR. Allowed prefixes: /16 to /28. Allowed ranges: RFC 1918 (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and RFC 6598 (100.64.0.0/10).

update

Update name and/or DNS. CIDR is immutable — recreate to change.

delete

Delete an empty VPC. Fails if any VMs are still attached — detach them first via raff vm vpc detach.

cidr-suggestions

Returns three pre-computed CIDRs (Recommended /20, Small /24, Large /16) chosen to not conflict with your existing VPCs. Pass any of them to raff vpc create --cidr <cidr>.

VM commands

raff vm vpc attach to add a VM to a VPC.

VPC overview

The VXLAN model behind VPCs.

VXLAN, CIDR, and isolation

Why CIDR overlap is allowed across VPCs.
Last modified on May 8, 2026