Skip to main content
Updated May 8, 2026 The raff vpc command group manages Virtual Private Clouds. See VPC overview for the model — VXLAN isolation, opt-in membership, allowed CIDR ranges.

​
Subcommand index

SubcommandWhat it does
listList VPCs in the project
getShow one VPC’s details
createCreate a new VPC
updateUpdate VPC settings (DNS, name)
deleteDelete an empty VPC
cidr-suggestionsGet suggested non-conflicting CIDRs

​
list

raff vpc list [--output table|json]

​
get

raff vpc get <vpc-id> [--output table|json]

​
create

raff vpc create \
  --name <name> \
  --cidr <cidr> \
  [--region us-east] \
  [--dns-primary 8.8.8.8] \
  [--dns-secondary 1.1.1.1]
Create a VPC with a custom CIDR. Allowed prefixes: /16 to /28. Allowed ranges: RFC 1918 (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and RFC 6598 (100.64.0.0/10). 
raff vpc create --name "prod-services" --cidr "10.5.0.0/24"

​
update

raff vpc update <vpc-id> [--name <new-name>] [--dns-primary <ip>] [--dns-secondary <ip>]
Update name and/or DNS. CIDR is immutable — recreate to change.

​
delete

raff vpc delete <vpc-id>
Delete an empty VPC. Fails if any VMs are still attached — detach them first via raff vm vpc detach.

​
cidr-suggestions

raff vpc cidr-suggestions [--output table|json]
Returns three pre-computed CIDRs (Recommended /20, Small /24, Large /16) chosen to not conflict with your existing VPCs. Pass any of them to raff vpc create --cidr <cidr>.

VM commands

raff vm vpc attach to add a VM to a VPC.

VPC overview

The VXLAN model behind VPCs.

VXLAN, CIDR, and isolation

Why CIDR overlap is allowed across VPCs.
Last modified on May 8, 2026