Your network rules, from the cloud to your racks.
Isolated virtual private clouds with subnets, stateful firewall rules, peering, site-to-site VPN and load balancers. Add or remove a rule in the console or the API and it applies in seconds, in Nimbo regions and on your Nimbo Racks alike.
Allow what you mean. Deny the rest.
Every VPC starts closed to the internet. Rules are stateful, ordered by priority, and scoped by protocol, port range, CIDR or security group.
| Priority | Direction | Protocol · port | Source | Action |
|---|---|---|---|---|
| 100 | Ingress | tcp 443 | 0.0.0.0/0 | Allow |
| 200 | Ingress | tcp 5432 | sg: app-tier | Allow |
| 300 | Ingress | tcp 22 | 10.20.0.0/16 (VPN) | Allow |
| 65000 | Ingress | any | 0.0.0.0/0 | Deny |
Example rule set.
Everything between your users and your GPUs
VPCs and subnets
Your own address space with public and private subnets per region or per rack site.
Security groups
Reusable rule sets attached to instances, node pools and databases, referenced by name in other rules.
Peering
Private routing between your VPCs across Nimbo regions, with no traffic over the public internet.
Site-to-site VPN
IPsec tunnels to your data centers, VMware and Proxmox sites, and hyperscaler VPCs.
Load balancers
Layer 4 and layer 7 load balancing with managed TLS certificates for endpoints and apps.
Flow logs
Accepted and rejected flows streamed to Nimbo Secure or your SIEM for investigation.
Design your network with an architect.
Bring your current topology. We will map VPCs, VPN and firewall policy across cloud and on-prem.