# What is a private network (VPC)? Subnets and private IPs on Gyro Cloud Istanbul

https://www.gyrohosting.com/en/knowledgebase/article/gyro-cloud-istanbul-private-network-vpc

- **What you will learn**: What a VPC and a subnet are, how private networking works on Gyro Cloud Istanbul, its limits and its price.
- **Time**: 6 minutes
- **Who is it for**: Anyone who wants to hide a database from the internet or wants fast, free traffic between servers.
- **What you need**: At least one Gyro Cloud Istanbul server.

## 1. In short

A **VPC (private network)** is a network shared only by your own servers, **isolated** from the internet and from other customers. Inside a VPC you create one or more **subnets**; your servers get **private IPs** (for example `10.10.1.10`) from them.

- Servers in the same VPC reach each other over **private IPs**; this traffic is **free** and never reaches the internet.
- Another customer's VPC can use the same IP range as yours and the two networks still **cannot see each other**.
- A server can have both a public IP and a private IP; if you want, you can turn the public IP off and make the server **private-only** ([Turning off the public IP](https://www.gyrohosting.com/en/knowledgebase/article/gyro-cloud-istanbul-turn-off-public-ip)).
- Private networking exists **only on Gyro Cloud Istanbul** (tr-ist-1) servers.

> **Info**
> 
> You manage private networks in two places: the **Private network (VPC)** tool on the server's service page (My Services → your server) and **Gyro Console → Private networks (VPC)**. The same operations are available through the API, the `gyro` command line and Terraform.

## 2. How is isolation achieved?

Every subnet runs on its own virtual LAN in our network. Isolation has five layers:

1. VLAN tags sent by your server are ignored; subnets are separated at the network level.
2. On private NICs, MAC address changes, forged MAC transmits and traffic sniffing are **disabled**.
3. You can only attach a server to a subnet in **your own account** (the same rule in the panel, API, CLI and Terraform).
4. The VPC gateway runs every VPC in its own network stack; there is no path between VPCs.
5. Private networks are carried only inside our server infrastructure; they are never exposed to the internet or other customers.

## 3. Limits

|  | Default |
| --- | --- |
| VPCs per account | 3 |
| Subnets per VPC | 4 |
| Private NICs per server | 3 |
| VPCs a server can join | 1 (it may use several subnets of that VPC) |
| Port forwards per VPC | 20 |
| VPC size | /16 to /24, private range (10.x, 172.16-31.x, 192.168.x) |
| Subnet size | /20 to /28 |
| Reserved addresses | in each subnet `.0` to `.4` (`.1` is the gateway) and the last address |

Unavailable ranges (the platform's own networks): `10.42.0.0/16`, `10.43.0.0/16`, `10.200.0.0/16`, `10.250.0.0/16`, `10.255.0.0/16`.

If you need more, open a **support ticket**; limits are raised per account ([Account limits and quotas](https://www.gyrohosting.com/en/knowledgebase/article/hesap-sinirlari-ve-kotalar)).

## 4. Price

VPCs, subnets and private traffic are **free.** Only the **VPC gateway** (internet egress, port forwarding) is charged while it is on: **about TRY 277.79 per month (4.99 €)**, metered hourly from your prepaid balance with a minimum of 1 hour; charging stops when you turn the gateway off. The euro price is fixed; the TRY amount follows the daily exchange rate (VAT excluded) and the current TRY equivalent is shown in the panel.

## 5. Frequently asked questions

**Which products have it?**

In this release only Gyro Cloud Istanbul servers.

**Do servers in the same VPC see each other even if they run on different hosts?**

Yes. The private network spans all our Istanbul server infrastructure; your server keeps its private IP even if it is moved.

**Can I connect two VPCs?**

No, VPCs are completely separate from each other.

**Is private traffic charged?**

No, traffic inside the same VPC is free.

## Next step

- [Creating a VPC and subnets](https://www.gyrohosting.com/en/knowledgebase/article/gyro-cloud-istanbul-create-vpc-subnet)
- [Attaching a server to a private network](https://www.gyrohosting.com/en/knowledgebase/article/gyro-cloud-istanbul-attach-server-private-network)
- [VPC gateway: internet egress and port forwarding](https://www.gyrohosting.com/en/knowledgebase/article/gyro-cloud-istanbul-vpc-gateway-nat)