Key networking concepts
- Public IPs – routable addresses used to reach your services from the internet.
- Private networks – isolated networks for east-west traffic between instances.
- Firewalls – stateful rules controlling allowed ingress and egress.
Typical topology
A common production topology looks like this:
- Public-facing load balancers or reverse proxies.
- Application instances on a private network.
- Databases and queues on separate subnets.
Planning subnets
When designing private networks, choose CIDR ranges that don't overlap with your on-premises or VPN ranges to avoid routing conflicts.