An overview of DigitalOcean's VPC and network features in general

1. UX DESIGN & RESEARCH | 02.21.20

2. Intro & Agenda

3. Rafael Rosa
Senior Product Manager
for networking products
Joined DO in 2016
Working on clouds since 2009
coding since 1995
Intro
DigitalOcean - VPC

4. Agenda
DigitalOcean - VPC
● What's a VPC anyway?
● Setting up VPCs
● Use cases for using multiple VPCs
● Demo of a simple website using VPCs, Cloud Firewalls and Load
Balancers
● Demo of an internet gateway in action
● Limitations and implications on Bandwidth Billing
● Resources and Questions

5. What's a VPC anyway?

6. ● VPCs are an evolution of Private Networks
● They provide fully isolated private networks for customers
● Users can create multiple VPCs on each region
● They can have an auto generated IP range or a custom IP range
○ Sizes vary from a /24 to /16, the default is /20
○ Most valid RFC 1918 ranges are acceptable, there are a few
documented exceptions
What's a VPC?
DigitalOcean - VPC

7. Setting up VPCs

8. ● Demo time
● Product documentation can be found at:
https://digitalocean.com/docs/networking/vpc
● API documentation can be found at:
https://developers.digitalocean.com/documentation/v2/#vpcs
Setting up VPCs
DigitalOcean - VPC

9. Use cases for multiple
VPCs

10. Environment Isolation
DigitalOcean - VPC
● It's common to have different
development environments
● Isolating them helps to avoid
accessing resources by mistake
● Example: deploying a database
schema change intended for
development in a production env

11. Tenant Isolation
DigitalOcean - VPC
● Having multiple tenants in the
same infrastructure might not
a good idea
● Splitting them in multiple VPCs
will improve data isolation and avoid
mistakes
● Example: web agencies

12. Demo - VPCs + Cloud
Firewalls + Load Balancers

13. Demo - Internet Gateway

14. Internet Gateway
DigitalOcean - VPC

15. Limitations and
implications for
Bandwidth Billing

16. ● We do not support VPC networks between resources in different
datacenter regions
● You cannot migrate load balancers or Kubernetes clusters between
VPC networks. Droplets can be migrated between networks using
snapshots, and databases can be directly migrated in their Settings
tab
● Resources do not currently support multiple private network
interfaces and cannot be placed in multiple VPC networks
Limitations
DigitalOcean - VPC

17. ● VPC network ranges cannot overlap with the ranges of other
networks in the same account. The IP ranges available for VPC
networks are the same as those outlined in RFC 1918
● We reserve a few addresses in each VPC network and subnet for
internal use, including the network ID and the broadcast ID. Please
see docs for an up to date list of reserved ranges
● VPCs do not support multicast or broadcast
Limitations
DigitalOcean - VPC

18. ● Bandwidth Billing at DigitalOcean has two parts:
○ An allowance that grows with the number of Droplets you have
○ Usage of public traffic from your Droplets
● Any traffic inside a VPC goes over the private interface, so it won't
count towards your allowance
● If you have a lot of traffic between Droplets, in the same region, use a
VPC
● Visit our new Bandwidth Calculator
https://digitalocean.com/community/tools/bandwidth
Implications for Bandwidth Billing
DigitalOcean - VPC

19. ● Product documentation can be found at:
https://digitalocean.com/docs/networking/vpc
● API documentation can be found at:
https://developers.digitalocean.com/documentation/v2/#vpcs
● DigitalOcean Community
https://digitalocean.com/community
● DigitalOcean on YouTube (webinars, interviews, events)
https://youtube.com/digitalocean
● New to DigitalOcean? Get US$100 credit when you sign up
https://do.co/tryvpc
Resources and Questions
DigitalOcean - VPC

20. Thank You