You don’t have to keep your web, application and database tiers on the same flat network. portvMind Router lets you set up secure, controlled routing between VXLAN-based virtual network segments; each tier stays in its own isolated space.
A router is the component that lets traffic flow between different virtual network segments and also defines the exit point to the external network. It performs, in software, the function of a router in a physical network.
Why does it matter? Because a well-built network architecture is the foundation of security. Your database server doesn’t need to be exposed to the internet — you keep it in a private segment and let only the application tier reach it. Your application servers don’t have to be directly exposed either; a load balancer sits in front of them.
portvMind Router runs on a VXLAN-based network infrastructure. You create your virtual networks, divide them into subnets and define your routing rules. With security groups you set up access control by port and protocol.
Isolate your web, application and data tiers from each other.
You decide which segment can reach the internet.
Add manual routing rules for private network scenarios.
Connect more than one virtual network through a single router.
Router-level segmentation works together with instance-level security rules.
Define a new router and attached network from the console in a few steps.
| Feature | Detail |
|---|---|
| Network technology | VXLAN-based virtual network |
| Subnets | Multiple subnet definitions, custom CIDR ranges |
| Security groups | Ingress and egress rules, by port and protocol |
| Static routes | Supported; can be updated from the console |
| NAT | For outbound internet access |
| Metering | Per minute — for as long as it is active |
For connection scenarios with your on-premises network in hybrid setups, you can talk to our team.
For detailed technical specifications and release notes, see Documentation
Enter your network configuration and see the total cost instantly.
Metering: Per minute — for as long as the router is active
Out-of-region traffic passing through the router is metered separately under Network Data Transfer; in-region traffic is free.
Your resources are metered for as long as they are running — you never pay for time you don’t use. In the console you can define a monthly or period-specific budget and get alerts when your spending reaches the 50%, 80% and 100% thresholds. Turn on overrun forecasting to see in advance whether your current consumption rate will take you over budget by the end of the period.
Alerts arrive by e-mail; with webhook support they can also be sent to Slack, Microsoft Teams or your own application.
Budget alerts send notifications; they do not stop resources automatically. You decide which resource to scale down.
The full pricing modelYes, you can set up separate routers for different projects or environments.
Yes, but if you want external network access or routing between different segments, you need to define a router.
Yes, static routes and segment connections can be updated from the console at any time.
Yes. You can set custom CIDR ranges for your virtual network and divide them into subnets.