Dedicated VPC
Introduction
You can request a Dedicated VPC to be provisioned for you on Hasura Cloud. With Dedicated VPC, you will have better isolation in terms of:
- Compute for running projects on Hasura Cloud
- Network isolation
- A dedicated outbound IP address from Hasura Cloud
- The ability to connect your data sources and other endpoints over a private and secure network with VPC Peering
- Control over the version upgrades
Dedicated VPC is only available as a part of the Cloud Enterprise plan. Peering requests are available for AWS and GCP. Contact Sales to know more.
Creating a VPC
Once the feature is enabled for your account, you'll see a new tab on the dashboard called VPCs. All existing VPCs
can be found under VPCs tab on cloud dashboard. Only VPC owner can initiate a request to create a new VPC. To request a new VPC, click
on the Create New VPC button on top. This will open a form with the following fields:
Enter the following details:
| Field | Description |
|---|---|
| Cloud Provider | The cloud provider where the VPC should be provisioned. |
| Region | The region where the VPC should be provisioned (note that projects will also be created in this region, too). |
| VPC Name | A display name for Hasura Dashboard. |
| VPC CIDR | A valid private IPV4 address range (/16) that should be used with this VPC. |
For example 172.16.0.0/16, 10.10.0.0/16 are valid CIDR ranges. However, it cannot be 10.2.0.0/16.
Additionally, your VPC CIDR cannot conflict with VPCs that you intend to peer with this VPC.
Once you submit the request, the VPC will appear as Pending. It will take about 10-20 minutes for your VPC to be
provisioned. Once it is provisioned, you will be able to see the VPC's details from your Cloud dashboard and create
peering and projects. You will receive an email when the VPC creation is successful.
If the provisioning fails, you'll see the VPC in a Failed state. Reach out to support to
resolve this.
Create projects within the VPC
Once the VPC is provisioned, VPC owner or VPC manager can create a project under the VPC by:
- Clicking on the New Project button from the Projects tab and select Create VPC Project
- Clicking on the New Project button in VPC details screen
All projects within a VPC are listed under Projects.
If peering is not enabled, the project resides in a dedicated VPC on the Hasura side, but the traffic from the project to the database will be routed over the public internet.
Get in touch with us to migrate your existing Hasura Project to the VPC.
VPC Peering
VPC Peering is necessary to establish a private and secure one-to-one connection from Hasura to your infrastructure. This includes databases, Remote Schemas, or Event / Schedueld Trigger endpoints running under your VPC.
Follow the Cloud provider-specific instruction to create VPC peering requests:
VPC Collaborators
You can invite collaborators to your VPC and grant them either of the following roles:
Read more about VPC Collaborators.
