Networking

Use networks, subnets, IP address sets, and security groups to isolate traffic and control access for databases, Kubernetes clusters, and other resources on your Hetzner account.

Components

Component Description
Network A VPC-style IP space defined by a CIDR range
Subnet A segment of a network, with optional private and hybrid settings
IP address set A named list of IP addresses or CIDR ranges for security group rules
Security group Inbound and outbound rules that allow traffic by port, protocol, and source or destination

In the console

Choose Networking in the navigation pane, then Networks, Subnets, IP Address Sets, or Security Groups.

Typical order

  1. Create a network.
  2. Create one or more subnets in that network.
  3. (Optional) Create IP address sets for clients or office ranges.
  4. Create security groups and add rules for the ports your services use.
Note Databases and Kubernetes clusters often create managed security groups automatically. You still open client ports (for example, 3306, 5432, or 6443) by editing those groups.

Topics