Cloud Gateway
Cloud Gateway is a managed router that hostd automatically deploys for your private network. It allows you to configure NAT, port forwarding, WireGuard VPN, and a reverse proxy.
What is it?
It is a completely isolated router virtual machine. Its main difference from your standard VMs is that you do not have SSH or console access to it. All settings are configured exclusively through the hostd portal interface, and the infrastructure automatically applies them under the hood.
To ensure reliability, Cloud Gateway runs with High Availability (HA) enabled right from the moment of creation. If the physical server hosting your router fails, the system will automatically restart it on another working node (this usually takes less than a minute). You do not need to configure HA for it manually.
How to enable Cloud Gateway
You can activate it when creating a new private network (Network → Private networks → New → Enable Cloud Gateway) or add it later to an existing VLAN (using the Enable Cloud Gateway button in the network’s menu).
The router will automatically occupy the .1 IP address in your subnet and act as the default gateway for all connected VMs. Therefore, make sure this address is free.
What you can configure
- Port forwarding — forwarding ports from the router’s public IP address to the internal IP addresses of your VMs.
- WireGuard — secure VPN access to the private network for your administrators or developers.
- Reverse proxy — configuring an HTTP/HTTPS proxy with automatic Let’s Encrypt SSL certificate generation.
Watch out
You can completely delete Cloud Gateway at any time to stop its billing. The private network (VLAN) itself will not be deleted, and your VMs will continue to communicate with each other over the local network.
Next steps
- Private network — how to configure a VLAN.
- Resource usage — router billing.