Overview

Private networking lets several Pods communicate with each other over a private network that is not exposed to the public internet. This is useful for database clusters, internal APIs and application tiers. This article explains how private networking works on ALYPOD and how to configure it.

Before you begin

• Two or more Pods, ideally in the same datacenter location.
• Access to the ALYPOD Console.
• Root/sudo access on each Pod.

How it works

Each Pod can be attached to a private network with its own private IP range (for example 10.10.0.0/24). Traffic between Pods on the same private network stays inside the datacenter and does not consume public bandwidth. Pods on different private networks cannot see each other.

Steps

1. In the ALYPOD Console, open your Pod and go to Networking.
2. Select Private network and either attach the Pod to an existing network or create a new one with a name and CIDR range.
3. Repeat for the other Pods you want on the same network, assigning each a unique IP.
4. On each Linux Pod, verify the private interface and address:

bash ip -brief addr ip route

1. Test that the Pods can reach each other over the private address:

bash ping -c 3 10.10.0.2

1. Configure your applications and firewall rules to use the private addresses. For example, in ufw:

bash sudo ufw allow from 10.10.0.0/24

Good practice

• Assign static private IPs in the Console so addresses do not change.
• Keep public-facing services on public IPs and bind internal services (databases, caches) to the private interface only.
• Use the private range for replication and backups between your own Pods.

Troubleshooting

• Problem: Pods cannot ping each other. Solution: Confirm both are attached to the same private network and CIDR, and that the OS firewall allows the private subnet.
• Problem: Traffic seems to go over the public IP. Solution: Use the private addresses explicitly in your configuration; check with ip route get 10.10.0.2.

Related articles

• [Understanding the ALYPOD network and datacenters]
• [Understanding IPv4 and IPv6 addresses]