How to Create a Network

How-to · Updated Jun 2026

Coming from another cloud?

▸AWS·Amazon Virtual Private Cloud

Amazon Virtual Private Cloudhigh

AWS VPC is regional with CIDR /16-/28.
OpenStack Networks project-scoped L2 with flexible CIDR.
AWS requires IGW for public.
OpenStack provider nets or floating IPs.

AWS docs ↗

▸Azure·Virtual Network (VNet)

Virtual Network (VNet)high

Azure VNets are strictly regional Layer 3 overlays scoped to one subscription with no L2 VLAN support ().
VNets and subnets creation free, but subnets min /29 with Azure reserving 5 IPs per subnet ().
Managed via ARM REST APIs/PowerShell/CLI vs Neutron REST API.
Isolated per subscription; peering for cross-VNet connectivity vs OpenStack project networks connected via routers.

Azure docs ↗

▸DigitalOcean·VPC (VPC Network)

VPC (VPC Network)high

Region-scoped: a VPC network is created in a specific datacenter region and resources must be in that same region to be attached, whereas OpenStack Neutron networks/subnets are generally available across all AZs in a region and attachments are controlled by network reachability rather than an explicit region slug ().
Resource migration is limited: Droplets require snapshot/recreate to move between VPCs and some resources (Kubernetes clusters, load balancers, NAT gateways) cannot be migrated between VPCs, whereas in OpenStack you typically can attach/detach ports or move router interfaces without recreating servers (behavior depends on deployment, but Neutron’s object model supports it) ().
NAT is a managed NAT Gateway with tiered capacity (1–16 increments; each increment gives 25 Mbps symmetrical bandwidth and 100 GiB outbound transfer/month) and can be set as the default gateway for the VPC, whereas OpenStack commonly expresses egress via Neutron routers with SNAT and does not use this specific ‘size tier’ model ().
Security-policy coupling differs: DigitalOcean notes Cloud Firewall rules affect both public and VPC traffic and rules must specify whether they apply to the public or private IP range, whereas in OpenStack security groups are generally applied to ports and are not framed as “public vs private IP range” rule modes ().

DigitalOcean docs ↗

▸Google Cloud·VPC Network

VPC Networkhigh

GCP VPC is global (spans all regions) whereas OpenStack Neutron networks are project-scoped and region-local.
GCP uses shared VPC for cross-project networking (requires org-level config); OpenStack uses shared networks via admin.
Subnets in GCP are regional, auto-mode creates one per region automatically; OpenStack requires explicit subnet creation.
GCP VPC Flow Logs per-subnet; OpenStack has no native equivalent without external tools.

Google Cloud docs ↗

▸Hetzner·Networks

Networkshigh

Private networks (vSwitch-like but called Networks) created via API, up to 10.0.0.0/8 subnets, attach to servers/LBs.
CCM supports route controller for pod networking when enabled; no native provider networks like OpenStack.
Limited to Hetzner regions, IPv4 only for private (IPv6 public).
Networks are free with no usage charges, unlike potential metering in OpenStack clouds ().

Hetzner docs ↗

How to create a network

Create a private network with a subnet to connect your instances. Each network requires at least one subnet that defines the IP address range, DNS servers, and gateway settings.

Prerequisites

ConsoleLogged in to the Quake AI console
CLIOpenStack CLI installed and authenticated (clouds.yaml or openrc sourced)
APIAPI token generated with $OS_TOKEN and service endpoint variables set
TerraformOpenTofu installed with Quake AI provider configured

Windows: CLI examples use bash. Set up a Linux CLI environment on Windows before proceeding.

Create the network and subnet#

Select Network > Networks > Create Network.
Enter a Network Name and an optional Description.
Leave the Create Subnet checkbox selected (the default) and fill in the subnet fields:
- Subnet Name: a name for the subnet.
- IP Version: combobox defaulting to ipv4.
- CIDR: a private address range such as 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16.
- DNS: a multi-line field that takes one DNS server address per line. For a public DNS, enter Cloudflare's 1.1.1.1 and 1.0.0.1 on separate lines. Comma- or space-separated addresses fail validation.
Select OK to create the network.

Advanced Options

Select Expand Advanced Options to reveal:

Disable Gateway (off by default; enabling this prevents the subnet from having a default gateway, an inverse-toggle: checking it disables the gateway).
Gateway IP (the address that acts as the subnet's default gateway when the toggle above is off).
DHCP (Enabled / Disabled radio buttons; default Enabled).
Allocation Pools (the in-subnet IP ranges Neutron may hand out).
Host Routes (static routes injected into instance DHCP leases).
MTU (leave blank for the default).
Port Security Enabled (enabled by default; when disabled, the network bypasses all anti-spoofing and security-group enforcement at the port level). Security groups themselves attach to ports and are managed on Network > Security Groups; this field controls the network-level default for port security, not security-group selection.

Verify the result#

Navigate to Network > Networks. The new network appears in the list with its associated subnet.

Usage Guidelines

The sample code, software libraries, command line tools, proofs of concept, templates, and other related technology on this page (including any of the foregoing that is provided by Quake AI personnel) is provided to you as Quake AI Content under the Quake AI Customer Agreement, or the relevant written agreement between you and Quake AI (whichever applies). Do not use this Quake AI Content in your production accounts, or on production or other critical data. You are responsible for testing, securing, and optimizing the Quake AI Content (such as sample code) as appropriate for production grade use based on your specific quality control practices and standards. Deploying Quake AI Content may incur Quake AI charges for creating or using Quake AI chargeable resources, such as running Compute instances or storing data in Object Storage. Your use is also subject to the Acceptable Use Policy.

For the full policy, see Usage Guidelines.

Last validated: 03.06.2026

Was this page helpful?

How to Create a Network

How to create a network

Create the network and subnet#

Verify the result#

See also#

Usage Guidelines

See Also