Cloud network engineers
VPC Networking: How to Create a Private Network, Subnet, and Router
Build foundational cloud networking for isolated workloads and controlled outbound access.
10 min read · Updated 2026-04-01
Prerequisites
- • Project with network creation permissions
- • Planned CIDR ranges that avoid overlap with existing networks
- • External network available for router gateway attachment
Implementation workflow
This runbook focuses on a reliable sequence for provisioning and validating the service through the cloud console.
- Open Network > Networks and create a private network.
- Create a subnet with CIDR, gateway, and DNS resolver settings.
- Create a router and attach it to the external network as gateway.
- Connect the private subnet interface to the router.
- Launch a test VM into the subnet and validate routing behavior.
Validation and operator checks
After deployment, verify connectivity, security boundaries, and backup posture before promoting workloads to production.
Operator tips
- • Reserve headroom in CIDR planning for future service growth.
- • Use separate subnets per tier to enforce cleaner security boundaries.
- • Document router and subnet relationships for incident triage.