Network
10 Gbps isolated VLAN networking
Every customer runs inside their own VLAN segment. Traffic between your servers moves across a 10 Gbps private network without touching internet egress, and neighbouring customers' traffic never appears in your segment.
- Server-to-server private network
- 10 Gbps
- Public internet uplink
- 1 Gbps
- Isolation per customer
- VLAN
- Routing and segmentation
- L2/L3
Why isolated VLANs matter
Servers sharing a network segment can technically observe each other's broadcast traffic. That is both a security surface and a source of noise. A VLAN removes it by logically separating servers that run on the same physical switch.
At EG678 Cloud each customer is assigned their own VLAN ID. If two of your servers sit in the same VLAN they communicate directly at 10 Gbps without consuming internet egress — which makes splitting an application server from a database server both fast and free.
Traffic between segments passes only through rules you define. Policies such as "the application tier may reach the database on port 3306 and see nothing else" are written on FortiGate and pfSense. This markedly reduces lateral movement risk — one compromised server spreading to the rest.
- A dedicated VLAN ID per customer
- 10 Gbps private traffic between servers
- Private traffic does not consume internet quota
- Rule-based transit between segments
- Lateral movement risk contained
Features
What the network layer provides
10 Gbps private backbone
Server-to-server transfers, backup traffic and replication run on the private backbone instead of competing with internet egress.
Logical isolation
VLAN tagging keeps a neighbouring customer's traffic invisible even at the network layer; the broadcast domain covers only your servers.
Rule-based transit
Only permitted ports and sources cross segment boundaries. Policies are written and revised to your request.
Multi-tier architecture
Splitting web, application and database tiers into separate segments carries no additional networking cost.
Built for replication
Database replication and cluster communication run over the low-latency private network, reducing synchronisation lag.
Traffic monitoring
Interface utilisation and anomalous traffic patterns are tracked in Zabbix so capacity is planned before a bottleneck forms.
Where isolated networking makes a difference
- When you split application and database servers and need the traffic between them to be fast and free.
- When systems processing personal data must be separated at network level for compliance.
- When backup traffic in nightly windows must not consume internet bandwidth.
- When database replication needs synchronisation lag kept low.
- When a compromised server must be prevented from spreading to the others.
- When test and production environments must share infrastructure without touching each other.
FAQ
Frequently asked questions
Is private network traffic charged?
No. The 10 Gbps private traffic between your servers is independent of your internet quota. Splitting application and database tiers, moving backup traffic to nightly windows or setting up replication therefore adds no bandwidth cost.
How many VLAN segments can I have?
As many as your architecture requires. A typical setup uses three segments — web, application and database — and organisations isolating a test environment use more. Segment count needs no extra hardware, so it is adjusted on request.
Why is the internet uplink 1 Gbps?
The 10 Gbps figure describes the private network between your servers; 1 Gbps describes the public internet connection. In most enterprise applications external traffic volume is far below private traffic. Where a higher uplink is required, capacity is planned separately.
Can I define my own security rules?
We apply the rule set according to your requirements. You decide which source may reach which port; our technical team writes the configuration on FortiGate and pfSense and takes change requests through the support channel.
More
Related pages
- Cloud ServerEnterprise cloud server infrastructureEnterprise cloud servers on VMware ESXi with NVMe SSD and 10 Gbps isolated VLAN. Deployment, SPLA licensing and Veeam backup included; Istanbul and Europe locations.
- FirewallFortiGate firewallHardware FortiGate protection at the network edge: stateful filtering, IPS signatures, VLAN segment policies and VPN access.
- High AvailabilityHigh availability (HA) architectureHA architectures with single points of failure removed: per-component redundancy, a defined failover scenario and regular rehearsals.
Let's plan your infrastructure together
Tell us what you need and we prepare a configuration and pricing specific to you. We don't sell fixed packages; we build the deployment, licensing and backup plan with you.