--- schema_version: "1" id: 30bbe7c570b7bccf92410cfc3de2fd53043e58df4c2b7f34181c776373d9c73f title: Creating Private Spaces collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/cloudhub-2/ps-create-configure.md canonical_url: https://docs.mulesoft.com/cloudhub-2/ps-create-configure source_site: docs.mulesoft.com content_type: documentation content_hash: 1b65157caf726f5e22da0b842a33051b97c841de14d7e56c6ad4f5d21c2a6994 description: MuleSoft Documentation Site latest: true --- --- product: CloudHub 2.0 --- # Creating Private Spaces > For the full documentation index, see: https://docs.mulesoft.com/llms.txt To extend your network to Anypoint Platform, create a _private space_, a virtual, private, and isolated network hosted in CloudHub 2.0, to deploy your apps to. ## Create a Private Space 1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**. The page shows any private spaces associated with the selected business group. 2. Click **Create private space**. 3. Enter a [name](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#private-space-name) for your private space and click **Create**. You cannot rename your private space after you create it. ## Create a Private Network > [!IMPORTANT] You can’t change the private network configuration after it’s created. To change the > configuration, delete the private space and create it again. See > [Managing Private Spaces](https://docs.mulesoft.com/cloudhub-2/ps-manage). 1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**. The page shows any private spaces associated with the selected business group. 2. Click the name of the private space to manage. 3. On the **Network** tab, click **Create Private Network**. 4. On the **Create Private Network** page: 1. Select the [region](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#private-network-region) where you want your apps to run. If you select **Canada (Central)**, subnet count depends on your control plane. Existing MuleSoft Government Cloud private spaces in this region don’t receive three-subnet support automatically. See [Canada (Central) Private Space Subnet Availability](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#ca-central-subnet-availability). 5. Enter the [CIDR block](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#cidr-block), which is the range of IP addresses that your apps can use. 6. Optionally, reserve your corporate private network’s CIDRs to connect to your private space by entering them in a comma-separated list. When you reserve your corporate CIDRs, Anypoint Platform creates IPs for your private space without using these blocks to prevent conflicts with your corporate private network. 7. Click **Create**. The private network can take up to 30 minutes to create. \+ While the network is created, you can [create a connection to an external network](#create-connection-to-external-network). . After the network creation succeeds, you can [deploy an application](https://docs.mulesoft.com/cloudhub-2/ch2-deploy-private-space) to test the private network connection. If the private network creation fails, delete it and click **Create Private Network** to try again. ### Resolve Private Domains in Your Internal Network If your corporate network uses internal DNS servers to resolve requests to custom domains, configure the private space with these IP addresses and domain names. The private space uses your internal DNS to resolve internal host names of your private network (make sure your applications call the backend resources by FQDN). 1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**. 2. Click the name of the private space to manage. 3. On the **Network** tab, click the **Configure** link for **Internal DNS servers**. 4. Enter the (comma-separated) [server IP addresses](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#server-ip-addresses) for your internal DNS servers. 5. Enter the (comma-separated) [domain addresses](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#domains) to be resolved by internal DNS. 6. Click **Save**. After you configure internal DNS, the **Network** tab indicates the number of configured server IP addresses and domains: ![Internal DNS configuration in the Private Network section](/mulesoft/current/en-us/cloudhub-2/_images/internal-dns.png) > [!NOTE] You can’t add MuleSoft domains or public domains as private space internal DNS. ## Create a Connection to an External Network After you create your private network, connect it to an external network using a VPN or transit gateway attachment. 1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**. 2. Click the name of the private space to manage. 3. On the **Network** tab, click **Create Connection**. 4. On the **Create Connection** page, select the connection type, enter the [VPN](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#vpn-name) or [transit gateway](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info#transit-gateway-name)connection name, and click **Next**. Depending on the connection type you selected: - **VPN**: Follow the steps in [Creating VPN Connections](https://docs.mulesoft.com/cloudhub-2/ps-create-configure-vpn). - **Transit Gateway**: Follow the steps in [Creating Transit Gateway Attachments](https://docs.mulesoft.com/cloudhub-2/ps-create-configure-tgw). ## See Also - [Gathering Required Setup Information](https://docs.mulesoft.com/cloudhub-2/ps-gather-setup-info) - [Creating VPN Connections](https://docs.mulesoft.com/cloudhub-2/ps-create-configure-vpn) - [Creating Transit Gateway Attachments](https://docs.mulesoft.com/cloudhub-2/ps-create-configure-tgw) - [Configuring Private Spaces](https://docs.mulesoft.com/cloudhub-2/ps-configure) - [Managing Private Spaces](https://docs.mulesoft.com/cloudhub-2/ps-manage)