---
schema_version: "1"
id: 1314210b6521b9eae6f6a8d8ac2a542eb3bcbad155089eb6e9bbe1e5a6c805c7
title: Virtual Private Cloud
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/cloudhub/virtual-private-cloud.md
canonical_url: https://docs.mulesoft.com/cloudhub/virtual-private-cloud
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 17c1b82f38cb432fe4ccd9229e7dd383a1deb725d50ddc55ecbacf7926a7b9c7
description: MuleSoft Documentation Site
latest: true
---
---
product: CloudHub
---

# Virtual Private Cloud

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

The Anypoint Virtual Private Cloud (VPC) offering allows you to create a virtual, private, and
isolated network segment in the cloud to host your CloudHub workers.

Connecting to your Anypoint VPC extends your corporate network and allows CloudHub workers to access
resources behind your corporate firewall. You can connect on-premises data centers through a secured
VPN tunnel or a transit gateway attachment, or connect a private AWS VPC to your Anypoint VPC
through VPC peering or AWS Direct Connect.

The base Anypoint VPC subscription includes two Anypoint VPCs and each Anypoint VPC can be
associated with multiple environments. This allows you, for example, to have one isolated network
for your production environment, and another for your non-productions environments, for example, QA
and staging. Your licensing requirements depend on your specific deployment scenario.

Anypoint VPC supports different Amazon regions. During setup, you need to specify which Amazon
region you want. You can even have multiple Anypoint VPCs inside a single Amazon region.

![virtual private cloud 78b5f](/mulesoft/current/en-us/cloudhub/_images/virtual-private-cloud-78b5f.png)

Each Anypoint VPC allows you to configure firewall rules to apply to your workers. You can choose to
expose or block your custom ports and even block requests to your apps coming from CloudHub’s shared
load balancer.

If you use dedicated load balancers, you can configure one or more dedicated load balancers to
validate requests using your own SSL certificates, and to map input URLs to call to different
CloudHub applications.

Combining firewall rules and dedicated load balancers configurations, enables you to fine tune how
external services reach your applications.

VPC-level network traffic metrics aren’t available in Anypoint Monitoring. For _application-level_
traffic metrics, see
[Can I get VPC-level network traffic metrics from Anypoint Monitoring?](https://docs.mulesoft.com/monitoring/am-faq#vpc-traffic-metrics).

## See Also

- [Anypoint VPC Network Architecture](https://docs.mulesoft.com/cloudhub/vpc-architecture-concept)

- [Provision an Anypoint VPC](https://docs.mulesoft.com/cloudhub/vpc-provisioning-concept)

- [CloudHub Dedicated Load Balancer](https://docs.mulesoft.com/cloudhub/cloudhub-dedicated-load-balancer)

- [Anypoint VPC Firewall Rules](https://docs.mulesoft.com/cloudhub/vpc-firewall-rules-concept)

- [CloudHub Architecture](https://docs.mulesoft.com/cloudhub/cloudhub-architecture)