Sovereign VirtualPrivate Cloud.₹0/GB insidethe VPC.
Hardware-isolated multi-tenant L2/L3 networking running across dual Intel Xeon Platinum 8168 & AMD EPYC bare-metal hypervisors in Noida. Tenant bandwidth is 1 Gbps shared. Build zero-trust private interconnects, subnets, custom routing, and site-to-site cryptographic tunnels without unmetered transit taxes.
- Encapsulation
- Geneve overlay
- DPDP Boundary
- 100% Domestic
- Default MTU
- 1500 MTU (9000 jumbo frames planned)
- Intra-VPC Egress
- ₹0.00 / Free
datadack vpc create --region noida --cidr 10.100.0.0/16 --mtu 1500Kernel-Level Virtualization.Enforced Isolation.
Why conventional multi-tenant hyperscaler networks fail national sovereignty, and how DataDack re-engineers isolation at the Linux kernel vSwitch with Geneve VNIs and eBPF filtering.
DPDP Act 2023 & In-Country Residency
100% of network frames and control-plane telemetry are physically confined to Noida Tier-IV data halls. Zero exposure to the US CLOUD Act or foreign extraterritorial discovery subpoenas.
Geneve VNI Segmentation
Tenant packet isolation enforced by per-VPC Geneve VNIs and eBPF kernel filters, preventing hypervisor side-channel exploitation and shared noisy-neighbor bridge saturation.
Statutory Flat-Rate Economics
A ₹2,357.9/mo NAT gateway at ₹3.23/GB processed, against AWS's ₹3,413/mo and $0.056/GB, and no $0.01/GB cross-AZ tax: intra-region transfer across your subnets is ₹0.00.
3-Tier Enterprise VPC Topology& Formal Reachability
Dual-homed ingress with edge DDoS protection.
Next-hop routed via NAT Gateway. Zero external inbound exposure.
No internet gateways or external routes. DPDP enforced.
Every path,formally enforced.
| Destination CIDR | Target / Next-Hop | Scope Tier | Status | Traversal Cost |
|---|---|---|---|---|
| 10.100.0.0/16 | local (Kernel vSwitch) | All Subnets | Active (0.1ms) | ₹0.00 / Free |
| 0.0.0.0/0 (Public DMZ) | igw-sovereign-01 | 10.100.1.0/24 (DMZ) | Active | Standard Transit |
| 0.0.0.0/0 (Private Apps) | nat-del1-primary | 10.100.2.0/24 (App Tier) | Active (0.35ms) | ₹3.23/GB |
| 192.168.99.0/24 (Corp Mesh) | wg-gateway-01 | Site-to-Site Tunnel | Active (Kernel Crypto) | ₹999/mo gateway |
Core VPC CapabilitiesBuilt on Sovereign Silicon
Every DataDack VPC is backed by Geneve segmentation and eBPF filtering in the hypervisor kernel.
Addressing & subnets
Flexible, isolated and fully controlled networking.Isolated VPC Networks
Full control of private address allocations across 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 ranges with secondary CIDR attaching.
Tiered Subnet Meshes
Carve isolated public DMZs, private application clusters, and air-gapped database zones with deterministic local switching and zero hairpin penalties.
Filtering & routing
Secure traffic flow with kernel-level enforcement.Stateful Security Groups
Packet filtering executed in hypervisor eBPF prior to guest VM execution. Ingress and egress state tracking with zero packet overhead.
Custom Route Tables
Direct traffic down designated egress paths via Internet Gateways, Managed NAT, VPC Peering Routers, or custom WireGuard cryptographic appliances.
Verification & interfaces
Validate and connect with confidence.Reachability Analyzer
Automated formal verification engine that validates mathematical packet paths across your route tables and firewalls without injecting traffic.
Elastic Network Interfaces (ENIs)
Hot-plug virtual network adapters into instances on the fly. Enable dual-homed appliances, dedicated management NICs, and high-availability failover scripts.
High-Performance SovereignWireGuard & OpenVPN Tunnels
Connect remote engineering teams, office datacenters, or on-premise hardware directly into your VPC subnets. A managed Client VPN gateway is ₹999/mo per gateway + ₹0.25/user-hr (capped at ₹149/user/mo), with 25 GB of transfer included per user.
WireGuard Kernel Appliance
Lightweight, state-of-the-art cryptography built directly into the Linux kernel. Eliminates handshake latency with ChaCha20-Poly1305 ciphers.
- Instant QR-code onboarding for engineers via Console
- Automated ChaCha20-Poly1305 key generation & rotation
- Native binding to any VPC subnet CIDR range
- Per-user hours capped at ₹149 a month
OpenVPN Enterprise Gateway
Engineered for organizations bound by enterprise compliance standards requiring strict TLS certificates, SAML 2.0 integration, and hardware token Multi-Factor Authentication.
- Full TOTP / Google Authenticator / Duo MFA enforcement
- SAML 2.0 / Okta / Azure AD identity directory sync
- TCP 443 fallback for restricted corporate firewall bypass
- Centralized access log streams with IP attribution audit
Pricing Matrix vsAWS Mumbai (ap-south-1)
Hyperscalers monetize networking through convoluted egress penalties, data-processing taxes, and complex routing tariffs. DataDack provides predictable flat infrastructure economics.
| Network Primitive / Component | DataDack Sovereign VPC | AWS Mumbai (ap-south-1) | Structural Savings |
|---|---|---|---|
Static / Elastic IPv4 Address Dedicated Indian APNIC routed IP | ₹200 / mo flat No idle or unattached penalties | $0.005/hr ≈ ₹305 / mo + $0.005/hr idle unattached penalty | Save ~34% + No Idle Tax |
Managed NAT Gateway Outbound private subnet internet translation | ₹2,357.9 / mo + ₹3.23/GB data processed | $0.056/hr ≈ ₹3,413 / mo + $0.056/GB data processing | ~31% Lower Base, 31% lower per GB |
Zero-Trust VPN (WireGuard / OpenVPN) Site-to-site & remote engineer gateway | ₹999 / mo per gateway + ₹0.25/user-hr, capped at ₹149/user/mo | AWS Client VPN $0.05/hr conn + $0.05/hr endpoint | 25 GB / user included |
VPC Peering Interconnect Direct cross-VPC routing | ₹0.00 / Free Unmetered intra-region routing | $0.01 / GB Billed each direction on transfer | 100% Free Unmetered |
Edge DDoS Protection Inline SYN-flood & UDP reflection filter | ₹0.00 / Included Standard Always-on, no add-on subscription | AWS Shield Advanced $3,000 / mo base subscription | Zero Cost Add-on |
Cross-Subnet Data Transfer Replication & database sync | ₹0.00 / Free Unmetered 1500 MTU (9000 jumbo frames planned), 1 Gbps shared | $0.01 / GB Cross-AZ egress penalty | Zero Metered Trap |
* AWS Mumbai (ap-south-1) pricing based on official published rates for NAT Gateway & data processing fees + IPv4 address charges at 1 USD = 83.5 INR equivalent, 730 hours/month.
Automate VPC Provisioningin Seconds
Declarative HCL snippets, zero-friction CLI commands, and REST APIs for automated GitOps workflows.
# Terraform HCL snippet for DataDack Sovereign VPC
resource "datadack_vpc" "prod" {
name = "vpc-noida-production"
cidr_block = "10.100.0.0/16"
region = "ap-south-3" # Noida Tier-IV Facility
mtu = 1500
description = "Production sovereign network perimeter"
}
resource "datadack_subnet" "public_dmz" {
vpc_id = datadack_vpc.prod.id
name = "public-dmz-01"
cidr_block = "10.100.1.0/24"
type = "public"
enable_nat = true
}
resource "datadack_subnet" "private_app" {
vpc_id = datadack_vpc.prod.id
name = "private-app-02"
cidr_block = "10.100.2.0/24"
type = "private"
nat_gateway_id = datadack_subnet.public_dmz.nat_gateway_id
}
resource "datadack_security_group" "app_sg" {
vpc_id = datadack_vpc.prod.id
name = "sg-app-internal-only"
description = "Allow inbound HTTP/gRPC only from Public DMZ"
ingress {
protocol = "tcp"
ports = ["8000", "8080"]
cidr_blocks = ["10.100.1.0/24"]
}
}# Deploy complete 3-tier VPC via DataDack CLI v2
datadack vpc create \
--name "vpc-noida-production" \
--region ap-south-3 \
--cidr 10.100.0.0/16 \
--mtu 1500
datadack subnet create \
--vpc-name "vpc-noida-production" \
--name "public-dmz-01" \
--cidr 10.100.1.0/24 \
--enable-nat
datadack subnet create \
--vpc-name "vpc-noida-production" \
--name "private-app-02" \
--cidr 10.100.2.0/24 \
--route-table-target nat-del1-primary# Create VPC via Sovereign Control Plane REST API
curl -X POST https://api.datadack.cloud/v1/vpcs \
-H "Authorization: Bearer $DATADACK_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "vpc-noida-production",
"region": "ap-south-3",
"cidr": "10.100.0.0/16",
"mtu": 1500,
"sovereignty_lock": true
}'99.99% Network Uptime SLA &Direct Tier-IV NOC Escalation
Our software-defined fabric uses automated BGP failover, with tenant bandwidth of 1 Gbps shared. Fully compliant with the Digital Personal Data Protection (DPDP) Act 2023, data residency never leaves sovereign Indian territory.
- Campus:
- Yotta NM1 & CtrlS DC2
- NIXI Interconnect:
- Delhi Exchange
- Jurisdiction:
- 100% Indian Territory
- Tenant Isolation:
- Geneve VNI + eBPF
All routing control-planes and telemetry stay inside sovereign data halls with continuous audit trails.
Questions about VPC networking
What is isolated, what the gateways cost, and what crossing the boundary is charged at.