<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://wiki.bwcloud-os.de/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Sia</id>
	<title>bwCloud-OS - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://wiki.bwcloud-os.de/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Sia"/>
	<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php/Special:Contributions/Sia"/>
	<updated>2026-04-15T02:44:04Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.44.0</generator>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Blocked_and_Allowed_Ports&amp;diff=2024</id>
		<title>Blocked and Allowed Ports</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Blocked_and_Allowed_Ports&amp;diff=2024"/>
		<updated>2026-04-13T18:29:00Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== General ==&lt;br /&gt;
The &#039;&#039;&#039;data centers of the universities&#039;&#039;&#039; of the bwCloud-OS operating sites &#039;&#039;&#039;block&#039;&#039;&#039; certain ports within their respective networks for security reasons. The bwCloud-OS regions are also affected, because the bwCloud-OS hardware is connected to the &#039;&#039;&#039;central network infrastructure&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Some of the  &#039;&#039;&#039;public IP ranges&#039;&#039;&#039; of the bwCloud-OS regions are part of the &#039;&#039;&#039;BelWü address space&#039;&#039;&#039;. These addresses are logically &#039;&#039;&#039;outside&#039;&#039;&#039; the network ranges of the hosting universities (the locations of bwCloud). The addresses are treated as external by the firewalls of the respective institutions.&lt;br /&gt;
&lt;br /&gt;
== Effects of the Packet Firewall for Users ==&lt;br /&gt;
The most important effect for users is that the &#039;&#039;&#039;network runs more reliably and securely&#039;&#039;&#039;. Many hacker attacks are already blocked at the packet firewall and do not reach the campus or the end systems. The importance of this protection is evident from the fact that attacks now occur almost daily.&lt;br /&gt;
&lt;br /&gt;
However, there are a number of &#039;&#039;&#039;limitations&#039;&#039;&#039; to consider: if services other than the generally allowed ones listed here should be accessible from outside, this must be &#039;&#039;&#039;reported to the university IT&#039;&#039;&#039;. The corresponding service will then be enabled on the packet firewall.&lt;br /&gt;
&lt;br /&gt;
It may also happen that seemingly outbound connections from the instance to certain services do not work. This occurs whenever the external server providing the service tries to establish a return connection to the instance, which is often difficult for the user to verify.&lt;br /&gt;
&lt;br /&gt;
== Region Freiburg ==&lt;br /&gt;
TODO: add&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Transport !! Port !! Protocol !! Description !! Blocking&lt;br /&gt;
|-&lt;br /&gt;
|-&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== Region Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The bwCloud-OS networks are accessible from the outside on &#039;&#039;&#039;all ports&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
The following ports are blocked outbound (for all networks):&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Transport !! Port !! Description&lt;br /&gt;
|-&lt;br /&gt;
| UDP, TCP || 128 || Reserved / GSS X License&lt;br /&gt;
|-&lt;br /&gt;
| TCP || 129-139 || NetBIOS / RPC&lt;br /&gt;
|-&lt;br /&gt;
| UDP, TCP || 445 || SMB / Microsoft-DS&lt;br /&gt;
|-&lt;br /&gt;
| UDP || 11211 || Memcached&lt;br /&gt;
|-&lt;br /&gt;
| UDP || 32100 || IoT&lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
== Region Karlsruhe ==&lt;br /&gt;
In the bwCloud-OS Karlsruhe network, the following ports are blocked:&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Transport !! Port !! Protocol !! Description !! Blocking&lt;br /&gt;
|-&lt;br /&gt;
| UDP, TCP || 111 || RPC Portmapper || Portmapper Security || inbound/outbound&lt;br /&gt;
|}&lt;br /&gt;
== Region Ulm ==&lt;br /&gt;
In the bwCloud-OS Region Ulm the following ports are blocked by the Uni border firewall:&lt;br /&gt;
&lt;br /&gt;
{| class=&amp;quot;wikitable&amp;quot;&lt;br /&gt;
! Transport !! Port Range !! Description / Reason&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||     0 -    19 || lower protocols, like chargen, etc. used for DDoS&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||            23 || telnet&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||            42 || WINS&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||    67 -    69 || DHCP, tftp&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           111 || rpc&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           119 || nntp&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           135 || loc-srv&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||   137 -   139 || SMB&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           143 || IMAP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||   161 -   162 || SNMP&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           427 || SLP, Service Location Protocol&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           445 || ms-ds&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||   512 -   515 || exec, login, who, syslog, shell, printer&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||   520 -   521 || rip, ripng&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           548 || AFP, Apple File Protocol&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           623 || IPMI&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           631 || cups&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||           993 || IMAP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          1900 || SSDP&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          2049 || nfsd&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          3306 || MySQL&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          3389 || RDP&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          4045 || nfs lockd&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          4369 || Erlang Port Mapper Daemon (EPMD)&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          5432 || Postgres&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          6443 || Kubernetes&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||  9000 - 10999 || 3CX RTP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||          9100 || raw printer queues&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP ||         49152 || MS-RPC, allow incoming only established&lt;br /&gt;
|-&lt;br /&gt;
| TCP, UDP || 49664 - 49670 || MS-RPC, allow incoming only established&lt;br /&gt;
|-&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||            25 ||  SMTP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||           110 ||  POP&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||           389 ||  LDAP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||           873 ||  rsync - maybe make a Server ACL like FTP&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||           995 ||  POPS&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          1801 ||  Microsoft Message Queuing Service, CVE-2023-21554&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          5800 ||  VNC&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          5900 ||  VNC&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          5901 ||  VNC, sic may be more...&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          6000 ||  X-Server&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          6379 ||  REDIS&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||          9401 ||  Veeam Backup, CVE-2023-27532&lt;br /&gt;
|-&lt;br /&gt;
| TCP      ||         27017 ||  MongoDB&lt;br /&gt;
|-&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||            53 ||  DNS, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||           123 ||  NTP, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||           177 ||  XDMCP, X Display Manager ...&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||           389 ||  LDAP, UDP-based Amplification Attacks&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          1434 ||  MS-SQL&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          3283 ||  Apple Remote Desktop&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          3478 ||  STUN, with explicit allow list&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          3702 ||  WS-Discovery&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          5093 ||  SPSS License Server&lt;br /&gt;
|-&lt;br /&gt;
|      UDP ||          5353 ||  mDNS, UDP-based Amplification Attacks&lt;br /&gt;
|-&lt;br /&gt;
|}&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2010</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2010"/>
		<updated>2026-03-27T08:55:06Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
 &amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Load Balancers&amp;lt;/strong&amp;gt; are available and allow traffic to be distributed across multiple backend instances via a single public address.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; If not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.  &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Load-Balancers&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;zone prefix&#039;&#039;&#039; (&amp;lt;code&amp;gt;vm&amp;lt;/code&amp;gt;  for instances)&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;!--The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
--&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2009</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2009"/>
		<updated>2026-03-27T08:54:25Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
 &amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Load Balancers&amp;lt;/strong&amp;gt; are available and allow traffic to be distributed across multiple backend instances via a single public address.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; If not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Load-Balancers&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;zone prefix&#039;&#039;&#039; (&amp;lt;code&amp;gt;vm&amp;lt;/code&amp;gt;  for instances)&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;!--The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
--&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=2008</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=2008"/>
		<updated>2026-03-26T06:56:11Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the VM networks in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
The Karlsruhe region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;default-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
* This Network is shared between all projects&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Seperated Networks ===&lt;br /&gt;
If you require a seperated Broadcast Domain you can request one via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
The network will:&lt;br /&gt;
&lt;br /&gt;
* receive a separate private IPv4 Subnet&lt;br /&gt;
* receive a separate public IPv6 Subnet&lt;br /&gt;
* have a separated Broadcast Domain only accessible by authorized projects&lt;br /&gt;
* always use up at least one public IPv4 used for the virtual Router&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Karlsruhe region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses (Routers and Floating IPs) from &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt; will be migrated to a new IPv4 Subnet. &lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* During the Migration all Floating IPs will be redistributed and some minor connection interruptions will happen.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as &#039;&#039;&#039;additional networks&#039;&#039;&#039; that can be assigned to projects &#039;&#039;&#039;upon request&#039;&#039;&#039;. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;IPv6&#039;&#039;&#039;: Direct public connectivity&lt;br /&gt;
* &#039;&#039;&#039;IPv4 (egress)&#039;&#039;&#039;: Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned to a project, a Floating IP can be associated with an instance to provide &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039;&lt;br /&gt;
* A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All dual-stack IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; We do not recommend allocating Floating IPs from the &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt;, because they will be lost after the transition period. Instead, request and associate them from &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2007</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=2007"/>
		<updated>2026-03-24T16:53:12Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
 &amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Load Balancers&amp;lt;/strong&amp;gt; are available and allow traffic to be distributed across multiple backend instances via a single public address.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Load-Balancers&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;zone prefix&#039;&#039;&#039; (&amp;lt;code&amp;gt;vm&amp;lt;/code&amp;gt;  for instances)&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&amp;lt;!--The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
--&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_SSH&amp;diff=2004</id>
		<title>Guide: SSH</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_SSH&amp;diff=2004"/>
		<updated>2026-03-21T17:28:52Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
&lt;br /&gt;
= SSH Key Pair Generation and Import =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Key-Pair-Creation&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Generating an SSH Key Pair Locally ==&lt;br /&gt;
&lt;br /&gt;
=== 🐧 Linux / 🍎 macOS ===&lt;br /&gt;
&lt;br /&gt;
Open a terminal and run the following command:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;ssh-keygen -t rsa -b 4096 -f ~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
When prompted, enter a secure passphrase. Record it safely — without it, you won&#039;t be able to use the key pair.&lt;br /&gt;
&lt;br /&gt;
This creates two files:&lt;br /&gt;
* &#039;&#039;&#039;Private key&#039;&#039;&#039;: &amp;lt;code&amp;gt;~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;Public key&#039;&#039;&#039;: &amp;lt;code&amp;gt;~/.ssh/myKey.pub&amp;lt;/code&amp;gt;&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: If you copy the key pair to or from another system, ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;chmod 600 ~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now you can [[#Importing an Existing SSH (Public) Key via Dashboard|import your &#039;&#039;public&#039;&#039; key into the Dashboard]].&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
=== 🪟 Windows ===&lt;br /&gt;
&lt;br /&gt;
Open &#039;&#039;&#039;Command Prompt&#039;&#039;&#039; (Click the &#039;&#039;&#039;Start menu&#039;&#039;&#039;, type &amp;lt;code&amp;gt;cmd&amp;lt;/code&amp;gt; into the search bar and press &#039;&#039;&#039;Enter&#039;&#039;&#039;). Then run the following commands:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;mkdir C:\Users\%USERNAME%\.ssh&amp;lt;/code&amp;gt; &lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;ssh-keygen -t rsa -b 4096 -f C:\Users\%USERNAME%\.ssh\myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
When prompted, enter a secure passphrase. Record it safely — without it, you won&#039;t be able to use the key pair.&lt;br /&gt;
&lt;br /&gt;
This creates two files:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Private key&#039;&#039;&#039;: &amp;lt;code&amp;gt;C:\Users\%USERNAME%\.ssh\myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Public key&#039;&#039;&#039;: &amp;lt;code&amp;gt;C:\Users\%USERNAME%\.ssh\myKey.pub&amp;lt;/code&amp;gt;&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: If you copy the key pair to or from another system, ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;icacls &amp;quot;%USERPROFILE%\.ssh\myKey&amp;quot; /inheritance:r /grant:r &amp;quot;%USERNAME%:(R,W)&amp;quot;&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now you can [[#Importing an Existing SSH (Public) Key via Dashboard|import your &#039;&#039;public&#039;&#039; key into the Dashboard]].&lt;br /&gt;
&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
== Importing an Existing SSH (Public) Key via Dashboard ==&lt;br /&gt;
&lt;br /&gt;
To use a key you generated on your device:&lt;br /&gt;
&lt;br /&gt;
# Log in to the [https://portal.bw-cloud.org/ Dashboard].&lt;br /&gt;
# Go to: &#039;&#039;&#039;Project → Compute → Key Pairs.&#039;&#039;&#039;&lt;br /&gt;
# Click &#039;&#039;&#039;Import Public Key.&#039;&#039;&#039;&lt;br /&gt;
# In the dialog:&lt;br /&gt;
#* Enter a unique name.&lt;br /&gt;
#* Make sure &#039;&#039;&#039;SSH Key&#039;&#039;&#039; is selected as the key type. &lt;br /&gt;
#* Upload your &#039;&#039;&#039;&#039;&#039;public&#039;&#039;&#039;&#039;&#039; key file (e.g., &amp;lt;code&amp;gt;myKey.pub&amp;lt;/code&amp;gt;) or paste the contents of it.&lt;br /&gt;
# Click &#039;&#039;&#039;Import Public Key&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Your &#039;&#039;&#039;public key&#039;&#039;&#039; name should now appear in the list and is ready for use.&lt;br /&gt;
&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
== Creating an SSH Key Pair via Dashboard ==&lt;br /&gt;
&lt;br /&gt;
If you don’t have a key pair yet or prefer using the Dashboard:&lt;br /&gt;
&lt;br /&gt;
# Log in to the [https://portal.bw-cloud.org/ Dashboard].&lt;br /&gt;
# Go to: &#039;&#039;&#039;Project → Compute → Key Pairs.&#039;&#039;&#039;&lt;br /&gt;
# Click &#039;&#039;&#039;Create Key Pair&#039;&#039;&#039;.&lt;br /&gt;
# In the dialog:&lt;br /&gt;
#* Enter a unique name.&lt;br /&gt;
#* Make sure &#039;&#039;&#039;SSH Key&#039;&#039;&#039; is selected as the key type.&lt;br /&gt;
# Click &#039;&#039;&#039;Create Key Pair&#039;&#039;&#039;.&lt;br /&gt;
The &#039;&#039;&#039;public key&#039;&#039;&#039; name should now appear in the list and the &#039;&#039;&#039;private key&#039;&#039;&#039; will be automatically downloaded — &#039;&#039;&#039;save it securely&#039;&#039;&#039;, as you won’t be able to download it again.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: Ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
* Linux/macOS: &amp;lt;code&amp;gt;chmod 600 ~/.ssh/myKey.pem&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
* Windows: &amp;lt;code&amp;gt;icacls &amp;quot;%USERPROFILE%\.ssh\myKey.pem&amp;quot; /inheritance:r /grant:r &amp;quot;%USERNAME%:(R,W)&amp;quot;&amp;lt;/code&amp;gt;&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
= Advanced SSH Configuration =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Key-Config&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Once you have generated and imported your SSH key pair, you can simplify and improve your SSH experience by creating a personal SSH configuration file.  &lt;br /&gt;
This file, typically located at &amp;lt;code&amp;gt;~/.ssh/config&amp;lt;/code&amp;gt;, lets you store connection details, reuse existing connections, and keep sessions stable — all of which are especially useful when managing multiple OpenStack instances.&lt;br /&gt;
&lt;br /&gt;
== Organizing SSH Connections (.ssh/config File) ==&lt;br /&gt;
&lt;br /&gt;
Instead of remembering long commands, you can define named host entries in your SSH configuration file.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    HostName 134.155.111.111&lt;br /&gt;
    User ubuntu&lt;br /&gt;
    IdentityFile ~/.ssh/myKey&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can now connect simply with:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
ssh myVM&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;Host&#039;&#039;&#039; — a nickname for your connection  &lt;br /&gt;
* &#039;&#039;&#039;HostName&#039;&#039;&#039; — the actual IP address or DNS name of the instance  &lt;br /&gt;
* &#039;&#039;&#039;User&#039;&#039;&#039; — the login username on the remote host&lt;br /&gt;
* &#039;&#039;&#039;IdentityFile&#039;&#039;&#039; — path to your private key (if not the default &amp;lt;code&amp;gt;id_rsa&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
This approach helps you manage multiple instances with short, readable aliases.&lt;br /&gt;
&lt;br /&gt;
== Performance and Graphical Features ==&lt;br /&gt;
&lt;br /&gt;
These optional SSH settings can enhance usability and performance for specific use cases.&lt;br /&gt;
&lt;br /&gt;
=== Enabling Compression ===&lt;br /&gt;
&lt;br /&gt;
For slower or high-latency connections, enabling compression can improve SSH responsiveness and reduce data transfer size.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    Compression yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;Compression yes&#039;&#039;&#039; — enables on-the-fly compression of SSH traffic.  &lt;br /&gt;
&lt;br /&gt;
This is most effective over slow or distant network links but may slightly increase CPU usage.  &lt;br /&gt;
&lt;br /&gt;
=== Enabling Graphical Applications (X11 Forwarding) ===&lt;br /&gt;
&lt;br /&gt;
If you need to run graphical applications from your OpenStack instance (e.g., editors or plotting tools) and display them locally, you can enable X11 forwarding.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
   ...  &lt;br /&gt;
   ForwardX11 yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ForwardX11 yes&#039;&#039;&#039; — forwards X11 (graphical) traffic from the remote host to your local display, provided an active X server is enabled on your local system.&lt;br /&gt;
* For connections to hosts you trust (e.g., your own OpenStack instances), certain compatibility issues with some GUI program can be avoided by the following alternative&#039;&#039;&#039;: ForwardX11Trusted yes&#039;&#039;&#039;&lt;br /&gt;
== Reusing Existing SSH Connections (ControlMaster) ==&lt;br /&gt;
&lt;br /&gt;
If you frequently connect to the same instance, SSH can reuse a single network connection instead of opening new ones each time. This reduces connection overhead and speeds up subsequent logins.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ControlMaster auto&lt;br /&gt;
    ControlPersist 1h&lt;br /&gt;
    ControlPath ~/.ssh/master-myVM-%r@%h:%p&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ControlMaster auto&#039;&#039;&#039; — enables connection sharing automatically  &lt;br /&gt;
* &#039;&#039;&#039;ControlPersist 1h&#039;&#039;&#039; — keeps the master connection open for one hour after the last session ends  &lt;br /&gt;
* &#039;&#039;&#039;ControlPath ~/.ssh/master-myVM-%r@%h:%p&#039;&#039;&#039; — specifies the filename for the multiplexing socket. Here:&lt;br /&gt;
&amp;lt;code&amp;gt;%r = remote user, %h = hostname, %p = port&amp;lt;/code&amp;gt;.&lt;br /&gt;
  &lt;br /&gt;
&lt;br /&gt;
With these options, if you connect to &amp;lt;code&amp;gt;myVM&amp;lt;/code&amp;gt; once, further SSH or SCP commands to the same host in the specified time window will reuse that connection and start instantly.&lt;br /&gt;
&lt;br /&gt;
== Connecting Through an Intermediate Host (ProxyJump) ==&lt;br /&gt;
Sometimes, you need to reach a server that is only accessible via an intermediate host (a jump host). &#039;&#039;&#039;ProxyJump&#039;&#039;&#039; automates this routing in a single SSH command.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ProxyJump proxy&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ProxyJump proxy&#039;&#039;&#039; — routes the connection automatically through the jump host &amp;lt;code&amp;gt;proxy&amp;lt;/code&amp;gt;.  &lt;br /&gt;
* Other settings from your SSH configuration (keys, ControlMaster, etc.) are still applied to the final connection.&lt;br /&gt;
&lt;br /&gt;
This simplifies connecting to hosts behind a firewall or in a private network. &lt;br /&gt;
&lt;br /&gt;
== Keeping Connections Alive ==&lt;br /&gt;
&lt;br /&gt;
Long-running SSH sessions can sometimes time out due to network inactivity. To prevent this, configure SSH to send periodic keepalive messages.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ServerAliveInterval 60&lt;br /&gt;
    ServerAliveCountMax 3&lt;br /&gt;
    TCPKeepAlive yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ServerAliveInterval 60&#039;&#039;&#039; — sends a keepalive message every 60 seconds  &lt;br /&gt;
* &#039;&#039;&#039;ServerAliveCountMax 3&#039;&#039;&#039; — disconnects only after three unanswered keepalives (≈3 minutes)  &lt;br /&gt;
* &#039;&#039;&#039;TCPKeepAlive yes&#039;&#039;&#039; — uses low-level TCP keepalive as an additional safeguard&lt;br /&gt;
&lt;br /&gt;
This ensures stable, long-lasting sessions even over less reliable networks.&lt;br /&gt;
&lt;br /&gt;
== SSH Logging and Debugging ==&lt;br /&gt;
&lt;br /&gt;
SSH can provide detailed messages about connection steps and authentication. Adjusting the log level in your configuration helps diagnose problems when connections fail or behave unexpectedly.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    LogLevel VERBOSE&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
SSH log levels control the amount of diagnostic information printed during a session.&lt;br /&gt;
* &#039;&#039;&#039;QUIET&#039;&#039;&#039; — no log messages.&lt;br /&gt;
* &#039;&#039;&#039;FATAL&#039;&#039;&#039; — fatal errors only.&lt;br /&gt;
* &#039;&#039;&#039;ERROR&#039;&#039;&#039; — all errors.&lt;br /&gt;
* &#039;&#039;&#039;INFO&#039;&#039;&#039; — minimal informational messages.&lt;br /&gt;
* &#039;&#039;&#039;VERBOSE / DEBUG / DEBUG1&#039;&#039;&#039; — shows some debug info (authentication, key usage).&lt;br /&gt;
* &#039;&#039;&#039;DEBUG2&#039;&#039;&#039; — very detailed debug messages.&lt;br /&gt;
* &#039;&#039;&#039;DEBUG3&#039;&#039;&#039; — maximum verbosity; shows all SSH internal steps, key negotiation, and multiplexing.&lt;br /&gt;
&lt;br /&gt;
== Troubleshooting Frozen SSH Sessions ==&lt;br /&gt;
Occasionally, &#039;&#039;&#039;SSH master connections&#039;&#039;&#039; can freeze or hang, especially after network interruptions. In such cases, you can manually terminate or clean up the stale connection.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;a) Identifying and killing master processes&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
List all relevant master sockets and their processes:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
lsof -U 2&amp;gt;/dev/null | grep master-myVM&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Terminate the corresponding processes:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
kill -9 &amp;lt;PID&amp;gt;&lt;br /&gt;
&amp;lt;/pre&amp;gt;&#039;&#039;&#039;b) Removing stale master socket files&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
Delete leftover socket files:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
rm ~/.ssh/master-myVM-*&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
After cleanup, new SSH connections will automatically establish fresh master sessions.&lt;br /&gt;
&lt;br /&gt;
= Remote Development over SSH =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Remote-Development&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Visual Studio Code (VS Code)==&lt;br /&gt;
 &lt;br /&gt;
&#039;&#039;&#039;[https://code.visualstudio.com/ Visual Studio Code] (VS Code)&#039;&#039;&#039; is a powerful, cross-platform integrated development environment available for &#039;&#039;&#039;Linux,&#039;&#039;&#039; &#039;&#039;&#039;macOS&#039;&#039;&#039;, and &#039;&#039;&#039;Windows&#039;&#039;&#039;. It has become the [https://survey.stackoverflow.co/2024/technology#1-integrated-development-environment most widely used development platform worldwide], valued for its lightweight design and an extensive ecosystem of extensions that support virtually every programming language, toolchain, and workflow.&lt;br /&gt;
&lt;br /&gt;
One such extension is &#039;&#039;&#039;[https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-ssh Remote – SSH]&#039;&#039;&#039;&amp;lt;nowiki/&amp;gt;&#039; (by Microsoft), which allows you to edit, build, and debug directly on a remote host while keeping the same familiar VS Code interface on your local machine. This approach ensures a &#039;&#039;&#039;consistent development experience across operating systems&#039;&#039;&#039; — the same editor, shortcuts, and extensions work identically on every platform — while all computation and file operations take place securely on the remote host.&lt;br /&gt;
&lt;br /&gt;
Since both [https://code.visualstudio.com/docs VS Code] and its [https://code.visualstudio.com/docs/remote/ssh Remote-SSH] extension have comprehensive official guides, this section provides only a brief &#039;&#039;&#039;Quickstart&#039;&#039;&#039;. It will help you integrate your bwCloud-OS VMs into a development environment in just a few steps.&lt;br /&gt;
&lt;br /&gt;
⚠️ &#039;&#039;&#039;Note:&#039;&#039;&#039;  When you connect via Remote-SSH for the first time, VS Code automatically installs a small server component on your VM (typically under &amp;lt;code&amp;gt;~/.vscode-server&amp;lt;/code&amp;gt;). Depending on your workload, this background service may consume noticeable resources — especially memory (RAM), which may even cause the VM to become unresponsive if its flavor is too small.&lt;br /&gt;
&lt;br /&gt;
⚠️ &#039;&#039;&#039;Note:&#039;&#039;&#039;  In some rare cases, installing the server component on the remote host (step 3 below) fails, this is usually due to some (experimental) settings of the extension Remote-SSH. For example, for openSUSE 16 disabling &amp;quot;Use Exec Sever&amp;quot; in the settings of  remote-SSH can solve the issue.&lt;br /&gt;
&lt;br /&gt;
=== Setting Up VS Code and Remote-SSH ===&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;1.&#039;&#039;&#039; &#039;&#039;&#039;Install VS Code on your local machine&#039;&#039;&#039;: Follow the [https://code.visualstudio.com/Download official installation guide] for your operating system.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;2.&#039;&#039;&#039; &#039;&#039;&#039;Install Remote-SSH extension&#039;&#039;&#039;: Open VS Code and go to the &#039;&#039;&#039;Extensions&#039;&#039;&#039; view ( &amp;lt;code&amp;gt;Ctrl+Shift+X&amp;lt;/code&amp;gt;), search for  &#039;&#039;&#039;Remote - SSH&#039;&#039;&#039; (by Microsoft) and click &#039;&#039;&#039;Install&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
=== Connecting VS Code to Your VM ===&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;1&#039;&#039;&#039;. In VS Code, select &#039;&#039;&#039;Remote-SSH: Connect to Host&#039;&#039;&#039; from the Command Palette (&amp;lt;code&amp;gt;F1&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;Ctrl+Shift+P&amp;lt;/code&amp;gt;) or by clicking on the &#039;&#039;&#039;Remote Quick Access&#039;&#039;&#039; status bar item in the lower left corner:&lt;br /&gt;
&lt;br /&gt;
[[File:VS-Code Remote-Quick-Access.png|frameless|50x50px]]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;2&#039;&#039;&#039;. A list of your [[Guide: SSH#Organizing SSH Connections (.ssh/config File)|configured SSH hosts]] will appear, select the desired target.  &lt;br /&gt;
&lt;br /&gt;
Alternatively, you can first select &#039;&#039;&#039;Add New SSH Host&#039;&#039;&#039; and type your (tested) ssh command (e.g., &amp;lt;code&amp;gt;ssh -i ~/.ssh/myKey ubuntu@134.155.108.71&amp;lt;/code&amp;gt;), VS Code will generate a corresponding entry in the .ssh/config file. Then you can select it. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;3.&#039;&#039;&#039; After a moment, VS Code will connect to the SSH server and set itself up. After you are connected, you&#039;ll see in the status bar which host you are connected to:  &lt;br /&gt;
&lt;br /&gt;
[[File:VS-Code Remote-Connection.png|frameless|128x128px]]&lt;br /&gt;
&lt;br /&gt;
=== Working with Your Remote VM ===&lt;br /&gt;
Once connected, you can use VS Code as you would on your local machine — with one key difference: everything you see and execute in that VS Code window belongs to and runs on the remote host.  &lt;br /&gt;
&lt;br /&gt;
For example:&lt;br /&gt;
* Opening a terminal (&#039;&#039;&#039;Menu → Terminal → New Terminal&#039;&#039;&#039;) starts a shell on the remote VM.  &lt;br /&gt;
* The &#039;&#039;&#039;File Explorer&#039;&#039;&#039; displays the remote directory structure.  &lt;br /&gt;
* You can transfer files easily:  &lt;br /&gt;
** Drag and drop from your local file manager into the remote Explorer to &#039;&#039;&#039;upload&#039;&#039;&#039;.&lt;br /&gt;
** Right-click a file or folder in the remote Explorer and choose &#039;&#039;&#039;Download&#039;&#039;&#039; to copy it to your local system.&lt;br /&gt;
[[File:VS-Code Remote-Window.png|center|thumb|900x900px]]&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_SSH&amp;diff=2003</id>
		<title>Guide: SSH</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_SSH&amp;diff=2003"/>
		<updated>2026-03-21T17:27:05Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
&lt;br /&gt;
= SSH Key Pair Generation and Import =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Key-Pair-Creation&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Generating an SSH Key Pair Locally ==&lt;br /&gt;
&lt;br /&gt;
=== 🐧 Linux / 🍎 macOS ===&lt;br /&gt;
&lt;br /&gt;
Open a terminal and run the following command:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;ssh-keygen -t rsa -b 4096 -f ~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
When prompted, enter a secure passphrase. Record it safely — without it, you won&#039;t be able to use the key pair.&lt;br /&gt;
&lt;br /&gt;
This creates two files:&lt;br /&gt;
* &#039;&#039;&#039;Private key&#039;&#039;&#039;: &amp;lt;code&amp;gt;~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
* &#039;&#039;&#039;Public key&#039;&#039;&#039;: &amp;lt;code&amp;gt;~/.ssh/myKey.pub&amp;lt;/code&amp;gt;&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: If you copy the key pair to or from another system, ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;chmod 600 ~/.ssh/myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now you can [[#Importing an Existing SSH (Public) Key via Dashboard|import your &#039;&#039;public&#039;&#039; key into the Dashboard]].&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
=== 🪟 Windows ===&lt;br /&gt;
&lt;br /&gt;
Open &#039;&#039;&#039;Command Prompt&#039;&#039;&#039; (Click the &#039;&#039;&#039;Start menu&#039;&#039;&#039;, type &amp;lt;code&amp;gt;cmd&amp;lt;/code&amp;gt; into the search bar and press &#039;&#039;&#039;Enter&#039;&#039;&#039;). Then run the following commands:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;mkdir C:\Users\%USERNAME%\.ssh&amp;lt;/code&amp;gt; &lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;ssh-keygen -t rsa -b 4096 -f C:\Users\%USERNAME%\.ssh\myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
When prompted, enter a secure passphrase. Record it safely — without it, you won&#039;t be able to use the key pair.&lt;br /&gt;
&lt;br /&gt;
This creates two files:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Private key&#039;&#039;&#039;: &amp;lt;code&amp;gt;C:\Users\%USERNAME%\.ssh\myKey&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Public key&#039;&#039;&#039;: &amp;lt;code&amp;gt;C:\Users\%USERNAME%\.ssh\myKey.pub&amp;lt;/code&amp;gt;&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: If you copy the key pair to or from another system, ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;icacls &amp;quot;%USERPROFILE%\.ssh\myKey&amp;quot; /inheritance:r /grant:r &amp;quot;%USERNAME%:(R,W)&amp;quot;&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Now you can [[#Importing an Existing SSH (Public) Key via Dashboard|import your &#039;&#039;public&#039;&#039; key into the Dashboard]].&lt;br /&gt;
&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
== Importing an Existing SSH (Public) Key via Dashboard ==&lt;br /&gt;
&lt;br /&gt;
To use a key you generated on your device:&lt;br /&gt;
&lt;br /&gt;
# Log in to the [https://portal.bw-cloud.org/ Dashboard].&lt;br /&gt;
# Go to: &#039;&#039;&#039;Project → Compute → Key Pairs.&#039;&#039;&#039;&lt;br /&gt;
# Click &#039;&#039;&#039;Import Public Key.&#039;&#039;&#039;&lt;br /&gt;
# In the dialog:&lt;br /&gt;
#* Enter a unique name.&lt;br /&gt;
#* Make sure &#039;&#039;&#039;SSH Key&#039;&#039;&#039; is selected as the key type. &lt;br /&gt;
#* Upload your &#039;&#039;&#039;&#039;&#039;public&#039;&#039;&#039;&#039;&#039; key file (e.g., &amp;lt;code&amp;gt;myKey.pub&amp;lt;/code&amp;gt;) or paste the contents of it.&lt;br /&gt;
# Click &#039;&#039;&#039;Import Public Key&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Your &#039;&#039;&#039;public key&#039;&#039;&#039; name should now appear in the list and is ready for use.&lt;br /&gt;
&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
== Creating an SSH Key Pair via Dashboard ==&lt;br /&gt;
&lt;br /&gt;
If you don’t have a key pair yet or prefer using the Dashboard:&lt;br /&gt;
&lt;br /&gt;
# Log in to the [https://portal.bw-cloud.org/ Dashboard].&lt;br /&gt;
# Go to: &#039;&#039;&#039;Project → Compute → Key Pairs.&#039;&#039;&#039;&lt;br /&gt;
# Click &#039;&#039;&#039;Create Key Pair&#039;&#039;&#039;.&lt;br /&gt;
# In the dialog:&lt;br /&gt;
#* Enter a unique name.&lt;br /&gt;
#* Make sure &#039;&#039;&#039;SSH Key&#039;&#039;&#039; is selected as the key type.&lt;br /&gt;
# Click &#039;&#039;&#039;Create Key Pair&#039;&#039;&#039;.&lt;br /&gt;
The &#039;&#039;&#039;public key&#039;&#039;&#039; name should now appear in the list and the &#039;&#039;&#039;private key&#039;&#039;&#039; will be automatically downloaded — &#039;&#039;&#039;save it securely&#039;&#039;&#039;, as you won’t be able to download it again.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note&#039;&#039;&#039;: Ensure that the private key has correct (restricted) permissions:&lt;br /&gt;
&lt;br /&gt;
* Linux/macOS: &amp;lt;code&amp;gt;chmod 600 ~/.ssh/myKey.pem&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
* Windows: &amp;lt;code&amp;gt;icacls &amp;quot;%USERPROFILE%\.ssh\myKey.pem&amp;quot; /inheritance:r /grant:r &amp;quot;%USERNAME%:(R,W)&amp;quot;&amp;lt;/code&amp;gt;&lt;br /&gt;
----&lt;br /&gt;
&lt;br /&gt;
= Advanced SSH Configuration =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Key-Config&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Once you have generated and imported your SSH key pair, you can simplify and improve your SSH experience by creating a personal SSH configuration file.  &lt;br /&gt;
This file, typically located at &amp;lt;code&amp;gt;~/.ssh/config&amp;lt;/code&amp;gt;, lets you store connection details, reuse existing connections, and keep sessions stable — all of which are especially useful when managing multiple OpenStack instances.&lt;br /&gt;
&lt;br /&gt;
== Organizing SSH Connections (.ssh/config File) ==&lt;br /&gt;
&lt;br /&gt;
Instead of remembering long commands, you can define named host entries in your SSH configuration file.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    HostName 134.155.111.111&lt;br /&gt;
    User ubuntu&lt;br /&gt;
    IdentityFile ~/.ssh/myKey&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can now connect simply with:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
ssh myVM&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;Host&#039;&#039;&#039; — a nickname for your connection  &lt;br /&gt;
* &#039;&#039;&#039;HostName&#039;&#039;&#039; — the actual IP address or DNS name of the instance  &lt;br /&gt;
* &#039;&#039;&#039;User&#039;&#039;&#039; — the login username on the remote host&lt;br /&gt;
* &#039;&#039;&#039;IdentityFile&#039;&#039;&#039; — path to your private key (if not the default &amp;lt;code&amp;gt;id_rsa&amp;lt;/code&amp;gt;)&lt;br /&gt;
&lt;br /&gt;
This approach helps you manage multiple instances with short, readable aliases.&lt;br /&gt;
&lt;br /&gt;
== Performance and Graphical Features ==&lt;br /&gt;
&lt;br /&gt;
These optional SSH settings can enhance usability and performance for specific use cases.&lt;br /&gt;
&lt;br /&gt;
=== Enabling Compression ===&lt;br /&gt;
&lt;br /&gt;
For slower or high-latency connections, enabling compression can improve SSH responsiveness and reduce data transfer size.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    Compression yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;Compression yes&#039;&#039;&#039; — enables on-the-fly compression of SSH traffic.  &lt;br /&gt;
&lt;br /&gt;
This is most effective over slow or distant network links but may slightly increase CPU usage.  &lt;br /&gt;
&lt;br /&gt;
=== Enabling Graphical Applications (X11 Forwarding) ===&lt;br /&gt;
&lt;br /&gt;
If you need to run graphical applications from your OpenStack instance (e.g., editors or plotting tools) and display them locally, you can enable X11 forwarding.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
   ...  &lt;br /&gt;
   ForwardX11 yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ForwardX11 yes&#039;&#039;&#039; — forwards X11 (graphical) traffic from the remote host to your local display, provided an active X server is enabled on your local system.&lt;br /&gt;
* For connections to hosts you trust (e.g., your own OpenStack instances), certain compatibility issues with some GUI program can be avoided by the following alternative&#039;&#039;&#039;: ForwardX11Trusted yes&#039;&#039;&#039;&lt;br /&gt;
== Reusing Existing SSH Connections (ControlMaster) ==&lt;br /&gt;
&lt;br /&gt;
If you frequently connect to the same instance, SSH can reuse a single network connection instead of opening new ones each time. This reduces connection overhead and speeds up subsequent logins.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ControlMaster auto&lt;br /&gt;
    ControlPersist 1h&lt;br /&gt;
    ControlPath ~/.ssh/master-myVM-%r@%h:%p&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ControlMaster auto&#039;&#039;&#039; — enables connection sharing automatically  &lt;br /&gt;
* &#039;&#039;&#039;ControlPersist 1h&#039;&#039;&#039; — keeps the master connection open for one hour after the last session ends  &lt;br /&gt;
* &#039;&#039;&#039;ControlPath ~/.ssh/master-myVM-%r@%h:%p&#039;&#039;&#039; — specifies the filename for the multiplexing socket. Here:&lt;br /&gt;
&amp;lt;code&amp;gt;%r = remote user, %h = hostname, %p = port&amp;lt;/code&amp;gt;.&lt;br /&gt;
  &lt;br /&gt;
&lt;br /&gt;
With these options, if you connect to &amp;lt;code&amp;gt;myVM&amp;lt;/code&amp;gt; once, further SSH or SCP commands to the same host in the specified time window will reuse that connection and start instantly.&lt;br /&gt;
&lt;br /&gt;
== Connecting Through an Intermediate Host (ProxyJump) ==&lt;br /&gt;
Sometimes, you need to reach a server that is only accessible via an intermediate host (a jump host). &#039;&#039;&#039;ProxyJump&#039;&#039;&#039; automates this routing in a single SSH command.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ProxyJump proxy&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ProxyJump proxy&#039;&#039;&#039; — routes the connection automatically through the jump host &amp;lt;code&amp;gt;proxy&amp;lt;/code&amp;gt;.  &lt;br /&gt;
* Other settings from your SSH configuration (keys, ControlMaster, etc.) are still applied to the final connection.&lt;br /&gt;
&lt;br /&gt;
This simplifies connecting to hosts behind a firewall or in a private network. &lt;br /&gt;
&lt;br /&gt;
== Keeping Connections Alive ==&lt;br /&gt;
&lt;br /&gt;
Long-running SSH sessions can sometimes time out due to network inactivity. To prevent this, configure SSH to send periodic keepalive messages.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    ServerAliveInterval 60&lt;br /&gt;
    ServerAliveCountMax 3&lt;br /&gt;
    TCPKeepAlive yes&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
* &#039;&#039;&#039;ServerAliveInterval 60&#039;&#039;&#039; — sends a keepalive message every 60 seconds  &lt;br /&gt;
* &#039;&#039;&#039;ServerAliveCountMax 3&#039;&#039;&#039; — disconnects only after three unanswered keepalives (≈3 minutes)  &lt;br /&gt;
* &#039;&#039;&#039;TCPKeepAlive yes&#039;&#039;&#039; — uses low-level TCP keepalive as an additional safeguard&lt;br /&gt;
&lt;br /&gt;
This ensures stable, long-lasting sessions even over less reliable networks.&lt;br /&gt;
&lt;br /&gt;
== SSH Logging and Debugging ==&lt;br /&gt;
&lt;br /&gt;
SSH can provide detailed messages about connection steps and authentication. Adjusting the log level in your configuration helps diagnose problems when connections fail or behave unexpectedly.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
Host myVM&lt;br /&gt;
    ...&lt;br /&gt;
    LogLevel VERBOSE&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Explanation:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
SSH log levels control the amount of diagnostic information printed during a session.&lt;br /&gt;
* &#039;&#039;&#039;QUIET&#039;&#039;&#039; — no log messages.&lt;br /&gt;
* &#039;&#039;&#039;FATAL&#039;&#039;&#039; — fatal errors only.&lt;br /&gt;
* &#039;&#039;&#039;ERROR&#039;&#039;&#039; — all errors.&lt;br /&gt;
* &#039;&#039;&#039;INFO&#039;&#039;&#039; — minimal informational messages.&lt;br /&gt;
* &#039;&#039;&#039;VERBOSE / DEBUG / DEBUG1&#039;&#039;&#039; — shows some debug info (authentication, key usage).&lt;br /&gt;
* &#039;&#039;&#039;DEBUG2&#039;&#039;&#039; — very detailed debug messages.&lt;br /&gt;
* &#039;&#039;&#039;DEBUG3&#039;&#039;&#039; — maximum verbosity; shows all SSH internal steps, key negotiation, and multiplexing.&lt;br /&gt;
&lt;br /&gt;
== Troubleshooting Frozen SSH Sessions ==&lt;br /&gt;
Occasionally, &#039;&#039;&#039;SSH master connections&#039;&#039;&#039; can freeze or hang, especially after network interruptions. In such cases, you can manually terminate or clean up the stale connection.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;a) Identifying and killing master processes&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
List all relevant master sockets and their processes:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
lsof -U 2&amp;gt;/dev/null | grep master-myVM&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Terminate the corresponding processes:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
kill -9 &amp;lt;PID&amp;gt;&lt;br /&gt;
&amp;lt;/pre&amp;gt;&#039;&#039;&#039;b) Removing stale master socket files&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
Delete leftover socket files:&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
rm ~/.ssh/master-myVM-*&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
After cleanup, new SSH connections will automatically establish fresh master sessions.&lt;br /&gt;
&lt;br /&gt;
= Remote Development over SSH =&lt;br /&gt;
&amp;lt;span id=&amp;quot;Remote-Development&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Visual Studio Code (VS Code)==&lt;br /&gt;
 &lt;br /&gt;
&#039;&#039;&#039;[https://code.visualstudio.com/ Visual Studio Code] (VS Code)&#039;&#039;&#039; is a powerful, cross-platform integrated development environment available for &#039;&#039;&#039;Linux,&#039;&#039;&#039; &#039;&#039;&#039;macOS&#039;&#039;&#039;, and &#039;&#039;&#039;Windows&#039;&#039;&#039;. It has become the [https://survey.stackoverflow.co/2024/technology#1-integrated-development-environment most widely used development platform worldwide], valued for its lightweight design and an extensive ecosystem of extensions that support virtually every programming language, toolchain, and workflow.&lt;br /&gt;
&lt;br /&gt;
One such extension is &#039;&#039;&#039;[https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.remote-ssh Remote – SSH]&#039;&#039;&#039;&amp;lt;nowiki/&amp;gt;&#039; (by Microsoft), which allows you to edit, build, and debug directly on a remote host while keeping the same familiar VS Code interface on your local machine. This approach ensures a &#039;&#039;&#039;consistent development experience across operating systems&#039;&#039;&#039; — the same editor, shortcuts, and extensions work identically on every platform — while all computation and file operations take place securely on the remote host.&lt;br /&gt;
&lt;br /&gt;
Since both [https://code.visualstudio.com/docs VS Code] and its [https://code.visualstudio.com/docs/remote/ssh Remote-SSH] extension have comprehensive official guides, this section provides only a brief &#039;&#039;&#039;Quickstart&#039;&#039;&#039;. It will help you integrate your bwCloud-OS VMs into a development environment in just a few steps.&lt;br /&gt;
&lt;br /&gt;
⚠️ &#039;&#039;&#039;Note:&#039;&#039;&#039;  When you connect via Remote-SSH for the first time, VS Code automatically installs a small server component on your VM (typically under &amp;lt;code&amp;gt;~/.vscode-server&amp;lt;/code&amp;gt;). Depending on your workload, this background service may consume noticeable resources — especially memory (RAM), which may even cause the VM to become unresponsive if its flavor is too small.&lt;br /&gt;
&lt;br /&gt;
⚠️ &#039;&#039;&#039;Note:&#039;&#039;&#039;  In some rare cases,  installing the server component on the remote host (step 3 below) fails, this is usually due to some (experimental) settings of the extension Remote-SSH. For example, for openSUSE 16 disabling &amp;quot;Use Exec Sever&amp;quot; in the settings of  remote-SSH can solve the issue.&lt;br /&gt;
&lt;br /&gt;
some When you connect via Remote-SSH for the first time, VS Code automatically installs a small server component on your VM (typically under &amp;lt;code&amp;gt;~/.vscode-server&amp;lt;/code&amp;gt;). Depending on your workload, this background service may consume noticeable resources — especially memory (RAM), which may even cause the VM to become unresponsive if its flavor is too small.&lt;br /&gt;
&lt;br /&gt;
=== Setting Up VS Code and Remote-SSH ===&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;1.&#039;&#039;&#039; &#039;&#039;&#039;Install VS Code on your local machine&#039;&#039;&#039;: Follow the [https://code.visualstudio.com/Download official installation guide] for your operating system.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;2.&#039;&#039;&#039; &#039;&#039;&#039;Install Remote-SSH extension&#039;&#039;&#039;: Open VS Code and go to the &#039;&#039;&#039;Extensions&#039;&#039;&#039; view ( &amp;lt;code&amp;gt;Ctrl+Shift+X&amp;lt;/code&amp;gt;), search for  &#039;&#039;&#039;Remote - SSH&#039;&#039;&#039; (by Microsoft) and click &#039;&#039;&#039;Install&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
=== Connecting VS Code to Your VM ===&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;1&#039;&#039;&#039;. In VS Code, select &#039;&#039;&#039;Remote-SSH: Connect to Host&#039;&#039;&#039; from the Command Palette (&amp;lt;code&amp;gt;F1&amp;lt;/code&amp;gt;, &amp;lt;code&amp;gt;Ctrl+Shift+P&amp;lt;/code&amp;gt;) or by clicking on the &#039;&#039;&#039;Remote Quick Access&#039;&#039;&#039; status bar item in the lower left corner:&lt;br /&gt;
&lt;br /&gt;
[[File:VS-Code Remote-Quick-Access.png|frameless|50x50px]]&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;2&#039;&#039;&#039;. A list of your [[Guide: SSH#Organizing SSH Connections (.ssh/config File)|configured SSH hosts]] will appear, select the desired target.  &lt;br /&gt;
&lt;br /&gt;
Alternatively, you can first select &#039;&#039;&#039;Add New SSH Host&#039;&#039;&#039; and type your (tested) ssh command (e.g., &amp;lt;code&amp;gt;ssh -i ~/.ssh/myKey ubuntu@134.155.108.71&amp;lt;/code&amp;gt;), VS Code will generate a corresponding entry in the .ssh/config file. Then you can select it. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;3.&#039;&#039;&#039; After a moment, VS Code will connect to the SSH server and set itself up. After you are connected, you&#039;ll see in the status bar which host you are connected to:  &lt;br /&gt;
&lt;br /&gt;
[[File:VS-Code Remote-Connection.png|frameless|128x128px]]&lt;br /&gt;
&lt;br /&gt;
=== Working with Your Remote VM ===&lt;br /&gt;
Once connected, you can use VS Code as you would on your local machine — with one key difference: everything you see and execute in that VS Code window belongs to and runs on the remote host.  &lt;br /&gt;
&lt;br /&gt;
For example:&lt;br /&gt;
* Opening a terminal (&#039;&#039;&#039;Menu → Terminal → New Terminal&#039;&#039;&#039;) starts a shell on the remote VM.  &lt;br /&gt;
* The &#039;&#039;&#039;File Explorer&#039;&#039;&#039; displays the remote directory structure.  &lt;br /&gt;
* You can transfer files easily:  &lt;br /&gt;
** Drag and drop from your local file manager into the remote Explorer to &#039;&#039;&#039;upload&#039;&#039;&#039;.&lt;br /&gt;
** Right-click a file or folder in the remote Explorer and choose &#039;&#039;&#039;Download&#039;&#039;&#039; to copy it to your local system.&lt;br /&gt;
[[File:VS-Code Remote-Window.png|center|thumb|900x900px]]&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Table:_Images_Gen3&amp;diff=2002</id>
		<title>Table: Images Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Table:_Images_Gen3&amp;diff=2002"/>
		<updated>2026-03-20T18:53:28Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{| class=&amp;quot;wikitable sortable&amp;quot; style=&amp;quot;border-collapse: collapse; width: 100%; margin: 1em 0; font-family: sans-serif;&amp;quot;&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Image Name&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Default SSH Username&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Last Updated&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Min. Disk (GB)&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Min. RAM (MB)&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | AlmaLinux 10&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;almalinux&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | CentOS Stream 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;cloud-user&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Debian 13&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;debian&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 19.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 3&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Fedora 43&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;fedora&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 5&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | openSUSE Leap 16.0&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;sles&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 3&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Rocky 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;rocky&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Ubuntu 24.04&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;ubuntu&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 5&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|}&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Table:_Images_Gen3&amp;diff=2001</id>
		<title>Table: Images Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Table:_Images_Gen3&amp;diff=2001"/>
		<updated>2026-03-20T18:50:40Z</updated>

		<summary type="html">&lt;p&gt;Sia: Default user for this image is &amp;quot;sles&amp;quot; not &amp;quot;opensuse&amp;quot;&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{| class=&amp;quot;wikitable sortable&amp;quot; style=&amp;quot;border-collapse: collapse; width: 100%; margin: 1em 0; font-family: sans-serif;&amp;quot;&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Image Name&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Default SSH Username&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Last Updated&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Min. Disk (GB)&lt;br /&gt;
! style=&amp;quot;background-color: #232e58; color: white; padding: 12px; text-align: left; font-weight: bold; border: 1px solid #1a2340;&amp;quot; | Min. RAM (MB)&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | AlmaLinux 10&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;almalinux&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | CentOS Stream 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;cloud-user&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Debian 13&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;debian&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 19.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 3&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Fedora 43&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;fedora&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 5&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | openSUSE Leap 16.0&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | sles&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 3&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Rocky 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;rocky&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 10&lt;br /&gt;
| style=&amp;quot;padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|-&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; font-weight: 500;&amp;quot; | Ubuntu 24.04&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | &amp;lt;code style=&amp;quot;background-color: #e8f1fa; padding: 2px 6px; border-radius: 3px; color: #07307d; font-weight: 500;&amp;quot;&amp;gt;ubuntu&amp;lt;/code&amp;gt;&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd;&amp;quot; | 20.03.2026&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 5&lt;br /&gt;
| style=&amp;quot;background-color: #f8f9fa; padding: 10px; border: 1px solid #ddd; text-align: center;&amp;quot; | 256&lt;br /&gt;
|}&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Key_User:_Migration_Guide&amp;diff=1992</id>
		<title>Key User: Migration Guide</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Key_User:_Migration_Guide&amp;diff=1992"/>
		<updated>2026-03-17T20:30:07Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;{| class=&amp;quot;mw-message-box mw-message-box-warning&amp;quot;&lt;br /&gt;
| style=&amp;quot;vertical-align:middle;&amp;quot; | &#039;&#039;&#039;⚠️ Please Note:&#039;&#039;&#039; This guide is still work in progress. &lt;br /&gt;
|}&lt;br /&gt;
&lt;br /&gt;
{{InANutshell|&lt;br /&gt;
&amp;lt;li&amp;gt;Both bwCloud-OS environments are completely independent.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Security groups won&#039;t carry over automatically.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Networks and IP addresses will change.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;You can either start a new instance (VM) and copy your old data over, or migrate the old VM yourself.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;For migrating volumes, attach a fresh volume to a new VM in the new cloud and copy your data directly over the network using rsync.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= General Information =&lt;br /&gt;
&lt;br /&gt;
This guide explains how to migrate your resources from the old bwCloud-OS Gen2 environment to bwCloud-OS Gen3. Because the two environments are completely separated, there is no automatic migration path. You will need to manually export your resources from the old cloud, download them locally, and upload them to the new cloud. Please note that network settings and Security Groups cannot be copied and must be reconfigured manually in the new environment.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Login:&#039;&#039;&#039; &lt;br /&gt;
* Old bwCloud-OS Gen2: https://portal.bw-cloud.org/&lt;br /&gt;
* New bwCloud-OS Gen3: [https://portal.ul.bwcos.de/auth/login/?next=/ https://portal.ul.bwcos.de/]&lt;br /&gt;
&lt;br /&gt;
= Transferring = &lt;br /&gt;
&lt;br /&gt;
== Transferring Volumes ==&lt;br /&gt;
&lt;br /&gt;
While it is technically possible to migrate a Cinder volume by converting it to an image and uploading it to the new cloud, we do not recommend this approach. The process is extremely slow, and depending on the backend configuration, the upload may silently fail entirely.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Our recommendation: create a fresh volume and copy your data over the network.&#039;&#039;&#039;&lt;br /&gt;
* In the new environment, create a new empty volume of the appropriate size and attach it to a new VM.&lt;br /&gt;
* Format and mount the volume on the new VM. Detailed instructions can be found [[Guide:_Volumes_and_Images#Create_and_Attach_a_Volume|here]]. &lt;br /&gt;
* Make sure your old VM (with the old volume mounted) is reachable from the new VM via SSH (either by exchanging SSH keys or setting a password in the VM). &lt;br /&gt;
* Sync your data directly over the network using &#039;&#039;&#039;rsync&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
rsync -avz --progress /path/to/old/data/ root@&amp;lt;NEW_VM_IP&amp;gt;:/path/to/new/destination/&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
== Transferring VMs ==&lt;br /&gt;
&lt;br /&gt;
==== Prerequisites ====&lt;br /&gt;
* Access to both bwCloud-OS environments and &lt;br /&gt;
* Application Credentials, as described [[Programmatic_Access_and_Automation#Application_Credentials|here]]&lt;br /&gt;
* OpenStack Client installed, as described [[Programmatic_Access_and_Automation#OpenStack_Client|here]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
When transferring a VM, you create a snapshot of its current state, download it, and use it as a base image in the new environment.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Step 1: Create a Snapshot&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
First, source your old bwCloud-OS Gen2 credentials and find the ID of the instance (VM) you want to migrate: &lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
source old-creds.sh &lt;br /&gt;
openstack server list &lt;br /&gt;
openstack server image create --name &amp;lt;snapshot_name&amp;gt; &amp;lt;instance_id&amp;gt;&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Step 2: Download the Snapshot&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
The Image ID should have been prompted in the previous step. However, it is also possible to find the ID of your created snapshot and download it to your local computer later:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
openstack image list&lt;br /&gt;
openstack image save --file myimage.img &amp;lt;snapshot_id&amp;gt; &lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Step 3: Upload to the New Environment (bwCloud-OS Gen3)&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
Source your new cloud credentials and upload the image file. &#039;&#039;&#039;Important&#039;&#039;&#039;: Always set the visibility to Private so other users cannot use your image as a base for their services.&lt;br /&gt;
&lt;br /&gt;
&amp;lt;pre&amp;gt;&lt;br /&gt;
source new-creds.sh&lt;br /&gt;
openstack image create --file myimage.img --private myimage&lt;br /&gt;
&amp;lt;/pre&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Alternative: You can also upload the downloaded .img file using the new Horizon GUI by navigating to &#039;&#039;&#039;Compute -&amp;gt; Images&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Step 4: Start the Instance&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
You can now start a new instance using this uploaded image. Remember to reconfigure your &#039;&#039;&#039;Security Groups&#039;&#039;&#039; and note that you will receive a &#039;&#039;&#039;new IP address&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
To start a new instance: &lt;br /&gt;
* Log in to the bwCloud-OS Gen3 Dashboard. &lt;br /&gt;
* Navigate to Project --&amp;gt; Compute --&amp;gt; Images. The uploaded snapshot should be listed there.&lt;br /&gt;
* Click on &amp;quot;Start&amp;quot;, choose an instance name, and select the network and SSH key (or create a new one).&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1990</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1990"/>
		<updated>2026-03-17T18:20:29Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the VM networks in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
The Karlsruhe region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;default-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
* This Network is shared between all projects&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Seperated Networks ===&lt;br /&gt;
If you require a seperated Broadcast Domain you can request one via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
The network will:&lt;br /&gt;
&lt;br /&gt;
* receive a separate private IPv4 Subnet&lt;br /&gt;
* receive a separate public IPv6 Subnet&lt;br /&gt;
* have a separated Broadcast Domain only accessible by authorized projects&lt;br /&gt;
* always use up at least one IPv4 used for the virtual Router&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Karlsruhe region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses (Routers and Floating IPs) from &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt; will be migrated to a new IPv4 Subnet. &lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* During the Migration all Floating IPs will be redistributed and some minor connection interruptions will happen.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as &#039;&#039;&#039;additional networks&#039;&#039;&#039; that can be assigned to projects &#039;&#039;&#039;upon request&#039;&#039;&#039;. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;IPv6&#039;&#039;&#039;: Direct public connectivity&lt;br /&gt;
* &#039;&#039;&#039;IPv4 (egress)&#039;&#039;&#039;: Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039;&lt;br /&gt;
* A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All dual-stack IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; We do not recommend allocating Floating IPs from the &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt;, because they will be lost after the transition period. Instead, request and associate them from &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1989</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1989"/>
		<updated>2026-03-17T18:17:52Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the VM networks in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
The Karlsruhe region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;default-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
* This Network is shared between all projects&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Seperated Networks ===&lt;br /&gt;
If you require a seperated Broadcast Domain you can request one via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
The network will:&lt;br /&gt;
&lt;br /&gt;
* receive a separate private IPv4 Subnet&lt;br /&gt;
* receive a separate public IPv6 Subnet&lt;br /&gt;
* have a separated Broadcast Domain only accessible by authorized projects&lt;br /&gt;
* always use up at least one IPv4 used for the virtual Router&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Karlsruhe region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses (Routers and Floating IPs) from &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt; will be migrated to a new IPv4 Subnet. &lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* During the Migration all Floating IPs will be redistributed and some minor connection interruptions will happen.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as &#039;&#039;&#039;additional networks&#039;&#039;&#039; that can be assigned to projects &#039;&#039;&#039;upon request&#039;&#039;&#039;. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network:&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;IPv6&#039;&#039;&#039;: Direct public connectivity&lt;br /&gt;
* &#039;&#039;&#039;IPv4 (egress)&#039;&#039;&#039;: Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039;&lt;br /&gt;
* A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All dual-stack IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; We do not recommend allocating Floating IPs from the &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt;, because they will be lost after the transition period. Instead, Request and associate them from &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1988</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1988"/>
		<updated>2026-03-17T18:00:10Z</updated>

		<summary type="html">&lt;p&gt;Sia: /* Default Network */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the VM networks in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
The Karlsruhe region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;default-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
* This Network is shared between all projects&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Seperated Networks ===&lt;br /&gt;
If you require a seperated Broadcast Domain you can request one via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
The network will:&lt;br /&gt;
&lt;br /&gt;
* receive a separate private IPv4 Subnet&lt;br /&gt;
* receive a separate public IPv6 Subnet&lt;br /&gt;
* have a separated Broadcast Domain only accessible by authorized projects&lt;br /&gt;
* always use up at least one IPv4 used for the virtual Router&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Karlsruhe region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses (Routers and Floating IPs) from &amp;lt;code&amp;gt;provider-network&amp;lt;/code&amp;gt; will be migrated to a new IPv4 Subnet. &lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* During the Migration all Floating IPs will be redistributed and some minor connection interruptions will happen.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network:&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1985</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1985"/>
		<updated>2026-03-17T16:03:25Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the VM networks in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1984</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1984"/>
		<updated>2026-03-17T15:52:52Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
 &amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Load Balancers&amp;lt;/strong&amp;gt; are available and allow traffic to be distributed across multiple backend instances via a single public address.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Load-Balancers&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1983</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1983"/>
		<updated>2026-03-17T15:51:34Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
 &amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Load Balancers&amp;lt;/strong&amp;gt; are available and allow traffic to be distributed across multiple backend instances via a single public address.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Load-Balancers&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1982</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1982"/>
		<updated>2026-03-17T15:44:21Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A [[Networks Gen3#Floating-IPs|Floating IP]] can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1981</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1981"/>
		<updated>2026-03-17T15:41:24Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
== Are Load Balancers available in bwCloud-OS? ==&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
bwCloud-OS provides &#039;&#039;&#039;Load Balancers&#039;&#039;&#039; based on &#039;&#039;&#039;OpenStack Octavia&#039;&#039;&#039;. They allow you to distribute traffic across multiple backend instances and expose services via a single public endpoint.&lt;br /&gt;
&lt;br /&gt;
A typical setup involves creating a private network, deploying backend VMs, and configuring a load balancer with a listener, pool, and members. A Floating IP can then be assigned to make the service publicly accessible.&lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Load Balancers]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1980</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1980"/>
		<updated>2026-03-17T15:13:08Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the networking setup in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
📌 &#039;&#039;&#039;Note:&#039;&#039;&#039; This network extends the legacy IPv6-only network in the Mannheim region, which did not provide IPv4 connectivity. &#039;&#039;Before requesting an IPv4 address via a support ticket, please ensure that the combined connectivity is not already sufficient for your use case.&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1979</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1979"/>
		<updated>2026-03-17T14:54:09Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides details of the networking setup in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1978</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1978"/>
		<updated>2026-03-17T14:44:25Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;. This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1977</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1977"/>
		<updated>2026-03-17T14:37:32Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each &#039;&#039;&#039;[[Registration#Regions|bwCloud-OS region]]&#039;&#039;&#039;. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1976</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1976"/>
		<updated>2026-03-17T14:30:51Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Networks ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1975</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1975"/>
		<updated>2026-03-17T14:30:28Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1974</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1974"/>
		<updated>2026-03-17T14:28:35Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A public IPv6 address7&lt;br /&gt;
** private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition phase (ending 31. August 2026):&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a &#039;&#039;&#039;default routed network&#039;&#039;&#039;, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[Guide: Network Configuration by Region#IPv4 Ingress via Floating IPs|&#039;&#039;&#039;IPv4 Ingress via Floating IPs&#039;&#039;&#039;]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* &#039;&#039;&#039;Floating IPs&#039;&#039;&#039; are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network ===&lt;br /&gt;
&lt;br /&gt;
* There are also flat external networks available, such as &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; .&lt;br /&gt;
* They can be assigned to projects via a &#039;&#039;&#039;[https://bw-support.scc.kit.edu/ support ticket]&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
Instances connected directly to this type of network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1973</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1973"/>
		<updated>2026-03-17T14:21:00Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A public IPv6 address7&lt;br /&gt;
** private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition phase (ending 31. August 2026):&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;&lt;br /&gt;
** A &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;&lt;br /&gt;
 &lt;br /&gt;
This is a &#039;&#039;&#039;routed network&#039;&#039;&#039; using an OpenStack router connected to an external provider network.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039; through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default (see [[IPv4 Ingress via Floating IPs]])&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs ===&lt;br /&gt;
&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until 31. August 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition period:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1972</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1972"/>
		<updated>2026-03-17T14:10:25Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A public IPv6 address7&lt;br /&gt;
** private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; is used as the flat external network.&lt;br /&gt;
&lt;br /&gt;
After the transition phase (ending 31. August 2026):&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim_net&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default_net&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A public IPv6 address7&lt;br /&gt;
** private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1970</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1970"/>
		<updated>2026-03-17T08:51:42Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
** A public IPv6 address7&lt;br /&gt;
** private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1969</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1969"/>
		<updated>2026-03-17T08:50:34Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
* private IPv4 address&lt;br /&gt;
 &lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1968</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1968"/>
		<updated>2026-03-17T08:47:43Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1967</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1967"/>
		<updated>2026-03-17T08:43:59Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1966</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1966"/>
		<updated>2026-03-17T08:43:42Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided. &lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
= Freiburg =&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1965</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1965"/>
		<updated>2026-03-17T08:42:14Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
Guide: Network Configuration by Region &lt;br /&gt;
&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided.&lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1964</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1964"/>
		<updated>2026-03-17T08:41:38Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
= Guide: Network Configuration by Region =&lt;br /&gt;
&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided.&lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1963</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1963"/>
		<updated>2026-03-17T08:40:58Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&lt;br /&gt;
= Guide: Network Configuration by Region =&lt;br /&gt;
&lt;br /&gt;
This guide provides an overview of the networking setup in each bwCloud-OS region. It describes which networks are available by default, which can be requested, and how IPv4 and IPv6 connectivity is provided.&lt;br /&gt;
&lt;br /&gt;
While core networking concepts are consistent across regions, available networks, IP address ranges, and access methods may differ. Please refer to the section for your specific region.&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Freiburg ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Karlsruhe ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Mannheim ==&lt;br /&gt;
&lt;br /&gt;
=== Overview ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region provides a default routed network, as well as additional networks that can be assigned to projects upon request. Both IPv6 and IPv4 connectivity options are available, depending on the selected network.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Default Network: &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* All projects have access to the default network &amp;lt;code&amp;gt;routed_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* Instances connected to this network receive:&lt;br /&gt;
  ** A public IPv6 address&lt;br /&gt;
  ** A private IPv4 address&lt;br /&gt;
&lt;br /&gt;
This is a routed network using an OpenStack router connected to the external provider network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
* IPv6: Direct public connectivity&lt;br /&gt;
* IPv4 (egress): Provided via SNAT through the router&lt;br /&gt;
* IPv4 (ingress): Not available by default&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== IPv4 Ingress via Floating IPs (&amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;) ===&lt;br /&gt;
&lt;br /&gt;
* Public IPv4 connectivity can be enabled using Floating IPs.&lt;br /&gt;
* Floating IPs are allocated from the external network &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* They can be assigned to projects upon request via a support ticket.&lt;br /&gt;
&lt;br /&gt;
Once assigned, a Floating IP can be associated with an instance to provide IPv4 ingress connectivity.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Flat External Network: &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; ===&lt;br /&gt;
&lt;br /&gt;
* The network &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is a flat external network.&lt;br /&gt;
* It can be assigned to projects via RBAC rules.&lt;br /&gt;
&lt;br /&gt;
Instances connected to this network receive:&lt;br /&gt;
&lt;br /&gt;
* A public IPv4 address&lt;br /&gt;
* A public IPv6 address&lt;br /&gt;
&lt;br /&gt;
This enables dual-stack public connectivity (IPv4 and IPv6) without the need for Floating IPs.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
=== Migration from Gen2 to Gen3 ===&lt;br /&gt;
&lt;br /&gt;
The Mannheim region is currently operating two environments in parallel:&lt;br /&gt;
&lt;br /&gt;
* Gen2 (legacy cloud)&lt;br /&gt;
* Gen3 (current bwCloud-OS environment)&lt;br /&gt;
&lt;br /&gt;
This setup allows users to migrate their instances and data from Gen2 to Gen3.&lt;br /&gt;
&lt;br /&gt;
==== Transition plan ====&lt;br /&gt;
&lt;br /&gt;
* The coexistence period will last until September 2026.&lt;br /&gt;
* During this period, &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; is used to support migration scenarios.&lt;br /&gt;
&lt;br /&gt;
After the transition:&lt;br /&gt;
&lt;br /&gt;
* All IP addresses from &amp;lt;code&amp;gt;provider_interim&amp;lt;/code&amp;gt; will be migrated to &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
* This migration will be performed by administrators; no user action is required.&lt;br /&gt;
* Projects requiring a flat external network will be assigned &amp;lt;code&amp;gt;provider_default&amp;lt;/code&amp;gt;.&lt;br /&gt;
&lt;br /&gt;
---&lt;br /&gt;
&lt;br /&gt;
== Ulm ==&lt;br /&gt;
&lt;br /&gt;
*Information for this region will be provided soon.*&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1962</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1962"/>
		<updated>2026-03-17T08:36:48Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Network Configuration by Region|➡️ Guide: Network Configuration by Region]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1961</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1961"/>
		<updated>2026-03-17T08:36:29Z</updated>

		<summary type="html">&lt;p&gt;Sia: Sia moved page Guide: Networks Regional Details to Guide: Network Configuration by Region without leaving a redirect&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Guide ==&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1960</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1960"/>
		<updated>2026-03-17T08:12:41Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Networks Regional Details|➡️ Guide: Networks Regional Details]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1959</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1959"/>
		<updated>2026-03-17T08:11:33Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide: Networks Regional Details|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1958</id>
		<title>Guide: Network Configuration by Region</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Guide:_Network_Configuration_by_Region&amp;diff=1958"/>
		<updated>2026-03-17T08:09:11Z</updated>

		<summary type="html">&lt;p&gt;Sia: Sia moved page Guide: Public IPv4 Allocation in Regions to Guide: Networks Regional Details without leaving a redirect&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;== Guide ==&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1957</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1957"/>
		<updated>2026-03-16T23:52:17Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1956</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1956"/>
		<updated>2026-03-16T23:51:10Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1955</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1955"/>
		<updated>2026-03-16T23:50:33Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, &#039;&#039;&#039;IPv4 egress connectivity&#039;&#039;&#039; is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, &#039;&#039;&#039;IPv4 ingress connectivity&#039;&#039;&#039; can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1954</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1954"/>
		<updated>2026-03-16T19:18:35Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
By default, every VM receives a &#039;&#039;&#039;public IPv6 address&#039;&#039;&#039;. Depending on the assigned or chosen network, it also receives either a &#039;&#039;&#039;public IPv4 address&#039;&#039;&#039; or a &#039;&#039;&#039;private IPv4 address&#039;&#039;&#039;. In the latter case, egress IPv4 connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;[[Registration#Regions|region]]&#039;&#039;&#039; in bwCloud-OS has its own set of networks and IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; In not available by default, IPv4 ingress connectivity can also be provided via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Floating IPs&#039;&#039;&#039; provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]]&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;instance name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your own domain — either through your home institution or an external domain provider — to point to your instance. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1953</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1953"/>
		<updated>2026-03-16T18:57:54Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the FQDN of the instance using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;name&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1952</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1952"/>
		<updated>2026-03-16T18:56:24Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the instance’s  FQDN using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;name&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;instance-name&amp;lt;/code&amp;gt; the project is called &amp;lt;code&amp;gt;project-name&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;instance-name.project-name.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.ul.bwcos.de/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I obtain a custom domain through bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain registration&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options o achieve this are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the lifetime of the instance (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third party DNS service —  especially if you don’t have your own domain, or your use case involves frequently changing IPs or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS provide TLS/SSL certificates? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039; that you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1951</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1951"/>
		<updated>2026-03-16T18:46:00Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the instance’s  FQDN using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;fully qualified domain name (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of an instance FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;name&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bwcloud-os-instance.de.&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;myVM&amp;lt;/code&amp;gt;, the project is called &amp;lt;code&amp;gt;myProject&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;myVM.myPreject.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.bw-cloud.org/ Dashboard]&#039;&#039;&#039;, under &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I get a custom domain via bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain hosting&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the instance&#039;s lifetime (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third-party DNS service —   especially if you don’t have your own domain, or your use case involves frequently changing or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Can I get a certificate from bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039;, which you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1950</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1950"/>
		<updated>2026-03-16T18:39:28Z</updated>

		<summary type="html">&lt;p&gt;Sia: /* Does bwCloud-OS also assign FQDNs? */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the instance’s  FQDN using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;generic hostname (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of the instance&#039;s FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;UUID&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bw-cloud-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;kos&amp;lt;/code&amp;gt;, the project is called &amp;lt;code&amp;gt;yarn&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;kos.yarn.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.bw-cloud.org/ Dashboard]&#039;&#039;&#039;, on the &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039; page.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I get a custom domain via bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain hosting&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the instance&#039;s lifetime (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third-party DNS service —   especially if you don’t have your own domain, or your use case involves frequently changing or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Can I get a certificate from bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039;, which you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1949</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1949"/>
		<updated>2026-03-16T16:49:26Z</updated>

		<summary type="html">&lt;p&gt;Sia: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the instance’s  FQDN using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS also assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;generic hostname (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of the instance&#039;s FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;UUID&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bw-cloud-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;kos&amp;lt;/code&amp;gt;, the project is called &amp;lt;code&amp;gt;yarn&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;kos.yarn.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.bw-cloud.org/ Dashboard]&#039;&#039;&#039;, on the &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Instance Name&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interfaces&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Name&#039;&#039;&#039; page.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I get a custom domain via bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain hosting&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the instance&#039;s lifetime (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third-party DNS service —   especially if you don’t have your own domain, or your use case involves frequently changing or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Can I get a certificate from bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039;, which you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
	<entry>
		<id>https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1948</id>
		<title>Networks Gen3</title>
		<link rel="alternate" type="text/html" href="https://wiki.bwcloud-os.de/index.php?title=Networks_Gen3&amp;diff=1948"/>
		<updated>2026-03-16T16:32:51Z</updated>

		<summary type="html">&lt;p&gt;Sia: /* Are Floating IPs also available for instances? */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;span id=&amp;quot;In-a-Nutshell&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
{{InANutshell| &lt;br /&gt;
&amp;lt;li&amp;gt;Each bwCloud-OS instance launched using the standard method is automatically assigned a  &amp;lt;strong&amp;gt;public IP address&amp;lt;/strong&amp;gt;.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt; &amp;lt;strong&amp;gt;Floating IPs&amp;lt;/strong&amp;gt;, which persist independent of instances, are also available.&lt;br /&gt;
&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Instances are also assigned a &amp;lt;strong&amp;gt;persistent FQDN&amp;lt;/strong&amp;gt; based on their name, project and region.&amp;lt;/li&amp;gt;&lt;br /&gt;
&amp;lt;li&amp;gt;Domain hosting is not provided, but you can point your own &amp;lt;strong&amp;gt;domain&amp;lt;/strong&amp;gt; to the instance’s  FQDN using a CNAME record.&amp;lt;/li&amp;gt;&lt;br /&gt;
}}&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
__TOC__&lt;br /&gt;
&lt;br /&gt;
= Networks &amp;amp; IP-addresses =&lt;br /&gt;
&lt;br /&gt;
== Will my instance receive a public IP? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
By default every VM receives a &#039;&#039;&#039;public&#039;&#039;&#039; &#039;&#039;&#039;IPv6&#039;&#039;&#039; address. It also receives a &#039;&#039;&#039;private&#039;&#039;&#039; &#039;&#039;&#039;IPv4&#039;&#039;&#039; address, so that &#039;&#039;&#039;egress IPv4&#039;&#039;&#039; connectivity is provided via &#039;&#039;&#039;SNAT&#039;&#039;&#039;.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Each &#039;&#039;&#039;region&#039;&#039;&#039; in bwCloud-OS has its own set of IP address ranges&#039;&#039;&#039;.&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; IPv4 ingress connectivity (&#039;&#039;&#039;public IPv4&#039;&#039;&#039;-addresses) can also be provided in every region via a [https://bw-support.scc.kit.edu/ support ticket].&lt;br /&gt;
&lt;br /&gt;
[[Guide:_Public_IPv4_Allocation_in_Regions|➡️ A detailed guide to public IPv4 allocation in regions]]&lt;br /&gt;
&lt;br /&gt;
== How long does an IP remain assigned to my instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Public-IP-Liftime&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
The IP address(es&#039;&#039;&#039;)&#039;&#039;&#039; assigned to your instance remains associated with it for the entire lifetime of the instance — even if you stop (shut down) the instance.&lt;br /&gt;
&lt;br /&gt;
The IP is only released when the instance is deleted (terminated). After termination, the IP is returned to the regional pool and may be reassigned to another instance in the region.&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Note:&#039;&#039;&#039; Floating IPs will persist even after an Instance deletion. They can be released manually.&lt;br /&gt;
&lt;br /&gt;
== Are Floating IPs also available for instances? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Floating-IPs&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. &lt;br /&gt;
&lt;br /&gt;
Floating IPs provide a mechanism to perform 1:1 NAT between a public IPv4 address and a private IPv4 address of an instance enabling ingress IPv4 connectivity. &lt;br /&gt;
&lt;br /&gt;
For more information and detailed setup instructions, see the guide below.&lt;br /&gt;
&lt;br /&gt;
➡️ [[Guide: Routers and Floating IPs|Routers and Floating IPs Guide]].&lt;br /&gt;
&lt;br /&gt;
= Domains and FQDNs =&lt;br /&gt;
&lt;br /&gt;
== Does bwCloud-OS also assign FQDNs? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;FQDN&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Yes. Every running instance in bwCloud-OS is automatically assigned a &#039;&#039;&#039;generic hostname (FQDN)&#039;&#039;&#039;. This allows the instance to be reached via a &#039;&#039;&#039;persistent network identifier&#039;&#039;&#039;, even if its public IP address changes. This FQDN is valid for the &#039;&#039;&#039;lifetime&#039;&#039;&#039; of the instance.&lt;br /&gt;
&lt;br /&gt;
==== Format of the instance&#039;s FQDN ====&lt;br /&gt;
&lt;br /&gt;
* The &#039;&#039;&#039;UUID&#039;&#039;&#039; &#039;&#039;&#039;of the instance&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;project name&#039;&#039;&#039;&lt;br /&gt;
* The &#039;&#039;&#039;region abbreviation&#039;&#039;&#039; (e.g., &amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt; for Mannheim)&lt;br /&gt;
* The &#039;&#039;&#039;domain suffix&#039;&#039;&#039;: &amp;lt;code&amp;gt;.bw-cloud-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
&#039;&#039;&#039;Example:&#039;&#039;&#039;&lt;br /&gt;
&lt;br /&gt;
 If your instance name is &amp;lt;code&amp;gt;kos&amp;lt;/code&amp;gt;, the project is called &amp;lt;code&amp;gt;yarn&amp;lt;/code&amp;gt; and it runs in Mannheim (&amp;lt;code&amp;gt;ma&amp;lt;/code&amp;gt;), the FQDN will be:&amp;lt;pre&amp;gt;kos.yarn.vm.ma.bwcloud-os-instance.de&amp;lt;/pre&amp;gt;The FQDN can also be found in the &#039;&#039;&#039;[https://portal.bw-cloud.org/ Dashboard]&#039;&#039;&#039;, on the &#039;&#039;&#039;Instances&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Network&#039;&#039;&#039; -&amp;gt; &#039;&#039;&#039;Interface&#039;&#039;&#039; page.&lt;br /&gt;
&lt;br /&gt;
== Can I get a request more DNS records in bwCloud-OS? ==&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
Yes.&lt;br /&gt;
&lt;br /&gt;
We manage the top level domain &amp;lt;code&amp;gt;bwcloud-os-instance.de.&amp;lt;/code&amp;gt; It is possible to request a DNS record for a floating IP for example.&lt;br /&gt;
&lt;br /&gt;
== Can I get a custom domain via bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domains&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide custom &#039;&#039;&#039;domain hosting&#039;&#039;&#039;. However, you can use your &#039;&#039;&#039;own domain&#039;&#039;&#039; — either through your home institution or an external domain provider — to &#039;&#039;&#039;point to your instance&#039;&#039;&#039;. &lt;br /&gt;
&lt;br /&gt;
Some options are described below.&lt;br /&gt;
&lt;br /&gt;
== How can I point a domain to an instance? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Domain-Mapping&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
You can point a domain to your instance in two main ways:&lt;br /&gt;
&lt;br /&gt;
==== 🔹 CNAME to the instance FQDN ====&lt;br /&gt;
Since the FQDN is persistent for the instance&#039;s lifetime (even if the instance is stopped and started again), you can safely set a CNAME record like:&lt;br /&gt;
&lt;br /&gt;
&amp;lt;code&amp;gt;myvm.example.org → instance-name.project-name.vm.region.bwcloud-os-instance.de&amp;lt;/code&amp;gt;&lt;br /&gt;
&lt;br /&gt;
==== 🔹 Dynamic DNS ====&lt;br /&gt;
Alternatively, you can configure a Dynamic DNS setup where your VM updates its IP in a third-party DNS service —   especially if you don’t have your own domain, or your use case involves frequently changing or multiple IPs.&lt;br /&gt;
&lt;br /&gt;
== Can I get a certificate from bwCloud-OS? ==&lt;br /&gt;
&amp;lt;span id=&amp;quot;Certificates&amp;quot;&amp;gt;&amp;lt;/span&amp;gt;&lt;br /&gt;
&lt;br /&gt;
No, bwCloud-OS does &#039;&#039;&#039;not&#039;&#039;&#039; provide &#039;&#039;&#039;certificates.&#039;&#039;&#039; However, you can obtain certificates directly from public providers like &#039;&#039;&#039;Let’s Encrypt&#039;&#039;&#039; using tools such as &#039;&#039;&#039;Certbot&#039;&#039;&#039;, which you install and run on your instance.&lt;/div&gt;</summary>
		<author><name>Sia</name></author>
	</entry>
</feed>