UpCloud’s reputation rests on MaxIOPS storage performance. Less discussed is its networking, which is straightforward and makes a properly separated deployment easy to build.
The building blocks
- Public network. Internet-facing addresses on servers that need them.
- Utility network. A shared internal network within a zone, free of charge, for server-to-server traffic.
- SDN private networks. Your own isolated subnets, which you control.
- Floating IPs. Addresses that can be moved between servers for failover.
- Managed Load Balancer. Distributes traffic without you running a proxy tier.
A sensible structure
- Put application servers on the private network, with public access only through the load balancer.
- Keep databases on the private network with no public interface at all.
- Use the utility network for internal chatter such as monitoring and backups.
- Reserve a floating IP for anything that needs a stable address across replacements.
The important discipline is binding services to the private interface explicitly. A database configured to listen on all interfaces is publicly reachable if a firewall rule is ever wrong.
Firewall
UpCloud provides a per-server firewall. Default to deny inbound, then allow only what is needed:
- SSH from your own address or a bastion only.
- 80 and 443 only on servers that serve public traffic, or only from the load balancer.
- Database ports only from application server addresses on the private network.
Where storage performance changes the design
MaxIOPS matters when the workload is I/O bound: databases under write load, search index rebuilds, analytics scanning local data. If your bottleneck is CPU or network, the storage premium buys nothing measurable.
Measure before deciding. Sustained high I/O wait with idle CPU is the signature of a storage-bound workload. The detail is in UpCloud MaxIOPS.
Account access and compliance
UpCloud requires a credit card for verification and runs identity and compliance checks at sign-up, including sanctions and export control screening. The platform does not provide services to individuals or entities in countries subject to those measures.
For eligible customers the verification step is a delay rather than a barrier, which is why accounts with billing already active are useful against a deadline. Our UpCloud listings include a configuration carrying $500 credit. Accounts must be used in line with UpCloud’s terms of service and with applicable export control and sanctions law.
How it compares
Among European providers, Hetzner leads on price and OVHcloud on breadth, while UpCloud leads on storage consistency. See European cloud providers compared and UpCloud vs DigitalOcean.
Common questions
Does the utility network cost anything?
Utility network traffic within a zone is provided without separate charge. Check current terms.
Can private networks span zones?
SDN private networks are zone-scoped. Cross-zone connectivity needs a different approach.
Do I need the managed load balancer?
No, you can run your own proxy. The managed option removes a component you would otherwise operate.