Skip to main content
The Network tab shows the VM’s public network information and traffic counters. Exposed HTTP apps have their own public URLs on their install pages.

​
Public addresses and app URLs

Copy the actual app URL from its install page. A public IP is not interchangeable with a hostname: routing and TLS certificates can depend on the requested domain. Addresses and counters may be unavailable while the VM is provisioning or when network data cannot be retrieved. Refresh later if the information is missing. A displayed zero alone is not evidence that the VM has used no traffic.

​
Traffic allowance and charges

  • Outgoing: bytes leaving the VM during the calendar month, including app responses and other outbound traffic.
  • Incoming: bytes arriving at the VM. Incoming traffic does not count against the outbound allowance and is not billed by this traffic meter.
  • Allowance: each VM includes 20 TiB of outgoing traffic per calendar month. It is not pooled across the organization.
Additional outgoing traffic costs €0.0015 per GiB. Each metering charge is rounded up to the next cent. Units are binary: 1 GiB is 1024³ bytes and 1 TiB is 1024 GiB. Some dashboard labels use GB and TB for these units. Traffic is checked periodically, so the usage view and charges can lag activity. A new monthly allowance applies at the start of each calendar month. The short-range network graphs in Metrics are useful for troubleshooting; use the monthly counters and billing records to review billed usage.

​
How apps receive traffic

For exposed HTTP apps, Suji configures a tunnel connection from the VM to Cloudflare. Requests for the app’s Suji hostname travel through that connection to the app. This provides HTTPS on the Suji hostname without requiring a public inbound HTTP port for the tunnel. Other access paths are possible. An app that exposes a TCP service can use a direct public port. Custom domains use the mode described in the custom-domain guide. Any direct service needs the correct listening address, container port mapping and firewall rules. Apps on the same VM can share a Docker network. This is not a private network connecting different VMs; configure and secure communication between separate VMs explicitly.

​
Next

Firewall

Control inbound and outbound access on the public IP.

Custom domains

Choose the access path for your own domain.