---
title: "Managed Kubernetes - Using vRack Private Network"
description: "OVHcloud Managed Kubernetes provides you with Kubernetes clusters without the hassle of installing or operating them."
url: https://docs.us.ovhcloud.com/en/public-cloud/managed-kubernetes/using-vrack-private-network
lang: en
---
> For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt.

# Managed Kubernetes - Using vRack Private Network

OVHcloud Managed Kubernetes provides you with Kubernetes clusters without the hassle of installing or operating them.

By default, your Kubernetes clusters will have public IPs. For some use cases, or for security reasons, you might prefer having your Kubernetes cluster inside a private network.

OVHcloud [vRack](https://us.ovhcloud.com/network/vrack/) is a private networking solution that enables our customers to route traffic between OVHcloud dedicated servers, as well as other OVHcloud services.

 

## Requirements

- A [Public Cloud project](https://docs.us.ovhcloud.com/en/public-cloud/cross-functional/create-a-public-cloud-project.md) in your OVHcloud account

 

## Instructions

First of all, you will need to set up a vRack Private Network for your Public Cloud. To do so, please follow the [Configuring vRack for Public Cloud](https://docs.us.ovhcloud.com/en/public-cloud/network-services/configure-vrack.md) guide. Once you have created a vRack and added it to a Private Network, you can continue.

Integrating a cluster into a vRack Private Network must be done at the third step on cluster creation, when you can choose an existing private network for the cluster:

Your new cluster will be created inside the vRack Private Network you have chosen.

In the Managed Kubernetes Service Dashboard, you will see the cluster, with the chosen private network in the _Attached network_ column:

 

### Known limits

- All nodes within a Kubernetes cluster with vRack Private Network activated are available with that single Private Network. (No public/private mix, single private network available).
- To expose some workload on the Internet, you can use the External Load Balancers that are now compatible with nodes in vRack.
- The OVHcloud Public Cloud does not support security groups on vRack.
- You will still see a public IPv4 address on your worker nodes. This IP won’t be reachable from the Internet, and will be used exclusively for the administration of your nodes and their link to the Kubernetes control plane.
- As explained in the [Known limits guide](https://docs.us.ovhcloud.com/en/public-cloud/managed-kubernetes/known-limits.md), the following subnets are not compliant with the `vRack` feature and can generate some incoherent behaviors with our overlay networks:

```
10.2.0.0/16 # Subnet used by pods
10.3.0.0/16 # Subnet used by services
172.17.0.0/16 # Subnet used by the Docker daemon
```

 

## Go further

Browse all the [Managed Kubernetes Service (MKS) guides](https://docs.us.ovhcloud.com/en/public-cloud/managed-kubernetes/landing-page-managed-kubernetes.md).

Browse the rest of the [OVHcloud US documentation](https://docs.us.ovhcloud.com/en/index.md) for guides on our other products and services.

Learn more about [Managed Kubernetes](https://us.ovhcloud.com/public-cloud/kubernetes/) on the OVHcloud US website.

If you need training or technical assistance to implement our solutions, contact your sales representative or click on [this link](https://us.ovhcloud.com/professional-services/) to get a quote and ask our Professional Services experts for a custom analysis of your project.