KASTERVO Virtual Private Cloud (KVPC)

Your own private network on a high-availability cluster, with an edge firewall, VLANs, subnets and VPN connections you configure yourself.

On-Premises Control Without the Hardware

Running your own network means buying servers, cabling them, paying for their power and replacing parts when they fail. With KVPC, you get the private network, edge firewall, VLANs and subnets, and we look after the hardware and the cluster they run on.

An Edge Firewall You Control

Each KVPC has its own edge firewall, and you write its rules: what comes in from the internet, what goes out, and which traffic reaches each VLAN.

VLAN IDs You Choose

You pick the VLAN IDs yourself, so your KVPC can follow the numbering scheme you already use on-premises.

Your Subnets and Routing

You design the subnets, gateways and routing inside your KVPC. Our part stops at routing your public IP addresses to it.

VPN Connections You Manage

Set up site-to-site tunnels and remote-access VPNs on your firewall over IKEv2, OpenVPN, IPsec or WireGuard. A new tunnel doesn't wait on a ticket with us.

Encrypted Underlay

Traffic between the cluster's nodes crosses an encrypted underlay network, so it isn't readable on the links between them.

High-Availability Cluster

Your compute instances run on a multi-node, high-availability cluster, so they aren't tied to one physical server.

How It Works

Every setup starts with a KVPC: your private network and its edge firewall. You then add KASTERVO Compute Instances (KCI) for your workloads, each sized by RAM, CPU cores and high-availability flash storage. Internet traffic arrives on your public IP, and your office connects over a site-to-site VPN. Both enter through the edge firewall, which routes traffic to your VLANs and compute instances. One KVPC can serve several compute instances, so you don't need a firewall for every server.

Use Cases

ERP Deployment

Put your ERP server and its database on their own VLAN, reachable from your office over the site-to-site VPN and closed to the internet unless you add a rule for it. The ERP software and its licenses stay with you.

Multi-Tier Applications

Place the web, application and database tiers on separate VLANs and let firewall rules decide what crosses between them, so the web tier reaches the database only on the ports you allow.

Hybrid Cloud

Extend your on-premises network to KVPC over a site-to-site VPN. New workloads run in the cloud while the servers you already own stay where they are, on one routed network.

Features

Per-Unit Pricing

Compute instances are billed per GB of RAM, per CPU core and per GB of high-availability flash storage, each at a fixed monthly price. Your bill follows what you've allocated, not how hard it works.
Tier 3 Data Center

The cluster runs in a Digital Realty Tier 3 certified data center. KASTERVO is PCI-DSS compliant as a Level 2 service provider, and your data stays in the EU under GDPR.
Multiple Service Networks

Keep production, testing and management on separate networks inside one KVPC, each with its own subnet and firewall rules.
VLANs on Every KVPC

VLAN configuration is part of every KVPC, not a feature held back for a higher tier.
Remote Access for Your Team

Staff outside the office connect through a remote-access VPN that ends on your edge firewall, so your firewall rules apply to their traffic too.

Pricing

Each KVPC has a fixed monthly price and a one-off setup fee. Compute instances are priced per unit on 3-year, 1-year or pay-as-you-go plans. The calculator gives you the order of magnitude, and your proposal sets the final figure.

See KVPC pricing