Network Management
EMQX Cloud provides network management at two levels: the project level and the deployment level.
Project-Level Network Management
Each project includes a Network Management section in the left menu. It displays the networks associated with deployments in that project.
Network association is available only when deployments use the same cloud provider and region. The behavior depends on the service:
- For an EMQX Broker, EMQX Tables, or EMQX Agents deployment, select a compatible existing network under Network Association to place the service in the same VPC as the services already using that network. If you do not select a network, or if none is available, EMQX Cloud creates a new network for the deployment.
- For an EMQX Fleets deployment, select an eligible network that already contains the required Broker and Tables deployments.
Services in the same network can communicate through private addresses by default. Services in different networks must communicate through public addresses. For cross-network connections:
- Agents must use the Tables public connection address and port
443, not the default port4000, to access Tables. - Broker must have the NAT Gateway enabled to access Tables over the public internet.
Important Notice
You cannot change the network of a deployment after the deployment is created. Confirm the network selection before you deploy.
A network can contain only one deployment of each service type: EMQX Broker, EMQX Tables, EMQX Fleets, or EMQX Agents.
The network list shows the following information for each network:
| Column | Description |
|---|---|
| Network Name | The name of the network. Click to view details, including the VPC ID, CIDR, and associated deployments. |
| Status | The current status of the network. |
| Cloud Platform | The cloud provider where the network is hosted. |
| Region | The region where the network is located. |
| Deployments | The number of deployments associated with this network. |
| Actions | A + icon for creating a compatible deployment with this network pre-selected. Available deployment types depend on the services already associated with the network. |
Deployment-Level Network Management
Note
Deployment-level Network Management is only available with the EMQX Dedicated and Dedicated Flex edition.
Each Dedicated and Dedicated Flex deployment also has a Network Management section in its own left menu. This provides additional options for managing network access, optimizing routing, and securing connectivity. For detailed instructions on configuring and using each feature, click the following links:
- VPC Peering Connection: Establishing secure, direct network connections between your EMQX VPC and your application’s VPC within the same or different regions.
- PrivateLink: Connecting to EMQX services securely over a private AWS or Azure network.
- Internal Endpoint: Distributing incoming traffic across multiple EMQX instances within the VPC peering network.
- NAT Gateway: Enabling your EMQX instances to communicate with external services while keeping internal resources private.