From fe6311f6b0e1369c231e154491832126ca4ba4db Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 14:51:26 +0200 Subject: [PATCH 01/10] feat(vpc-peering): add ingress rules update transitivity --- pages/vpc-peering/how-to/manage-routing.mdx | 4 +++- pages/vpc/concepts.mdx | 2 ++ pages/vpc/how-to/manage-routing.mdx | 6 ++++++ 3 files changed, 11 insertions(+), 1 deletion(-) diff --git a/pages/vpc-peering/how-to/manage-routing.mdx b/pages/vpc-peering/how-to/manage-routing.mdx index 5b69351710..c77021fd36 100644 --- a/pages/vpc-peering/how-to/manage-routing.mdx +++ b/pages/vpc-peering/how-to/manage-routing.mdx @@ -39,4 +39,6 @@ Each VPC has auto-generated, managed routes to local subnets and Public Gateways 9. Click **Create route** to finish. -Your new route now displays in the **Routing** tab of your VPC. A matching custom route must be added to the target VPC for traffic to flow between the peered VPCs. The destination of that return route must be a subnet that contains the IP address(es) of the resources in the origin VPC that need to reach the peered side. \ No newline at end of file +Your new route now displays in the **Routing** tab of your VPC. A matching custom route must be added to the target VPC for traffic to flow between the peered VPCs. The destination of that return route must be a subnet that contains the IP address(es) of the resources in the origin VPC that need to reach the peered side. + +## \ No newline at end of file diff --git a/pages/vpc/concepts.mdx b/pages/vpc/concepts.mdx index 4191ab5fe6..3de4c0dd2e 100644 --- a/pages/vpc/concepts.mdx +++ b/pages/vpc/concepts.mdx @@ -63,6 +63,8 @@ The **D**omain **N**ame **S**ystem (DNS) is a naming system for devices connecte Scaleway Private Networks benefit from managed DNS, which resolves the hostnames of attached resources into their IP addresses. The hostname for a given device is generally the name defined when creating the resource (and which in the case of an Instance, for example, displays in the shell when connected to that resource by SSH). See [full information](/vpc/reference-content/dns/) on Scaleway DNS and how to reach a resource via its hostname. +## Ingress routing rule + ## IPAM **IP** **A**ddress **M**anager (IPAM) is Scaleway's tool for planning, tracking and managing the IP address space of Scaleway products. It acts as a single source of truth for the IP addresses of Scaleway resources. See our [dedicated IPAM documentation](/ipam/) for full information. diff --git a/pages/vpc/how-to/manage-routing.mdx b/pages/vpc/how-to/manage-routing.mdx index 460f2d9e6e..95db1ce9ff 100644 --- a/pages/vpc/how-to/manage-routing.mdx +++ b/pages/vpc/how-to/manage-routing.mdx @@ -259,6 +259,12 @@ It is not possible to manually delete an auto-generated, managed route. Only cus The custom route is deleted, and you are returned to the list of your VPC's routes. +## How to create an ingress routing rule + +## How to manage an ingress routing rule + +## How to delete an ingress routing rule + ## Routing limitations and best practices Read more about the VPC routing feature, including detailed explanations, usage considerations, limitations and best practices in our [dedicated reference content](/vpc/reference-content/understanding-routing/). From 583ff86db590ce51fbdca5d3856e5ba2e892f6f3 Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 15:59:45 +0200 Subject: [PATCH 02/10] feat(vpc-peering): update --- pages/vpc-peering/how-to/manage-routing.mdx | 63 ++++++++++++++++++++- pages/vpc/how-to/manage-routing.mdx | 6 +- 2 files changed, 64 insertions(+), 5 deletions(-) diff --git a/pages/vpc-peering/how-to/manage-routing.mdx b/pages/vpc-peering/how-to/manage-routing.mdx index c77021fd36..0c5463fecc 100644 --- a/pages/vpc-peering/how-to/manage-routing.mdx +++ b/pages/vpc-peering/how-to/manage-routing.mdx @@ -7,12 +7,19 @@ dates: posted: 2026-05-11 --- +import Requirements from '@macros/iam/requirements.mdx' import VPCRoutingCompatibility from '@macros/vpc-peering/vpc-routing-compatibility.mdx' This page explains how to manage routing for a VPC Peering connector using the [Scaleway console](https://console.scaleway.com/). To allow traffic through a peering connector, you must create a custom route in each of the two peered VPCs. Each route's destination must be a subnet containing the IP addresses of the resources in the opposite VPC that need to communicate through the connector. + + +- A Scaleway account logged into the [console](https://console.scaleway.com) +- [Owner](/iam/concepts/#owner) status or [IAM permissions](/iam/concepts/#permission) allowing you to perform actions in the intended Organization +- [Created a peering connector](/vpc-peering/how-to/create-peering-connector/) + ## How to create a custom route Each VPC has auto-generated, managed routes to local subnets and Public Gateways, but you can also create your own custom routes. @@ -23,7 +30,7 @@ Each VPC has auto-generated, managed routes to local subnets and Public Gateways 3. Click the **Routing** tab. -4. Click **Create route**. The custom route creation wizard displays. +4. Click **Create route** in the **Route table** section. The custom route creation wizard displays. 5. Enter a **description** for your route, e.g. "Route to VPC B". @@ -41,4 +48,56 @@ Each VPC has auto-generated, managed routes to local subnets and Public Gateways Your new route now displays in the **Routing** tab of your VPC. A matching custom route must be added to the target VPC for traffic to flow between the peered VPCs. The destination of that return route must be a subnet that contains the IP address(es) of the resources in the origin VPC that need to reach the peered side. -## \ No newline at end of file +## How to create an ingress routing rule + +An ingress routing rule allows you to manually define the destination for traffic originating from a peered VPC. Ingress routing rules do not apply to internal traffic from the VPC where you create them. + +1. Click **VPC** in the **Network** section of the Scaleway console side menu. A list of your VPCs displays. + +2. Use the **region selector** at the top of the page to filter for the region of the VPC where you want to define an ingress routing rule, then click the VPC. A list of Private Networks in this VPC displays. + +3. Click the **Routing** tab. + +4. Click **Create rule** in the **Ingress routing rules** section. The ingress routing rule creation wizard displays. + +5. Select the **IP type** (**IPv4** or **IPv6**) of the incoming traffic from the peered VPC. + +6. Enter the **IP address range** of the incoming traffic from the peered VPC. You must enter a CIDR range with a subnet mask, e.g. `192.168.1.0/24`. For a single IP address, use the `/32` mask for IPv4. + +7. Under **Enter next hop**, select the **Private Network** that the VPC should route the matching traffic through. + +8. Enter the **IPv4 address** of the resource to route the traffic to via the selected Private Network. + +9. Optionally, enter a **rule description**, and **rule tags** to help you organize your list of rules. + +10. Click **Create rule** to finish. + +Your new ingress routing rule now displays in the **Ingress routing rules** section of the **Routing** tab of your VPC. + +## How to manage an ingress routing rule + +1. Click **VPC** in the **Network** section of the Scaleway console side menu. A list of your VPCs displays. + +2. Use the **region selector** at the top of the page to filter for the region of the VPC whose ingress routing rule you want to manage, then click the VPC. A list of Private Networks in this VPC displays. + +3. Click the **Routing** tab. + +4. Click the edit icon next to the rule you want to modify in the **Ingress routing rules** section. + +5. Modify the details of the ingress routing rule as necessary, then click **Save changes** to finish. + + The ingress routing rule is updated, and you are returned to the list of your VPC's ingress routing rules. + +## How to delete an ingress routing rule + +1. Click **VPC** in the **Network** section of the Scaleway console side menu. A list of your VPCs displays. + +2. Use the **region selector** at the top of the page to filter for the region of the VPC whose ingress routing rule you want to delete, then click the VPC. A list of Private Networks in this VPC displays. + +3. Click the **Routing** tab. + +4. Click the delete icon next to the ingress routing rule you want to delete in the **Ingress routing rules** section. A pop-up displays asking you to confirm. + +5. Click **Confirm** to proceed. + + The ingress routing rule is deleted, and you are returned to the list of your VPC's ingress routing rules. diff --git a/pages/vpc/how-to/manage-routing.mdx b/pages/vpc/how-to/manage-routing.mdx index 95db1ce9ff..3c4dd49f93 100644 --- a/pages/vpc/how-to/manage-routing.mdx +++ b/pages/vpc/how-to/manage-routing.mdx @@ -259,11 +259,11 @@ It is not possible to manually delete an auto-generated, managed route. Only cus The custom route is deleted, and you are returned to the list of your VPC's routes. -## How to create an ingress routing rule +## How to manage ingress routing rules -## How to manage an ingress routing rule +Ingress routing rules allow you to manually define the destination for traffic originating from a [peered VPC](/vpc-peering/reference-content/understanding-vpc-peering/). Ingress routing rules do not apply to internal traffic from the VPC where you create them. -## How to delete an ingress routing rule +Refer to the [dedicated documentation](/vpc-peering/how-to/manage-routing/) for comprehesive information on how to manage ingress routing rules. ## Routing limitations and best practices From ed5961a75cdb9ad1f3d1883857f11cb95864c2cd Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 16:11:03 +0200 Subject: [PATCH 03/10] feat(vpc-peering): update --- pages/vpc-peering/concepts.mdx | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/pages/vpc-peering/concepts.mdx b/pages/vpc-peering/concepts.mdx index 7a42c305e9..5f4204dd7b 100644 --- a/pages/vpc-peering/concepts.mdx +++ b/pages/vpc-peering/concepts.mdx @@ -21,6 +21,14 @@ For two VPCs to be successfully peered, none of the CIDR blocks assigned to thei To route traffic between two peered VPCs, you must create custom routes on each side. These are user-defined, personalized routes that let you route all traffic destined for an IP address within a defined range, to a designated next hop. The next hop can be a resource within this VPC, or a peered VPC. [How to create custom routes](/vpc/how-to/manage-routing/#how-to-create-a-custom-route). +## Ingress routing rule + +An ingress routing rule routes incoming traffic from a peered VPC to a specific private IP address within a destination VPC's Private Network. This allows you to, for example, force all traffic entering a VPC from a peering connection to first go through a central firewall before reaching its final destination to inspect traffic. + +Ingress routing rules are defined at the VPC level and apply only to that VPC. They affect inter-VPC traffic (traffic coming from other VPCs) and do not apply to internal traffic within the VPC itself. You can configure multiple ingress routing rules per VPC. + +Each rule is composed of a **source** (the CIDR block of the source subnet targeted by the rule), and a **next hop** (the IP of a resource in a specific Private Network to which the traffic is forwarded). [How to create an ingress routing rule](/vpc-peering/how-to/manage-routing/#how-to-create-an-ingress-routing-rule). + ## Origin VPC The VPC that initiates a [peering connection](#peering-connection). When you create a [peering connector](#peering-connector), you designate one of your own VPCs as the origin, and another VPC as [target](#target-vpc). This expresses your consent, as a manager of the origin VPC, to peer with the target VPC. From c2d2db6cc800959d01fdb1b73aceda7ad9e56acc Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 16:15:42 +0200 Subject: [PATCH 04/10] feat(vpc-peering): update --- pages/vpc-peering/concepts.mdx | 4 ---- pages/vpc-peering/faq.mdx | 5 ----- pages/vpc-peering/reference-content/features-limitations.mdx | 4 ---- pages/vpc-peering/reference-content/statuses.mdx | 4 ---- .../reference-content/understanding-transitive-peering.mdx | 4 ---- .../reference-content/understanding-vpc-peering.mdx | 5 ----- .../troubleshooting/resolving-peering-conflicts.mdx | 4 ---- 7 files changed, 30 deletions(-) diff --git a/pages/vpc-peering/concepts.mdx b/pages/vpc-peering/concepts.mdx index 5f4204dd7b..25d906eae0 100644 --- a/pages/vpc-peering/concepts.mdx +++ b/pages/vpc-peering/concepts.mdx @@ -7,10 +7,6 @@ dates: validation: 2026-02-10 --- - -VPC Peering is currently in Public Beta. - - ## CIDR block When you [create a Private Network](/vpc/how-to/create-private-network/), it gets two CIDR blocks (IPv4 and IPv6). As you attach resources to the Private Network, their private IP addresses will come from these blocks. [Read more about CIDR blocks](/vpc/concepts/#cidr-block). diff --git a/pages/vpc-peering/faq.mdx b/pages/vpc-peering/faq.mdx index 1dc7f076b7..d3ac20d2cf 100644 --- a/pages/vpc-peering/faq.mdx +++ b/pages/vpc-peering/faq.mdx @@ -10,11 +10,6 @@ productIcon: VpcPeeringProductIcon import peeringDiag from './assets/scaleway-vpc-peering-diag.webp' - - -VPC Peering is currently in Public Beta. - - ## Overview ### What is VPC Peering? diff --git a/pages/vpc-peering/reference-content/features-limitations.mdx b/pages/vpc-peering/reference-content/features-limitations.mdx index 0043434d7d..8d5963794c 100644 --- a/pages/vpc-peering/reference-content/features-limitations.mdx +++ b/pages/vpc-peering/reference-content/features-limitations.mdx @@ -7,10 +7,6 @@ dates: validation: 2026-04-10 --- - -VPC Peering is currently in Public Beta. - - This page lists the different features and limitations of Scaleway VPC Peering. ## Features diff --git a/pages/vpc-peering/reference-content/statuses.mdx b/pages/vpc-peering/reference-content/statuses.mdx index 2ad5c8b284..df0031d0fe 100644 --- a/pages/vpc-peering/reference-content/statuses.mdx +++ b/pages/vpc-peering/reference-content/statuses.mdx @@ -7,10 +7,6 @@ dates: posted: 2026-02-10 --- - -VPC Peering is currently in Public Beta. - - ## VPC Peering connector statuses A VPC Peering connector always has a **status**. diff --git a/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx b/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx index 334e253f98..e4950f443a 100644 --- a/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx +++ b/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx @@ -14,10 +14,6 @@ import peeringNoTransitivity4 from './assets/scaleway-vpc-peering-no-transitivit import peeringTransitivity4 from './assets/scaleway-vpc-peering-transitivity-4.webp' import peeringFullTransitivity from './assets/scaleway-vpc-peering-full-transitivity-4.webp' - -VPC Peering is currently in Public Beta. - - ## Overview Scaleway VPC Peering natively supports transitive peering. diff --git a/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx b/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx index fe524f3cf7..5b7eb1fbcf 100644 --- a/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx +++ b/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx @@ -10,11 +10,6 @@ dates: import peeringDiag from './assets/scaleway-vpc-peering-diag.webp' import VPCRoutingCompatibility from '@macros/vpc/vpc-routing-compatibility.mdx' - -VPC Peering is currently in Public Beta. - - - This document covers the features, use cases, pricing, and technical details of VPC Peering. ## Overview diff --git a/pages/vpc-peering/troubleshooting/resolving-peering-conflicts.mdx b/pages/vpc-peering/troubleshooting/resolving-peering-conflicts.mdx index 28561d23c0..5e6aa05614 100644 --- a/pages/vpc-peering/troubleshooting/resolving-peering-conflicts.mdx +++ b/pages/vpc-peering/troubleshooting/resolving-peering-conflicts.mdx @@ -7,10 +7,6 @@ dates: posted: 2026-02-10 --- - -VPC Peering is currently in Public Beta. - - You may create a peering connector, and then see that it has a status of `Conflict`. This page explains that status, and gives you tips on resolving the issue so your connector can move to a status of `Peered`. ## Understanding conflict status From 91bfbb7f78eb4181facf0dd0d857fa07ec815bba Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 16:23:30 +0200 Subject: [PATCH 05/10] feat(vpc-peering): update --- macros/vpc/ingress-routing-rule-concept.mdx | 8 ++++++++ pages/vpc-peering/concepts.mdx | 8 +++----- pages/vpc/concepts.mdx | 4 +++- 3 files changed, 14 insertions(+), 6 deletions(-) create mode 100644 macros/vpc/ingress-routing-rule-concept.mdx diff --git a/macros/vpc/ingress-routing-rule-concept.mdx b/macros/vpc/ingress-routing-rule-concept.mdx new file mode 100644 index 0000000000..ee14bec490 --- /dev/null +++ b/macros/vpc/ingress-routing-rule-concept.mdx @@ -0,0 +1,8 @@ +--- +macro: ingress-routing-rule-concept +--- +An ingress routing rule routes incoming traffic from a peered VPC to a specific private IP address within a destination VPC's Private Network. This allows you to, for example, force all traffic entering a VPC from a peering connection to first go through a central firewall before reaching its final destination to inspect traffic. + +Ingress routing rules are defined at the VPC level and apply only to that VPC. They affect inter-VPC traffic (traffic coming from other VPCs) and do not apply to internal traffic within the VPC itself. You can configure multiple ingress routing rules per VPC. + +Each rule is composed of a **source** (the CIDR block of the source subnet targeted by the rule), and a **next hop** (the IP of a resource in a specific Private Network to which the traffic is forwarded). [How to create an ingress routing rule](/vpc-peering/how-to/manage-routing/#how-to-create-an-ingress-routing-rule). \ No newline at end of file diff --git a/pages/vpc-peering/concepts.mdx b/pages/vpc-peering/concepts.mdx index 25d906eae0..5bcc0b104b 100644 --- a/pages/vpc-peering/concepts.mdx +++ b/pages/vpc-peering/concepts.mdx @@ -7,6 +7,8 @@ dates: validation: 2026-02-10 --- +import IngressRoutingRuleConcept from '@macros/vpc/ingress-routing-rule-concept.mdx' + ## CIDR block When you [create a Private Network](/vpc/how-to/create-private-network/), it gets two CIDR blocks (IPv4 and IPv6). As you attach resources to the Private Network, their private IP addresses will come from these blocks. [Read more about CIDR blocks](/vpc/concepts/#cidr-block). @@ -19,11 +21,7 @@ To route traffic between two peered VPCs, you must create custom routes on each ## Ingress routing rule -An ingress routing rule routes incoming traffic from a peered VPC to a specific private IP address within a destination VPC's Private Network. This allows you to, for example, force all traffic entering a VPC from a peering connection to first go through a central firewall before reaching its final destination to inspect traffic. - -Ingress routing rules are defined at the VPC level and apply only to that VPC. They affect inter-VPC traffic (traffic coming from other VPCs) and do not apply to internal traffic within the VPC itself. You can configure multiple ingress routing rules per VPC. - -Each rule is composed of a **source** (the CIDR block of the source subnet targeted by the rule), and a **next hop** (the IP of a resource in a specific Private Network to which the traffic is forwarded). [How to create an ingress routing rule](/vpc-peering/how-to/manage-routing/#how-to-create-an-ingress-routing-rule). + ## Origin VPC diff --git a/pages/vpc/concepts.mdx b/pages/vpc/concepts.mdx index 3de4c0dd2e..cf8fe8bef7 100644 --- a/pages/vpc/concepts.mdx +++ b/pages/vpc/concepts.mdx @@ -7,7 +7,7 @@ dates: posted: 2023-02-06 --- import RegionAndAz from '@macros/console/region-and-az.mdx' - +import IngressRoutingRuleConcept from '@macros/vpc/ingress-routing-rule-concept' import image from './assets/scaleway-vpc-pn-diag.webp' import image2 from './assets/scaleway-vpc-osi.webp' @@ -65,6 +65,8 @@ Scaleway Private Networks benefit from managed DNS, which resolves the hostnames ## Ingress routing rule + + ## IPAM **IP** **A**ddress **M**anager (IPAM) is Scaleway's tool for planning, tracking and managing the IP address space of Scaleway products. It acts as a single source of truth for the IP addresses of Scaleway resources. See our [dedicated IPAM documentation](/ipam/) for full information. From 17a7e3f7005410100ef9325d3a2a740e1838a973 Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 16:34:33 +0200 Subject: [PATCH 06/10] feat(vpc-peering): update --- pages/vpc-peering/how-to/manage-routing.mdx | 10 +++++----- pages/vpc/how-to/manage-routing.mdx | 18 ++++++++---------- 2 files changed, 13 insertions(+), 15 deletions(-) diff --git a/pages/vpc-peering/how-to/manage-routing.mdx b/pages/vpc-peering/how-to/manage-routing.mdx index 0c5463fecc..8e7a7d12a9 100644 --- a/pages/vpc-peering/how-to/manage-routing.mdx +++ b/pages/vpc-peering/how-to/manage-routing.mdx @@ -32,17 +32,17 @@ Each VPC has auto-generated, managed routes to local subnets and Public Gateways 4. Click **Create route** in the **Route table** section. The custom route creation wizard displays. -5. Enter a **description** for your route, e.g. "Route to VPC B". +5. Select the **IP type** (**IPv4** or **IPv6**) of the route's destination. -6. Optionally, enter one or more **tags** for your route. Tags help you filter and organize your list of routes. - -7. Enter a **destination** for the route. The VPC will apply the route to all traffic with a matching destination IP. You must enter an IPv4 or IPv6 CIDR range with a subnet mask, e.g. `192.168.1.0/24`. For a single IP address, use the `/32` mask for IPv4. +6. Enter an **IP address range** for the destination. The VPC will apply the route to all traffic with a matching destination IP. You must enter a CIDR range with a subnet mask, e.g. `192.168.1.0/24`. For a single IP address, use the `/32` mask for IPv4. If you enter a destination of `0.0.0.0/0`, all packets not destined for a local Private Network will be sent through the peering connector. -8. Choose **Peering connector** as the **next hop** for the route, then select the desired peering connector from the drop-down list. The VPC will route traffic for the destination IP to the selected entry. +7. Under **Enter next hop**, select **Peering connector** as the **next hop type**, then select the desired peering connector from the drop-down list. The VPC will route traffic for the destination IP to the peered VPC and all the Private Networks within it. + +8. Optionally, under **Enter custom route details**, enter a **route description**, and one or more **route tags**. Tags help you organize your list of routes. 9. Click **Create route** to finish. diff --git a/pages/vpc/how-to/manage-routing.mdx b/pages/vpc/how-to/manage-routing.mdx index 3c4dd49f93..62f4ad2d08 100644 --- a/pages/vpc/how-to/manage-routing.mdx +++ b/pages/vpc/how-to/manage-routing.mdx @@ -185,11 +185,9 @@ Follow the steps below to define a custom route: -5. Enter a **description** for your route, e.g. "Route to hosted VPN". +5. Select the **IP type** (**IPv4** or **IPv6**) of the route's destination. -6. Optionally, enter one or more **tags** for your route. Tags help you filter and organize your list of routes. - -7. Enter a **destination** for the route. The VPC will apply the route to all traffic with a matching destination IP. You must enter an IPv4 or IPv6 CIDR range with a subnet mask, e.g. `192.168.1.0/24`. For a single IP address, use the `/32` mask for IPv4. +6. Enter an **IP address range** for the destination. The VPC will apply the route to all traffic with a matching destination IP. You must enter a CIDR range with a subnet mask, e.g. `192.168.1.0/24`. For a single IP address, use the `/32` mask for IPv4. If your VPC has [up-to-date routing behavior](#how-to-update-routing-behavior) and you enter a destination of `0.0.0.0/0`, this custom route is treated in the same way as a **default route** advertised by a Public Gateway. @@ -197,16 +195,16 @@ Follow the steps below to define a custom route: - Other Private Networks who have opted in to receive default routes from throughout the VPC will also receive this route. -8. Enter a **next hop** for the route. The VPC will route traffic for the destination IP to the resource designated as the next hop. - - Select a peering connector if you are setting up [VPC peering](/vpc-peering/how-to/manage-routing/). - - Select the Private Network which the next hop resource is attached to. - - Select a resource type, e.g. **Instance**, **Public Gateway**, or **Elastic Metal**. - - Select the **name** of the specific resource you want to route traffic to. The resource must be attached to a Private Network in this VPC. +7. Under **Enter next hop**, select a **next hop type**. The VPC will route traffic for the destination IP via the next hop you define. + - Select **Local to this VPC** to route traffic to a specific resource in a Private Network within this VPC. Then select the **Private Network** which the next hop resource is attached to, and the **resource name** of the specific resource you want to route traffic to. + - Select **Peering connector** to route traffic to a peered VPC and all the Private Networks within it. Use this option if you are setting up [VPC peering](/vpc-peering/how-to/manage-routing/). Then select the desired peering connector from the drop-down list. - If you entered an IPv6 destination, resources not compatible with IPv6, e.g. Public Gateways, will not be available for selection as next hop. + If you selected an IPv6 destination, resources not compatible with IPv6, e.g. Public Gateways, will not be available for selection as next hop. +8. Optionally, under **Enter custom route details**, enter a **route description**,and **route tags**. Tags help you organize your list of routes. + 9. Click **Create route** to finish. The custom route is created and you are returned to the list of your VPC's routes, where the newly-created route now displays. From ae2bdba1c69db5794296174f0644f62644789626 Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 17:29:11 +0200 Subject: [PATCH 07/10] feat(vpc-peering): update --- pages/vpc-peering/concepts.mdx | 8 +++++--- pages/vpc-peering/faq.mdx | 4 ++-- pages/vpc-peering/how-to/manage-routing.mdx | 2 +- .../reference-content/features-limitations.mdx | 4 ++-- .../understanding-transitive-peering.mdx | 10 +++++----- .../understanding-vpc-peering.mdx | 4 ++-- .../vpc/how-to/assets/scaleway-create-vpc.webp | Bin 29558 -> 0 bytes pages/vpc/how-to/create-vpc.mdx | 13 ++++++++----- pages/vpc/how-to/manage-routing.mdx | 2 +- pages/vpc/quickstart.mdx | 3 --- 10 files changed, 26 insertions(+), 24 deletions(-) delete mode 100644 pages/vpc/how-to/assets/scaleway-create-vpc.webp diff --git a/pages/vpc-peering/concepts.mdx b/pages/vpc-peering/concepts.mdx index 5bcc0b104b..706eac8223 100644 --- a/pages/vpc-peering/concepts.mdx +++ b/pages/vpc-peering/concepts.mdx @@ -4,7 +4,7 @@ description: Learn the core concepts of Scaleway VPC Peering, including peering tags: vpc-peering, vpc, networking, private-network, cidr-block, custom-routes, ip-type, origin-vpc, target-vpc, orphan, peering-connector, peering-connection dates: creation: 2026-02-10 - validation: 2026-02-10 + validation: 2026-06-22 --- import IngressRoutingRuleConcept from '@macros/vpc/ingress-routing-rule-concept.mdx' @@ -49,9 +49,11 @@ The VPC that is identified in a [peering connection](#peering-connection) as the ## Transitive peering -Scaleway VPC Peering natively supports transitive peering across up to four chained VPCs. This means VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even though VPC A and C are not directly connected with a peering connector. +Scaleway VPC Peering supports transitive peering across up to four chained VPCs. This means VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even though VPC A and C are not directly connected with a peering connector. -To allow transitive peering across chained VPCs, additional [custom routes](#custom-routes) must be created in each VPC of the transitive chain. +Transitive peering is disabled by default. It must be enabled on the intermediary VPC (the VPC that forwards traffic between the two others) when [creating this VPC](/vpc/how-to/create-vpc/#how-to-create-a-vpc). Only intermediary VPCs require this setting, and it cannot be disabled after the VPC is created. + +To allow transitive peering across chained VPCs, additional [custom routes](#custom-routes) must also be created in each VPC of the transitive chain. Refer to the [dedicated documentation](/vpc-peering/reference-content/understanding-transitive-peering/) for more information on transitive peering. diff --git a/pages/vpc-peering/faq.mdx b/pages/vpc-peering/faq.mdx index d3ac20d2cf..d90f7dcbce 100644 --- a/pages/vpc-peering/faq.mdx +++ b/pages/vpc-peering/faq.mdx @@ -4,7 +4,7 @@ description: Get answers to common questions about Scaleway VPC Peering. Learn h tags: vpc-peering, networking, cloud-infrastructure, private-networks, vpc, network-connectivity, cloud-networking dates: creation: 2026-02-10 - validation: 2026-02-10 + validation: 2026-06-22 productIcon: VpcPeeringProductIcon --- @@ -42,7 +42,7 @@ No. Only VPCs in the same Scaleway region can be peered. ### Does Scaleway VPC Peering support transitive peering? -Yes, you can chain several VPCs using peering connectors, and benefit from transitivity between up to four VPCs using custom routes. +Yes, you can chain several VPCs using peering connectors, and benefit from transitivity between up to four VPCs using custom routes. Transitive peering is disabled by default and must be enabled on the intermediary VPC (the one forwarding traffic between two others) when this VPC is created. This setting cannot be disabled afterward. Refer to the [dedicated documentation](/vpc-peering/reference-content/understanding-transitive-peering/) for more information on transitive peering. diff --git a/pages/vpc-peering/how-to/manage-routing.mdx b/pages/vpc-peering/how-to/manage-routing.mdx index 8e7a7d12a9..f64d2af028 100644 --- a/pages/vpc-peering/how-to/manage-routing.mdx +++ b/pages/vpc-peering/how-to/manage-routing.mdx @@ -3,7 +3,7 @@ title: How to manage routing for VPC Peering description: Find out how to manage a VPC Peering connector using the Scaleway console. tags: vpc peering connector connect pair peer secure private networks dates: - validation: 2026-05-11 + validation: 2026-06-22 posted: 2026-05-11 --- diff --git a/pages/vpc-peering/reference-content/features-limitations.mdx b/pages/vpc-peering/reference-content/features-limitations.mdx index 8d5963794c..1a1316afbd 100644 --- a/pages/vpc-peering/reference-content/features-limitations.mdx +++ b/pages/vpc-peering/reference-content/features-limitations.mdx @@ -4,7 +4,7 @@ description: This page presents the different features and limitations of Scalew tags: vpc-peering features limitations specs quota transitivity dhcp technical datasheet dates: creation: 2026-04-10 - validation: 2026-04-10 + validation: 2026-06-22 --- This page lists the different features and limitations of Scaleway VPC Peering. @@ -25,7 +25,7 @@ Once two VPCs are peered, you control exactly which traffic flows across the pee ### Transitive peering -VPC Peering natively supports transitive peering. This means that VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even without a direct peering connector between A and C. Transitivity requires custom routes to be configured in each VPC of the chain. +VPC Peering supports transitive peering. This means that VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even without a direct peering connector between A and C. Transitive peering is disabled by default, and must be enabled on the intermediary VPC (here, VPC B) at its creation, and cannot be disabled afterwards. Transitivity also requires custom routes to be configured in each VPC of the chain. ### Unlimited traffic diff --git a/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx b/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx index e4950f443a..c680f3f837 100644 --- a/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx +++ b/pages/vpc-peering/reference-content/understanding-transitive-peering.mdx @@ -3,7 +3,7 @@ title: Understanding transitive peering description: This page helps users understand how transitivity works when using Scaleway VPC Peering. tags: peering transitivity daisy chained hub spoke dates: - validation: 2026-05-18 + validation: 2026-06-22 posted: 2026-05-18 --- @@ -16,13 +16,13 @@ import peeringFullTransitivity from './assets/scaleway-vpc-peering-full-transiti ## Overview -Scaleway VPC Peering natively supports transitive peering. - Transitive peering (or transitive routing) allows two VPCs that are not directly peered to exchange traffic through a third VPC that is peered with both. Traffic is forwarded through this intermediate network, making the connection transitive. -To enable transitivity, you must [define custom routes](/vpc/how-to/manage-routing/#how-to-create-a-custom-route) in each VPC. +Transitive peering is disabled by default. It must be [enabled on the intermediary VPC](/vpc/how-to/create-vpc/#how-to-create-a-vpc) (the VPC that forwards traffic between the two others) when that VPC is created. Only intermediary VPCs require transitive peering to be enabled, and this setting cannot be disabled after the VPC is created. + +To enable transitivity, you must also [define custom routes](/vpc/how-to/manage-routing/#how-to-create-a-custom-route) in each VPC of the chain. -For example, if VPC A is peered with both VPC B and VPC C, you can route traffic between VPC B and VPC C through VPC A. To do so, define a custom route in VPC B directing traffic to VPC C via VPC A, and a corresponding route in VPC C directing traffic to VPC B via VPC A. +For example, if VPC A is peered with both VPC B and VPC C, you can route traffic between VPC B and VPC C through VPC A. As the intermediary, VPC A must have transitive peering enabled. To route the traffic, define a custom route in VPC B directing traffic to VPC C via VPC A, and a corresponding route in VPC C directing traffic to VPC B via VPC A. As routing complexity increases with each additional VPC in the transitivity chain, transitive peering is limited to four chained VPCs. diff --git a/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx b/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx index 5b7eb1fbcf..ec41f68f17 100644 --- a/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx +++ b/pages/vpc-peering/reference-content/understanding-vpc-peering.mdx @@ -4,7 +4,7 @@ description: Discover how VPC Peering enables secure, private connections betwee tags: vpc-peering, networking, private-connection, secure-connectivity, cross-project, cross-organization, custom-routes, hub-and-spoke dates: creation: 2026-02-10 - validation: 2026-02-10 + validation: 2026-06-22 --- import peeringDiag from './assets/scaleway-vpc-peering-diag.webp' @@ -76,7 +76,7 @@ VPC Peering connectors are a regional resource, and are available in multiple re - You must know the VPC ID of the target VPC you want to peer with, in order to create a peering connection. - You must create custom routes in order to route traffic across a peering connection. Traffic will not be routed between them automatically or via any auto-created, managed routes. - All resources which are [compatible with VPC routing](/vpc/reference-content/understanding-routing/#limitations) are also compatible with VPC Peering, and traffic can be routed across a peering connection to and from these resources. -- [Transitive peering](/vpc-peering/concepts/#transitive-peering) is limited to four chained VPCs (three peering connectors). +- [Transitive peering](/vpc-peering/concepts/#transitive-peering) is limited to four chained VPCs (three peering connectors). It is disabled by default and must be enabled on the intermediary VPC at its creation. This setting cannot be disabled afterward. - If the VPCs have [network ACLs](/vpc/reference-content/understanding-nacls/) with a deny default rule, you must add a rule in each peered VPC's network ACL to explicitly allow traffic between the peered subnets. - The following products can be attached to a Private Network, but do not currently support [VPC routing](/vpc/reference-content/understanding-routing/), and are not compatible with [VPC Peering](/vpc-peering/reference-content/understanding-vpc-peering/): - Clusters for Apache Kafka® diff --git a/pages/vpc/how-to/assets/scaleway-create-vpc.webp b/pages/vpc/how-to/assets/scaleway-create-vpc.webp deleted file mode 100644 index 2ba4aa6bd43d3da6aaa121f28346a3e75b116b37..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 29558 zcmaHSQ*>rcu=X1#6MJIYwr$(CC${b6jcwbuZBHilOzfO|=Un|a|L%RU*WPP&ch!En ztDdTAWhrrSdlvveLrhpvU6E7P`1_f`YA6h#27AyNi!1e!#>i{ zj^3i`5xku}wwU+b+&pon48wbE`hLbTdum`wq%m?uef zT6L+rbb)kfvdrU(t!lvU?-PxNHy^xHZ!dg(Jy*nOJ04-~yE{ha=JFyn_mtB!F-4>n z*vHG)(_S@`@GKG_Y`Hk2$ReQ`85u^yR&W$7{91D8^0SnT(Sw|Sin(o=?ijVEx6#ba zkB5z{OR+=IkCTyCxcQ>M6w)&?&P=JM;fAz*EsTy$hl?3mSX|uFGw!Uel{m4OShB0l zuU#x=nl+d=wWfJ*JN0JE2V+iZbz+Oo)wHJ9V~pg_!?0#MHLJL%r)SX2HSt@o{8P-g zT3_biSnjC_^*~Cn+0-*7I+A>fFS2qZ;tnxYG|G7H4e5r_x?j8wpH`;RgRsic+F$&LYd&Lm?uq*k(hsLS&)Si!>7 z+r0m4#0D7b*(6zUqk)dl@D>yQz?&?|%QePd{C7eq@U`m}x?5P>)lhUt8<>GBp)p63 zGu1s+xmSF*J|KuSgCd?-hGw(`*^;-cf+gb7aVI8HLSadN$PFjtwQI{rnWNBI9r~2J z;vP`Bf!UFR^PQ1$ysTIk9U4}SQn({4orx>)uP$B(F)e=g2MvtsJuR~b+3`nPRvn2+ zm1|^jSf$$L3b39DmgvssFPMDV9{7y)_Qa@&GbE35S}=6zX;~YcuJ=orw#2ct;_6I= z6?@_eWMd_NCVQ?@B>rWOh(rgBhsIbOrTB|&yV2*1%cy~od`~bLh5S4`cA#LJrQ5$v zG|2)W+!5J}}~GHGTo?eCBgd%ZpAlCzG!*#KD>vNpQgq7G|> zW|8kNx7ge0Eq>AtDi8jALPlrL2&3V|1(IAaO3r!PpS8zL&1C%8pao|Nky!zRL10ZC zVQZO>N`6i)s}pg&MwUAvWC-`#V)%&Y920q!ThO8no0|0-;$&o4+BuAQh=P|wuQhb` z|5Q5Th}9D5I>M#gZYZ<_oO}aRN0OI58S{*m4~pK*!7j*YOUhZO8R)f8_lt{>jd@uw zPkM*j2Zcbo9ch_6@m^2>ITP#Ml1hnq!f`y~1&BPbwqs09?tFpkGL`(SOh zFI=>uu!1y+$|@zZhYLcv>$XxC!|dA0adMgOrx0J8dRs_3LITI1PEeAeKhxusEDNQG zRy}AKToKIwDXhXI<9C$Bb~$e`UGS0Unjl5;II?_!C;TqMRPNGNp2{eoM*1Z!H9Iq@6dFgHL&&Oc zZ{&z5Oexo^12I!~U?tL96CP;KzP_SrxOf;cL$*GhMjGk3G2g=z8j~bCz#LW|PG=92 z#5s?^>*obb8fL7HGS-TiNQvbcBX;z z`lVBrmMX98>?PwHK`i5TNTIm>`{+^)n|One2DkWEM=K|<`mSELc z*vof}wABLx5Kw4D5jxk_e!0wYywYeVEfg$^${O3n#iP)&UP5T4gVZmw^i#$HDgLAE z>x>Y;#^P<#!b-(a>@Dxy_;!AjPDo^N#UhcZ#7PR=v#7%oq$Eoh*ib5 zDaDb{vJ7nBDgrwx1ePXNTa-N;ZFU;S<15HN)FKdCC5jA8{q6IyjW;XH9nlhY%(ZW+ z;(NAP6Mi|wr+rMbgD@w-L*PJBYoX?zapVRA3^Odcs7(S(nD1)f-LZwDUI$m9q)IUN zkJ`)ug6yB#CzmvNC3trxI9?by*|qrE&pTw#xnD-&CL_+AJtStJxgOKgA^U{(%oAlDD6gG{pok#5g#F500!7&s-hR%g^dJ*#uajFP3TZ zp!fif%HoyQB>+dxTG2{{O2alMvj+$pkhYtt%V2Uy$@oJNiRJj#kdC=Ye*~RAsq_%B zwMo2;sBKYXc%pbmqC=4@dlG96PB~Kqs5&`jrVbHB;a=|U`;e>INS_mfYOYpd`?~U3 zba)@6Vi(8aG%kvvd6&)Jmb($@b^em_PU+S02aD?1WKU)tmx(phXoJ5<4c<}b&5|hr zhFb~z1k{V>jWcww3#9&`0svh1Qp|CkP-1|XM2Edp-q9ZfB1L0=>PRuKCadG<9~H~41dfO*7P_l4PuumheP&QtX(zNyR{@DarYb>&{a{gT))J>a=Cv(MK=tC`cI6Ov@ zxsZ>yM}hG$*v2!q8p2xO1f1^eEmmN9K$>5&VIcFNMDr`KK)dwpnOIVX%N`*s$sQG` z*KQI4Tj$~-L=pe6N0i+`2;vI<@esva`YTbAld$bDd-^TkM;(zZYAojd#RelT6j5il zg;4N$Z?39ew(^&7K8JDK(KohLs67GwH)j5=37^F=I?{E52Q?N~`g% zZQh*7EZT>CuqnW{`6$pJ5=nK1fEmONuJ~}ZG|*lHqF%#b`=;7%xv?tT6m~?98mI~i z-fx_JJ?_^fo5WI;USTTC)x5a8EXbh_!#!@u_3(ez=KvL_k3+pS(N{a9VznX8JUvjno8R21t%YwsDneQ%zv3iR_T&%x-q*c6zf zNyjzoWN30i`0sz6efKmUUQ8-tQ8G;^63oj5^$Iy4ts`zk7VZBk(N8WXen#Z#t+sfT z+ZicMRXJ@#=4&ZMg$jWv7d)sDUVDQnK(}lYe%g2mLz$xpqbHUJ^U}@xyG^sN%7z*iMi*YX!@O!6;o}n`=Ey^&)uLW|sLM?Hz61 z4Y~~4|BZ%w+982|7oBy8S{J`gtx~YuD!gb{;Pr35*yQ;enK%?92jYn{=UKPAsWXf0 zr&QB3Lcg898b=fu;7z(L*FFG$ol zD$5_In5qG`C*SMQpnl&Na@yb-tX=JU`B@bcQ2ENp=~7%is$_ zqps(N;-cekyMh>dg9+MKIvFp6&@Kmd9U90t|yr$ z4ZC&`!cPWqq?7KL6#v&a2eVR6H)&Fy?12vy%=i&1BXw!ys;5#9%ui#b&+ZJ-85u%OU2 z+4Q!rxgTmS8g$Od8Kc3Hp>KkvLzf<(9e;+US;#Shb29Rq-NfD6aX9z{Z`x~zf&gq6 zc{#nxUXq5HeWZZq9_piwNju)8XJw@l&)+tH6xcc)3kd>%>1x!K_*Pk+N{2?d&>8Vj zv0uj6=Mo8Nq)|r_+8gAtjPoW>g|unI;yU6tns%0nfr$eH@s`+_=amO{)od_)l>j zvQCrLAw*x)?6nNpO^-WvS2bhaymfxt6JSCoMa@({BO@L2Dt6Wz?Icph#%zrdng2C3 z1eOk(!)_cyNd#%Hf3rQ0qq>m8Y(jUdTbmkZBEz6a^7syg1lwOo6gVl&8q>|W*n9p| zrGgh>>D1BO3I+RI(ApmlE4F5*Dr_NUgIdR0(n-bIHx50=1>pp*~M(eM-UTUrzp+K1{j*KMj-B?L~Jo zi9mpxOlPrjQIW?Ar!W8k@a&irn@7Fka;U4$5ve}u|NmO%Y*7+NgL^K~R(lY}AJ2bb#S z<|aeMrFtyk5Z3pr{Pl_`5@%GeKBBe1XFlqc!kA*ekg2w_JZ)mrbz^(wRep8ewN8^) z^RTf|1HCGlfj#aAi}vEN++PhoI>0Qd3j2N8t)NG9`l-^X(jC)`rYx2732%g&ZD*E3a$ zn5SOv5qagIwf8{_cF5i&g)_xL=o?1TW2`7^7-o>ah*#KcRb&g~sE%qJW#G{Bpn1sI zxM3Jb%(HE{_9z4kbNZY33z?v1mFEK!{N?Zu2ntpGQ=T@wtjwTsg#9(DV>i8#O-Qm7 zRs+w1hbx^l_Fsi_*0?`&t*uy9W~TnMXP;az7@P9<7=3_Em}*!V__9l+ik5>KOQTjM zj~R+5SzBI$%Fvf*YJQ^yG; zWKNFJ1&8|m8(L~5$YG0p*7mV zcnn7W(A~b_sSFBl^(N!(t*>&8-ngyk$`LcQpB{vc3w+H7`VM8ayF2s(oR_q+{c6{< zaC+{|h|BavL5vpB@Fyn#Ct18xU|3S6ZGnQwJ56`sgp%dGDNSIsMb4Rbvj8<{O0203 z#GxvGENH1LF^Ut?uU$79Gjs$M;$qS=xqZZ}Z4@-qs9kMbpWU+cFh#CKQ!0?$FBb3P zr$(KhfGM9bPpaTQyK$(#EJ4)_nlw(gI#y{ss|bWbi^n1>Ia;4zO0E+;AfkcFBj^(Q zM_8z?Ho4cGv=t+}9$g)+_)=W^^AwL!U3++runE$TckbQ?yA)ZerQ{RKL?T;$4X-M6 z>8Cx7>Zps~{S0V;of=FtW+sHo)qUVF_1IC&oNaHWqp6Jn5nM`9H8nIC^y6<2{!TVa zo$}r45!F=)lHGiQPwT-T>MjeUqzUN?5@$eZpT6%u;+{WZ?>&wSi-@2kUJ3Eh786l~3X?S{Vy;RIG~hT&tyxn4q;1E)9Hz~PxQ>?_q9 z>3;&B`gnT2Nnn*y`6P2^0ms%hHaL4_CB-RTTU0GP6zqiHJS zZQ6rBjKf)jU}pP@UE5$3R%D4D@#_}7p;av1RQTuSvaHeXQa_0&+R=A1;+wsQ!Y6Sv z%oj1Io;6W>Fo*!zf4(I}9od_j_-$aNLIb#9>#rqCmmF{a+GK&l+!zy{#E&2l82XHr zg(LEREdnio0Ma2(E2zSJP?`gE!B~D(1o_lqA?qlxfQ?UCtpdN_L+1Fh!NFXRj&_Su ze?-Tf@^5hHnX;WVFUKi&(viE<|}m6KuJ_N*BkEm7l;H zXK!hr(W3&Vx&9g7;rq56%2;o1vFs@ww%2=EflzN~ULy7|5kDes3L9S5f3H_Sqtu18 zxBj6O82`p*GJ0$jJ}zyVWn-(YZc8Mw9pV#a{q`FnP{f(85Qe?T`t?X;cLA>V*D49! zF;7rHe<1o;;IOA7nuB9})(Ug%(&8S7Q*mVY7LXP|_$X;UT$;e7^#X6C&ea~ z^P(Y5_oU*$iIhlAld>!EJwLtv#jthD7~8J7krjzIuLc<*@nlplXb($dG_JINlMM?b zEY1*~SuV?&oEy1?qF9i6x<1!MCKAV0Sz`DGds+)W$J4zs&B3cRr2j|(fFW0~IH<1> z%ea|cvLjBg`_)u)iG)sW2z|J~hW0p1_c+4B3d6}LtFhMNSrRmC)1OsW?wDX#NYl|2 z1b+jPkBZ(rN@r_J=>7gd!ArXaQp{MNdU>985jp){BD)ta=)2;UChq00Krj0@A?(Cu zWD5j;(qjp^REu+RQ9Pm90-8?Dl(`)KaUt;bG!-x9H1Q4Dl27h%EplX7o3W45$YDxErX#U*iW1C6apkUg6S-x;IHmfff(p?_!=F*cf!x$_8YY*5An&KYPdkyE);ekYhd zCGyv;+BR0=n?S}<0_dsB#%;+|ZF`4K^+lr1QDMq+Y_2j|1O$U#REA0<89H==7i(R5bMOGVNt>>ohv=MRF1{=;?bP|H{0#nl7>G@!20{dbfb+pi5L z;TuZEn14n6wEwz1OXA)^Gna#4H?3!|#ltKa2mYE{fSTg2F{d5A<`ZQpbT+F#IKCUO z(n%!ms*0PM^dxT0QPX|C%11b0gCO{LhUJ>^YSiHHHktmBMAG))p3=|geUW1&)|lrRQB$X+ z+S2+plY>v}?(nnLw;3d(Cp!^TGO@4gZTCy{49A!26}ga{(?uF=VzF~}uE35DdmPFC z!BNdxo?V`movQAjU@8u^T!P)?i}l0~i;q@{mZY5Xbt&Oz7*9oKmb#JQ{BhId-`}U{ zQ=E^mUwEexE97P}r>smGjQw82I%27*(6{M1pQ0-9vq zQ(G~gl#yQ{T?(+u%BevNxng?#C~C(nq0&O=&H<=GiotDDr>1q%5^YOm`nb$x30%=Q=BOL?DYqX#bVcse+ags>sIlaSfn^ zD88ERJJi3zpi<8NPa2C0fMg=a8}@69*~KFCfV1vKOXt5XC*h^qTp~utyO&$23?A3R zsw7Gx3-IvJRc}i@TRT>D23x1gj#M41%-9(whesJf(avHl^Yc&K5=G(J zACEFMC-a$#Z0JGbOxxRBO1yL*jAMv7t)lmHd`5}PGg@)cHI*5UzRj-Y04Ahw`Pz57!c zHMsWMq@OYp)MhLR!_7lsy1T)eLZ429t8ZZxXJAQ0If5XDS&FHxo^o5=1w|+SwSoGt z*(f{pu+NNVHg7wB=?>Ai2^^HGGAXHMl*;=!&P zjdHEyO=${Sdb9vnsyyq9c`nglUcOd~65n9A6|VJcJ(@kQoa${NfBjs@@pp1O_)c*q zf6lF6W__WqJv{GV@W(_CHReyh?t7|#)MyXck(v2}rSPb(dEEZKzF~+(4#Wlf-bzi1 z2zMEpq)UffqbSsaMLH}frQoL0^v*WjcyTJFg)*BL*4|yS;nW9YLsMJr=6V||*>HT; zA`yzsBF^!G>^n}wIj=4!V_aaQX&yaH4>%qvV5OwQS4rWzgbv5Lg^S;I+))ef25o`0 z3G^%#XOmlO7JiaV%>2Y&rps034&{Uv9|V^jxFtSamKR<-CdIknZW2+}a*XCqy=oUijXl){+L*;Hz!78-ZYWO_6p}@PSA*&;tF7a)> zjRN5}joF?;jJV1QD%hmjBTnk{TONn?yr&^|UEL@St`KL3ucxY0csyea8g;zVRpA8< z+oaMaCq;x$FWc@2ns0ON@&iFg;Ns`H7;m?3!z+5Y)S4KaDPfJb^(nOho27nerVT+>;*Vn!EW+r8mZ zX2l>PvzWR1Fs|!J!_fq0LLvUgK9T+dde>SbiI7@d>tY8(&Fw4jcY)YgG^`DCL;LNq zF&+)_s*yR?2ktYN*wYpyLpX`r+#_|nyws~CV>(0a^*sY!q0JQ5V7NWDAP%Bm>;QgQ6Q0SU}ESKcAjlhclbCPoIBj1{BtX*mj7m991+RHtDXK>0TT@T70@|f4p7};f!85 zcP2AYZ4j?4(6T-A*}^Fe!VZfr)ZZrhZnaIeQVO$31P!YS@lDV8Uo`yQyVx2p_ksEN zf;^Njzh;OUeRL!^ck>3nE;%{ER(&^o;q)Npx;GM_#MrD4B~fG!J;Q|9R0_N5V_;3O zLLOwKpb|{wX>3&ui7WPVDX-Sd_k=F)KB_@3IN8F~IGn@F2(y+lQuo_O z0nVw+91Y_epgAY^ujXm3QG86qsP)$$H zx2vmU^mq4Mv_O=Za#yxlB?FDd!pdvyygRetstT3U*tPySDn&c3x`4CGs@5uoI-@9y zmp$Mc$1{HAuAmRn;{(?4v)Vs4*9+{SPtsasNg(Xv<(_9k&{u`2 zss_!iZnn`y{u+^Wv|=-FPB5?JeKBTx=hjo9ms{%4L?r8@o^yn#gHN@`zu@47*Y2WL z1{dnZqS>mR8u;ODh+h3dL+ZBhRIAD~A&va?ZDf&g9CHpe`YArwFL%}Cn_V@t;`_s9 zS0jVmrlp@}QjU@MtG&mudfbPW3A9(3<1|;%QX{aM{-tS`;gMOv)?SD^SB0%2Okous zWbq=-gIwhwzLmFf1%<;QY_rsR+-8x)2yVCFVVLOflW)U9YeE2MC%p8;J7nCX$q{+$ z?GEKf8+dpgmzmiUi~{|RwnBw1y;y)z-|EYL`CF*c|%Zk6DeYR2~x` zHk6mlm`ct0D(Fc70UmkNmF@E$K^7pUFm+RT)%0ttgwkeK<6RH{Lbb%U4H2AfNnIRK zA;sq?Gd&n40?}1_^H2V|lws71f&yBw`=z3+eDOg4XJx68FAqHlccvI_>P`psqNh}_ zCGHUxJ5=Tn5rtoZGejb_(UzLxU}?H9Y5H4E8PD>>0k5(4A(n4}^`#3EFE~{Q+dX9| zdEE!13({;IV?!t|q%6Xp{v4zD<7wMz79hx2gYMmO&N4`dwgeq&%AaIXJoST_YMbS? zk)pfS(eHF@KJxF@zXhl0R1^P!4xo5unlYMvEibe@4_N2;rDhNm@4E0bRDUk7lh1)^ zHYX=KEdIyUq*~%?Iu^k!vKpm%&Jv}ZNs#7RS1=z zV+vbevVY)$P|ZWpkW??tGsvVFER%MP6DrC}!A^<(&!0wdAIT6kpnS9wsT5(EV?9y? ze`H)Z^EC97q$wN8jh<_|>96g85@!OI+Hb!4x7S=>FE~M9JM4kd5XL+YK<{sFCZtwl zqShMSGleCv>5sZ_ZGL*)g+i4U!C^Q73ZLH%Woil0H3p&Xm7kJ&QbP+2pEHCz!U;>6 zxwM|B=#Rm(+iSQV#^5IE6TrCZeK6PvB<9Kv-`3k<^7bj84Zr~@@E}KP2_~kof=b5H8 z&Pa#s86x2kLPgL-TgrFfoFym|JpMzhM+5>=*;}2LWpuC=%L>wR*D^Hpb?Yv`_I>i& z_5c(+awUCWv(uU z9ZIZ`nDiv1c-~XDjb$H^0)j=ww?kl-i*ywDm{lN+2P z)2Jwe|Gg}z9Y#qZj_B!E&_x2KH5l^%^GUBqvrBJ?jWjDDLac#Rm5s#53TtU)`J3W) zBi6PX`O-Qiv4}a&3@cS;ELoE=%j)>$ki%2(a+vZLjd@Gyy=r*`Y2HNIb0KH#7U?Z5 zasgqH4GQG#S{DqS(v*luTl63KyB_AM(g}W>TRBPGr4lrv0kS4-`BO7iHZP?|-1n(E zk|z4}Zk@_z5Fc!I8`qqU$|N89_V+#TA3hAVy}x6n*h;uUMPKN>H%Z}dSB9RS(h54Zs>URBrZFA8Oq5LbVo#Q3eVP1$T{nP+LDaN%lb2Ver zUk-=z#sC_TLv|3J>6`Q}w%B>IFQ?RJqf9m=*n9nw zap?QvlQusZ__XCC^ka5WP>%|#N|K)Y>-*wF{Dx_c)V9Uq2LtFlKGGj*euHCqTZOeF z`So}p`8EK5^<~b%={#~XK}aw!AR`5hHRUcverKt#UD97I@8muJC-vJ%k93i@4U$+` z3(~So+#N8CSFA-vkx4mmHHN5}JG;k2(%G_y1Y`&bl`Zn?2+>9LFuh12BX4G;vj}5GmJ7XX?r7EHHj_HIors|Op!j5xj42X z2zJXwlHk8p4NgSxY$QuK1dy9PLI@DGcr7xxtE+2q`roPw!!3fY>#-3G0W$kWuRXl5 z38E+$E`sL}p`r=?@0I-f1|_Ba%|?M%$|;JrYFTu|ZKippS}3;)%A3uaN)8LM5bV~W zXwKmwoU&s5d`ti6?hGcC#SR{{BR%HpubJnkv>sGH>*Zx5ZgECp46-bP{y1r*8=2#>vf%XEv(7p~6 zW>m~Rzr*+PHO(AY~aX3nMp&3cbq zF11rvO(I5`Stb2HkhV_`~1Q(SwE?O>AIz$0_% zZxlF`94@g-jNh(l*e5b*Z-w^5dx-fTM{SRD zFNlUdnYux~iDFAo$B6*dC@DmrW+0W4aAZ*2G>I}aiNuD{FyuPM(#-fQU0Wk0x5J2Wzxiw&TKzN!{_>B@iKdKs|Iy?m4J#}j z*R`2X^Slo?{3i5`!2@NIg`&slp&N=5yh`YJ({3flPvc_jaHIvowy$sFf||8U^T7xryh zTs@}v#5#5Adg zJkTp$dMA5v<*Nb1)q_DjA&qjna(iWpE8I?@6CKEfzG@M?40~!dSNO~{Kid;0qKEse zF)UPVEG|>$;1c4iqxl?4o|f+U`Gy!gM3ljTRqdh?gjJqEFln(G6-Nv~f9#<@?LAojHL8Iaj*z}WFAe4K> zuix>!JES!*vxcjAZG=icU7Et(Qt|zm#x|l>uv3c1SZh+QC`ow(6C1d{lJ1G^Kq-+) z${YndDGZvBqygn*#O+aWQ3jQkEa&@6OX)V58z|?W8>xw*IpqomOD4QEM@y2+mrLLP z&Q>+Sb!h@WBs>w_BHmiz$)Nx;4|TTa)$g_?A4F+YaNNaKd3v-;$jOLx;^m|o{3EW8 z$$4f{;c^b+6>vp(w8S1ht{i+H#>1bj7Qpr!*J5-&lcOuXfxxhb{v${2tay12+TI$A zsv+jv?4x=K1^>!(RD;O>%@v-}pfHoiqA1w+bg^TBHKhTfNRvfl3F$2`DOt~K<6EZf z5w)L$90`8-x97||I9Dq|_&cCFw(XWQu*#_8SMqSa0Zel>ce2ML(WtYwy_}EvQmid= z>s5A0f58C_rxtKouBpK?`v@fAci>RIVflv0f1w%yw8z4R+00~Yj|i`xShJG2>rhph zd;NlDP0Z9N?5FKcNn6+fK>8!oP}H!~f(Xm(fl|GC%s0LD(Cza-s{JMK^E+kNol5~5 znydCCUvk=GD!t)-`_APIF*h6NmnzTvgf$X+JwBROnfEv)huhOx*#Nhwvq@71L4)wv zYW{NfUiJ2*wtgz1Aq3lIkS8 z7!wnXa~{_y)B9Y8-0Y_ScM<`7rIujKA}GnvLZ`y?3bfbz|T?m;?o zky={I#yGCr6aFe^&bE7HY{NMvu+G;?c*nysmOwCxNO{=cSHecj)ZYrvSiy5l#X;%SG zVm9%?N7l2ZYxB$ZZU02yw38QbpS4*c)S~Tu_=9eR*%?yUs z3s^m5(TR}zZH&inR*=L>&lf!a$oYOgR`b(fj(JXR?KdZJx6c1!1Srm3zc$x}^6oa} zS|32QSXvrTJ+F8+_kvt^wleK%Ldhp#2!m9a0}MCtO=gw!>Ey$Yeyv|N1Q$7Vv#1RZpr3VPrdsa!5sT{&RDnk8DNIEE+ zp&dQWWREo-eQg$KDqeqob|qqI%b;P`jG2n1^zS#wP>xp34&t}wk*jDWIVHI-F zoX{X#=kbT|pL-ii3_W+J9Y*?~uqUK(NYS75>T0OWR|I8In12YczJ^<=i-(~mKS)I6 zJJN=?aZfqoQzlGapCb@{Q1l(%C2HSeADM8Tl30$gr`5J6l7grUO;>WqBu#AhG0P$~WuJ)3d zC~$x0i|r28<=^)9`QTUF&lFUOr&ZLk!qLh&=t$XoVR|BAaTIVj-IHU-Z@%9J&~Qb*v(<&U}dkbj;}wD#V%YZuK-`a!e?Xzr<>9IvLc zgpb_sf+B8cxn9)BIUpOZpa+2gX+EO|LkfLz-zH6w_ z4u4E4s4Yq74hZ52%f0M$x_7 zO8WGpzrH5R6PpBqaElcd?)Uy-8&YyHY0Pb$MQ0(2y2rkH=#NPDtVME&)4Vgf8oV3+uW`9{+DVX}Agi9p#yxwi zVtj+4V@@1ygU+)M4e-vS(A4EfOvR2S0;ZZ=H6}k`k2Li$GuD|44G*0H2S$(=L`VYA zb*wrvULrgo30rk89wr`Xeu(m3uSxuL51p#vDv7mCPsR_NK3b%zwJ8BstH@X2Kp*|Y zhN<(g_1S|qtZFoD3YR{SugKrO(I|2(IXtKQ2*ZG!bZRi5cBNakoM2+~LvzJPPK|N) zp%UxE3%)D(C%Vsj<6j+R_myyHPMBahMO9;3#dC(e`8t7y>1VQIp^NYu?X~vAI<3ct{XkWdW#YjTH*k!)=i%g4fT_$v8sjvtqmZfmkmT+m8Jl2( zuyimP1tVc@>AX3x_oAvQZ!Ryy^B2jSo{WJ{eei611gu&UpgNauY{GZAE>EuL`9i+L zmBCBsXniY9M+Zl+Sj9J3!t5eLw*P)x*0U$zEQFhHz|OB3F?3;(?Ww`LJf?3%TEP-Q ziHV;H9_paEicJ8k6jz|6=zQcTO7U<^7IGEHosyUw}K6wacly z!g_l-ADvfRaWPtOiEW~7RL0+KGeTB``!Gr_r+r4uS39@+Kn0Q!7@D|XLgJ`ZXxn2v zV<4j=fP2agE0C&<&j)jfl(U5|Qmdtgg}6wR+PR8?HO?6EU*vmtiE)2SOO>Ot0mZhF zvxZT-xvXnDS)?L7`_2&x1J;9(!sqCQ&)JD#;OU(BF&k){A)XLUnj|{pv!}j$>X`qoK!5&;4PjOm`8g=Vbt5C& z4xrQJB6?P9@;Z0u<#LyXhc{@ZY4WO7;8l9A*uWpUs!IxvbN<1enZ2w-o@?QT4_>OJ z%N&);u4PoZNmc?j5tcm}sqxb;`_+0jr^st9{w&(e^Dbk7@z~o;y(SasjssDEzoX3A z>Mh!atmVPoL_q|9MT5y9ozTo}a+rP>TgT96B$iAc^zwwb4QdRysh?PIL=@=Uxa^^H zXLtE}bv%k;ZO)}5!s&5{fkSbe??Qror6=dC{9xzVk4}UsCS-URWp;H}_*v*4W;Wxr zP~U&0&TYpr6!nW~fv$;)H$ClcS4^r~z25a@2@4^7KNQ}DKymnjw+V8WhcO&$Cd z_}G(F?Uv5MbwZQ!1N%n`-tjP;Q-w)Ozy-X%_WfsMj|*koUx(ecchQV7-)SqRvu?OA5I0ExUt}PPfRLhRZ2NoQ>z$kF&vo zv}sRO!v*`y6{f2?mAy_!TQ{v~-;yQICE0VZkCJTAp-wTXwmWiwvZ(ta3xU+++1Uk!hNH%r&n}~PDV95qgg(9h=2Y8~ zb21VZk8W9Vs(hslv8QAFkSKvgB1HmJV^cf-+d&R6|elNOBTJ3RXP$rBhQ?M zsf(C%1|JKwqL=gq(5s!}25d}pd@QZ~YHyeZ1Q!2KO+Bp}C#X&r+X@y^n0k7SPY#C$ zC@l3+RsXG138N2>YQ*hUb`-apv5Y=RkT%_i2wlpv@eLT0?c8Z4z z7?ie6)T2jYe>U@0*DWI%@Ra}IJlkX;OEk-BH#g8nGMcGFl3bA?JAf>j^N`ZbjHQjf;X`M2+%WWsQ8F*!}fP?|3lpq6M` z*wo`xyh%G`efxvNN~ucK#|IL(vgSajS5bR2UK*Hz#mkqx{hf{>~+SrH6G>W zEW*+?7M9I#DgfLb*z&5dPahG?R{XO1+S82B<~!h zAZJQ-Q@N)bEvWTGM25mJ-TPqU>~jb~>Bi`)rFzZ=dBoj=HBYKDf#UgVgDmG}1dUtE8z$iF^~D zjJFsRDDpE;3SU=H1Xi3-n^qPfs={}B<-N`Tup06G%A|V+*$q$p{?G9bP#QB()QN7r zcFEFq%_B==o~;d^GPM1IGt;$H<6tkWJj{phja}?RNKN(h1=VhM{jOiY4tch6^U1gB|ia3K|?0!tC>ahuIiaB9- zYc^N=K2Uo8I^d>aqrx&1qvJncR{sH#MyHb>yaL(sd`iEi1IF30c;v!cP7d&5xnk_hI@ouPDN8B)y zf09u+tYioFKp*-$!w0cKUQ60C1BvYqX-7%W^i#ziMei}?#ab)n|!zNE)0kbl?B{1Hyp8)7T?FW-ZabRGpTWN z*~$E&latb`?8*tV+Qyyk{y*Nn(l#4ejuF5wM$=7SbMt;dG}CaZBu?v`=tpsvjYl_k zv%)#mT0+PF84u&_BTz2F8nM2Q#X4@y#&Ig30C{o1&q+wSJI@B8a}M+3#igX$o?$|# z(2i7eI_Tk#YQ-`20zKWc$JFsq+hv?O_qEAA#rc;T?>r5g<7o6VL-aO1XlVtM9)ty^ zf#{Wx-ig0~ZTssI_j?hQ8;^eF&z#{xeU16|oc;{2EMtkPGx4a*pgs_50tyiuYGe-K z3GH4ao~QWt!>sW*O-CB%apWTU&3BfMFKpq~bt$0H>hT++oG)?OnhF)wtHX=tnXhCd<*_Aw`p{dp$H?W*I9A7N zF`m;r{q=ckV>1)Ipcc2uM~>U2IL~RiT>ep3toiA$dB#WX;@dsN<_ujF6XSLwsVaxGqvd<(B#;zWsHrRoGRcPYGD$0rXCR>aE-9@cB(X z-Az*SK=h!uY5Q-JWiiuyj&-xV_v1C^MQ?=I|JNY+j}ifC;rr+~_{Q;(@SOr|@fYv! zq9xyhu!Of?>?_ZLprx#3db_uM=^zPL>%8H~hP)uDF5GCDB?snUootwT12Yktp^6?s z(L6Z5rR=P94u$c*#CWrktS4l)`<@D!ED~0_pb3)3#D_6oXK$tT2T0F&W zTYyF6DjWU2S~AE@R#Av|`HWq_^-;dBflRmjJDj(v4__|p12|KS+tIeS3bB!ryGDO$ zTr)deWH%@X2kLR$ANM-A&oF?oXTCoTzx>wY7s%T~TshTuLI7zyCM|M|K~L zzPY5u@M=Dn7JLfhRoW;D`ayZr{);L0>>sga^EJ(9S$5hrtF!avh@WA5B2-sc>;mIc zucL~scgSp7RC3d#8Nk!)_P~h?95X9p@2(@ zUTf1h|L$x>V`;$x8$Yds&!$Omdd?dW8vv|Rdtor^Yg(kzydwB6SYxt&7nDIG66#p^Hm+N>1-ub%%w&DPdz9idW$oj z!ZU}JR(Z*cZMDkV_6s_d1T=@^*I@U(h?I?hMdMgWya!|gGfXBM*c&C{BHqQtvRa)K zY)sL*y>ApiCkF@QFw`S}M^m2mRKkr}x)0-8-5LWg)$dpWGNmKnUax=PRS5??Dof-1 z1G(ZC8O7)_FJ^56n9a&liKnhycj1)G7fg7*e`mg0CX$mRj-5cYQU*a(W4TB~x5a;;R@i&~n#ZqgsMYrLRV`QutfdK3V#si2iL$m}+D9Ir<8`_#)cEUMVe&R&&A2Z|AEH z_BSL*`hDZtf~I_rAtO!}kq~;wAd`#-q!zZr#HuzeWPm()t8TkiMA0t{umZw)N|Db1ZqXmefhzKH~r~KKpPBz;V5MO(sgyV1@AC z8Chx&P6$1gipq}?WA__JGVOu2M7`xZzfHx0tx98P zp;K3vDIu-!s2Jwft$$#%`KTTwj^>ag#XS=P-qnm!F>*}LRp68iK>md_$x>D7lNr)h z2Dv|{5OwJSH)QeCKv^ncbHWc-PVo$taN6>(l~`k1VfXkSBTouItCK0__SZXyoz`v0 zxtME{CQ*^QRXQaOWJk(VS0G|_&jQW>18p8se4t09#e$aK^(RKxn8IV_9EsyMWCkY+JEMl$Oo#_{(J+=qzLIZrIhH#y-EJIz! zl5K&BOtw+RU{3oD^VU0SU`4iBD#u5)II*qO?i_hP6MWr6h3**>#Kql%&~tmfv^Kej zehj{#lCW4UI>R|bXD)=!8Cd*s34g`#4@vm&=xC(*?;~xIb6_N8Q9tWzNWz1vo6FK% zxq)=nS1FK(Id9?wfEp}ZmsfOTR^*F>D^P4io%Y(4-4d*ub2Au;A~jSv)KG?!aVa{; z1QI+^Bf8}{pyt3p70ESLh-Vc)s1{~gKs7$jS0!14evV9iHQK3pzYyS#=ZwOIN~01z zbZ`MP=t~d4sN!4Z=vr{Qw12m|2*!u1`|hmY-(BR@n-R{0%H;Cqbc+DfrvS>|J)1pb zb&cHy`HA94d|Aau73zG>iK~^(Ah!E`v3qt)p~-A7Dojqpm`+=jDo0qwIKA zH$t4iM8CjCQXcWV%0w1{Bc%Mx^_?cqoiEq8@Y9r6+&G8T?-K7iox6*B^LY&HzJGo~ zBqo9fIzYjuNlXCxJg?VgNe!jmhS2Tv4z}q(`S0hLO56XW+KJS=-&eeuy!^Fs$e412 zV|o5HY5!)OpvQuQ)W8TQO z;UpJ;$jol+6ct1b0k1x9z6}p~r>0m`a#r5%@k9p$brs*?*;$1}r@E*=8D4LpQE?70 zxsBRFv@p`^h|OLTd+ntNSokoa?62V|M1Q&HlM9rytM&c~o>J#JAcR3EDHU4miOva+yHrKA*iYgfAI-L^zSI7P z51OjNhjJU5gwQs$fsmRa?D6Ju#cTK-5vR^S<|B#zvf$`^xXJK^4nSHzQej=bIsE6X zzLGzDE?4+JkReWOH`Ut{9D?gAbwW+*^(T(l-j%O{6Gkd&jrI9VpUM%Nc3*9qg4Q_j zW_Y%Ed@e5J82&)mSRMz0VySctZxHb!e0TI4{AqqvK92eRZ55qHhp3vZ#yrbr?jVpd z3Is<)JQ#AoZ+Y&(6W%NZSz10pX`TK)fVUyQ4GlrL8tOEmK|nVo4vFp${2moFcyuK(Gi06f zoP8k&QJqkKampOtY0=f_YP)}@xk~|ddYG@<{M$W|ww4--B2fBBYj-+gD4RubsG>|U z&OevN%#ztpIAXH-0vq-}V;+*<9UL;P*|#YQ`@P}{qwb~ZyWN)TQf`wwiw<7Wm2Ozl zby@V|FX+>XE*JGYHCWRZu1^M3W=fCOUQKGn5IT{AcD#vZE@6B~s&ZN=F72inBOySt znL5d8PP)AV`k(DSnzXa;jW#-5q|ZFoHB25U*i)GhJi=Hj|80uHsX00*=&4rv>PZ6Le`3``~MR14L$n}R4-=1jc$KoA8|n6-%zW68|ff64Vlz*Zz@B*Q+}9< z(^wmO_xPRXyiQdIBo#uw@u|O2uc0WYLyNWNB|y*5Bv&CF6xs~bE8TMK*1(^n$4yAW zV;EX~Q}c7tFRPEki?tQVjuGMp2!e@RhX#^#l=28JB_KIj!3K(;~HR zighX(uL7I97hU5KU_k#&K2QYKE|~{bua;SHjX8+PaS~I8x%$Q%=>xydO}X=GI$BS$ zvB}&<$PRx9ZqEPL8qDI>9yo)O2Y#SZb?{&+gWk0upW$735`V(zn1L0P!_0pe)v z5yRjh)EZeWC@5zi&dP#`_(3^NDQZ?h*G|3F0GVIoZ?_K^M*urW$+ktEiI!6h00s5Z zNhG z3NzJ`+Pd+x|PF`Es`a>^DAGpK8O0W=6{z|@UWTkz+Nt?g`5MKtMTAD=4w&1!w$a-VgO zhn=64bow0WX|_L&B!0N08q)=bzh3`HRfw8bttXW{~j3JT-} z7S_5Gd~)5xBS4La`YbK$^2gIP9OAIx&s{Is7zXMlREAzmAWxm>CpLCqx66DKl>|DZ z`tOc(vRX^v9ztUv-qdJp0!{?!AwG3f&7H=*2(k)&) zpK7}{%53x>)W5>zV96+67@63LpWdRVxc-17A0 z%hf(*>VSuyJ{x?Q6fi8-EBM$)i+r3fqS0Xh|L@XP3O{Qs#tpfZx8#k+N8^y;l!HHA zDz0qXN^C##tUN_A-aG6pN~=fK=k-wGv5&G}X1uEQ?)klSQcaa&;u?m`?^XZyP9n^x zn^+vTH(Hc7h_-xlm&NO&XVI(sKJHM9TQ#zXC{qIRfA{A5cmMion{PBSN}<7+KkV=C ze3tLN|EgGdk<4&bLvnW%KZv>U3@%3G*Lv0HWkNR{g8Y)Cf9qr>*e*L?6DN>Xsd3Cz zYQ3<0sa^I}Ik*aJNl^(TN4s;^N+W6Mnm~pJAg}kB#eY^>`Y7D^M0!jPKG-?DbL3YZ z<}U=}@ar40tS`ymf)&=2ok!AUETOe+dBMV~O6rq7OI`g?9#)4pw1z>h*&x@mb{=r= znl9^}Tp{btRSEigQj5u+9LVjeq0?o6tR#s-+QX>Q)b$Lzsr>3`KDdZ^C;QZ-r~;gx zJc!2maW9P&>a}gyOZcE$*_+^>Mm|lCCmfC)LzGMQ;NIdm5Ke$i~>t($f|Ea#c^)-OVlf zhv@L0h5<@#6KTkXB#J-qS&czV(2MS=8Gu;QuAADr7I+E#;J%1kA$w#EH(z!X#UQYH zeSfILiV%J`F2-N=0Y{fY83!|Y>`GVr$JS`t%SRWc153aokGZFsdQQXDbX(5YQQRZ` zao0}dTcBNQD50k7*FW7vzCUTn`DT@!{;@g6HMDA{lPtlG)e?Uo>-Fwe9aj%I*0gRT zQe62G-7S0fhQ{20K&fH=KR#9(8T^)T^AZR|F-Ds{dO#*2=0pFzr#J9Nv{PfnVf#jR zG^$|KLK1mLcsE?_$`+{6hmg&{DHQJ{_YNYhFn4n0r)r&7NLl>wccB(@F~(RW=m=cJ z{B486-xdKAN_9qbPWqB&KfbIAX~&D?3e?^kP`DL!T~M7#2MjUUCYrz)Q!uO z&d5ItdyE41SpJXJkZ;VI@%O%#F#A)w$4HrTybmZQ0h!8~a=q=FK~LvAw)J+STb?6X z8V^=|gNhk2Srsx{r)tUJ|v4=I2^d>`d7WhE5OAa_^Sqi2+lP2+3T-!fJaz?Rm%%CA;7## zWqAwaJQB5{cRN+Rguig0uZS;bxfw+56Qgi5Qw4)=^&25OTJiOl^ZlvIV6Tl`VyUBR z*uwiwHc7zAoK%|wvHs?^Hk58MnABIk{r&0V;5UG&S~T9J{=pIan$aIPJ(e3aTJ?tn ztcvv5`jJ&{(gO1Dpy)U`Vqy~D+tZCWg0A8OyQ5$zA3y>-Y_}v)WJ^oAf7wwCfSn~8 zzics#F0MwN>fcRjmzuT3(d4%!GE_OD`)Z6s!3&=+W&nN^bniLXEc~R@1-F-VyA+om zPUm1aEyvzcR*SHF^~7&F9Cr9Y_FkRg-y;;Xo&}Ca&@usg76m_mK$e@EGb=aw{^$hO zub_uYr^6i#rr70^HHuIw>EEMc;A3N`z9x09ID#o^iNvT*d!|*vH`}Dsnu`c<66!Xh zWB<37_Bs817LOSnKd@kY$oD{hSs52`ux!Q`IR7L}A}Jq*3}|ivVL47=^(NFswW@oc z*vc!&ag!E2_@xofEc&%45h<|u#ZiRk*%4_{=)hk(q$T%&_sdOYredtY=0kittFfN` z+r)-)rC|$bLe-~Z6vV;w@T!m)4vlte0d8k~)QNe?g%jFg%&m04^qKMf3XRUZC`)G< zk+L&aE4aEOI^bWxG`;HYVrDJ>0e)|VyGnm?y_@%?d`#~J=v+I3GE1qs*S2&IoVU2S z3B84>^;6nip@4k{`^bLB9@iI=NCzcx#(Yt<+VRX&LeCT1O9W)}@aaBwDyQ z3bVmEr$^J@J0%$dUd;Q4i|yilBON&o1G`$l8=ZcffaR`Jj(gEhe%0lUzDsHJfV zpQ=SH9i_Dqk?Qj@*w{V zY`foPgYnewS#M9hcR#itX`i}kfS-$1{M|0sAw|8JMlGgltrA$feiK9Y3KcNlE!)a= z)T;IV$49qEAMw|BpWae)yJt(J{OLPmf75vGL!)$Ea9D&E{0GG3SA;+JL=&Z5oakzo z-&vuc@ICys(m$nE_JYx&O8#v%w1&o%f*Qa4C?rUVY)kHltaw+rLxqj694K}FU}W4l z?oT6cE!{njq|AZ!aII!@e=VQA>wK@L&y}0Z$@|ucEt8-dxco*`n)9Lht)^yyvRZBY zcWp1;Db6#${V@CyhzxFSUo@Vd`l4}*%axF5&Rf#T1F*Y2Zufq~L15NB0q)M-?$g{* zDkgDDzBG4dYR;dQZ{?NWoIyc9RN;exWm6 zC>hSN*8830`K@M!h`I4hkUJA2`-kpO%%^GpxMhFSNm+LXZaj+SO`!H^ZSUv-(%cW?Jm zYZ#zqKXGVF(s$El%H;*Bk5M%O>v(mBIQ$<1-w$)8J&y%Zd4)!6rr2cB?}b2JEd7~h zsq6VnRn-l?&S>RTA2~NN!4dmYByNt67>sX^iHPH39d!dQg{dG_aCBOvR851K<5`#^ zVDtE&8iGlp=~QK*W`3LhhlMPY)01h-UtNW6`;67c=VPs8<+!-}N|u*ACEcp6;VN#6 z{j+&cYU8)oupb|F11a6jDBW_Rn9HgUK?Hc!!Pr^m*IT2Z-eNcZnih@*jJq0CUOQWm zPGGrTPn@5fzNAAAF%0K%PT zY@IY`w(fRy*7Q9&AF>-9JYH?RBSWzY4uk*NedXN)7JCJjuZ(50Y6vJ94H+nx2gV&{ z)o=0Ui}iSUZs9WiLyl<8*3IDhb|%L-ZeRr6lJYH|4;lZGop+=9KwFJH`UytY!mHeo zWK&0G^Ot?u=41BDK0RD@a!LB53hmvyRY+Cnt3Up|t#{R9qO!Wmh6>F`&Dt9n znFle4q^|*ZueB!75&ByoXl~_Ezc2@O9eYTm$paOn3PPd7^6#f27@_6^WoP{Jvt}P? z`W6U!l1R)Pg;CD~ZykgD= zjkXWq+cg^-$s5Jwm3vYXW|VWFq2ywotYs*t6B|LG)1vXD`u zWfJjx)vy%sMnb1Nm^wO+{4-auJKqTBqOHR*QKM@|5HOB3l)s|*yWUjc0OI7{-b4?J zVE^^a6Q$@Na8~$<^RW}}+PhqJOp`a9{PW4VozSIaok*WL;&#fp{a3myhJ`Lqz_8th z$Jw0MyhnPi==#%I<=5_|DwoIA#iUDL7Xh>eiCmA2k#y`bYt4(6x-Gfua^5TAEbF=_ zoso@>@_c$|^?~~1T{A(cu;DLD0)8jX8+_<6!#9V6ghy~cIC}5^(iq`0KDhb z@$TY*%UIYhMTRyt^rUMSsx4d_H{!Pcv0)23yW-k_#P(26eMtyDxqOpb7sq5GKD@g= zME3zK-W$aabxx~C^z?%UfRNCkOpoGkt9x7uo?`V>- zSW;ifcJdE|_N1j5&igqwMiv#&un63LczhYKH-xioU1X!zj)AHZf9781x(yg}le>t? zNTwE34e8|pDIjWyS5wke?TuX;3)nskKmNSe5i&D0#Me*eZXx#D!P|j2XJHxGk|=0be!u<(<9`cpY2pd~lw-1$QQm62YD_d;-P}7s zP;Of&D2*U5&r~S@ppOMne3Oe4O9>Q|cg@g(?D+paplX;`+iuQyayU&!ka(LyiyoKC zf&GixybbVhUnMos#nGE=+>*h6+C@jUgqynwQn00Ph19r)d%);Y-=&U_KP&VFp>GL` zEngIybO|l)NBsu=LX+#z5sC_o_i3PRSz4{F9!5!Z8tOx@L~Xw<4L<2rdt;~t8=#VL zHQQH3LP@Y-)v}Z8OmcL;$zWl~3bzlu>b{Wl)ph7WhMpsf_Q5LlRvZnQU+je7o*^gV-H-yZP46?_fcuw6k)l8*7@Z z;N(w6yksL~=~(}!Apc)}Hhh+Doi1(bcn34}pOk0mol5$nJwWp8(1%w6g!zU*=6>4< z<#aWTyLFS1X=g2#*GX0f>$$9#^X>EpPVp6z*nN#3P^5$yH#}6beh;K8jJD6Zc+m}R zIfjzYhCyqAljI3Z#}94~N;7Z<+lpIa0VKNF+@_t+_0_Z8!b;F>c6GJ<1q}%RaaFU2 zN4m@NDrLRUE4O{yADsaz=CvXg#tMs{<(UDb3(91Um#9;?zAmdJHNe?$(Z(yVqgej{inHD0gV=&XQCgJI{VI7bBX`n-Fy5?F`IfJPCZT3a>q>i=MCD1kD9xXvFo>0K7M6|#{>v%Nd zaYVvtT)z^!gWinUdKvy*r(ahJ92Wm1)$| z1aGHSVJhrD*=UC)-XqR8U9h{4{>pjZbcheagx8XTVMCKv(|iPP;p)hA4}X-kA&WT- zuMklq!#{5wecVP{0RNic@SNIEOe?*8>R_KVO8LxN$83-A2Mq&SUTqDY>V09Jlal(- zD{6=BCfH1bPPtPeXni^PFD{<20_6ir5T5QZc`zTZzS6aNfwM6+1dY0A(GxU?0O$L2 z__4ScSUefLL*QFZ1t@EVh{a=Yz9Tqc+jDTl1&Rvch`?+f@5_k zM5~O3*wQi}Q#*G)ia3pqsdY9pC5fBjF0_B8V76!cS#Ky}W%G9X=vho_^Y-s(1isB5 zdW?35(>*elF}@`SeAwl`-qCV~_9z)n=2pBJSFa8)3t%1LM1(`*?wWm!f>rz^I(yWA zQ$C(OM^R_2Iq{Q{D6ZORpecrxx|DA-_eSbW*0P6 zPp#9Tn0L};$L^c+M1b~rEf)FpJIRH+i!S*msLX|7^nqjO?U@svXs5mAYb%G6R-tzW zM!UeVFq6+@3oZn~J_;rv``bZk1gL+NKX7|Aa}&`qHBLl282aMiC^~jO_A5QDd%qHd z5lsX|ZxJgX0h=Yt5Ypo#?NZZNn)jI%EX`FORncWZmFddF*bhgEW#Y$qD?n6kDT z$=|U>5uwZqhd(XgeTNt@I*3no-mnN!4+U0J#x`=#71x{|6ED>RvsHYVyg1hb<)*LP z!Eeyzcahks==(?(@p1+8Yb13B{Ld(`s|KABJi>^t&&N0IHCj1`v(Dj4nE;eF^1>Lu5g{SXQABaHDR%wOr0weB-cAOkr=txoJ|xr23xO-` z!jJToIOo{Mvq8!P28v>rqN7j>F*>~GQ!Y_x%cqz}&C&hAr|tZQlb+H9CFKh5@SfpZ zqQ7m7Ljc1JC&a{%4V5K>=i0&WXML4!d;<$ZiyXMaHd*5X!d`>ft~Y2_o^tlvW`Ruv zOoj^&$`B>X0>*bgt}Sg#jJD5~yavRF;C~2{*vHyzik$%qhbB-&A4uPIS|s0S&*gr%(7#suax`B?}!VFDs*Vh2JNt*{#OLR_rtW2c*o`^18~nw&EXr6B>N z?^Ldoid(&?*3C6-KU3v#TM6T@=uP*SFa64d0}0Wby54Bn=~GF9*?~qaU2ZF4Zvv5 zw;!FQHPeOJW3^;XcnR!Bt|^Mxg-vosunn?beoXtq$%eE;s9 zeI+&yMYTo74QRZ~M5Z%Dr8xHMnwc4oY;th7>#D^eL97n)dRbXGJ*qXWl*c;2`KW&F zCv~B;#ZGt6Gze(-GqRgd2>Ft5n?DGIX*tnLP}*Tv*IKSiY9xtoLB{rbglqN*yMgAl zcNp}w-#pl-TA3E?o<&vL%3GgXScYua@K?y4qX=&-BTuL74QtBN<>$HAfz*O{^w}OA zIIscEt3)_+Gqnx&>d^_6?&zB#-S-K%NS`4OH{roM!Z{=hG`vi63Nn^xrxnC0SKEh! zxCmc+@$I&QZ+o`%SU?CBO|drfeMnT7-|OM#C9gj#DrnIvfp(fonRUR;slB?tr~b25 zzgDOPTmh)gTVFqoStp&GFYEtuK^DNLUk$ZzK zq9v_UBgz6TNhbP}EWN{lpZ5|jQb6@hKhJ` zBAFGcEmOV|+Yx*96+OwiOHGX=N$;Si%C*ohF_U#NgI7FJ zp}77UWi?*}CS2f;v|Y9pa{1)Z_dj2L3D)7zyUMq>jfP!x1PWL$QaaWYWOS^e2G~UsVz5ke^|mH{&M6Y;pn|in|8F_ODOn9&l7R48H}UjFA=M2zGGcL8 z635=K+G!wo_w9*ntrHjF)%bEcWb_9mO71vz%37N673}ov^#{?(NRMCpw8o{OR)hw= zK)e%hpi!5?q8+f*Lq;{(RCx%wDnEk*!xbSNqWEIekQhjQs zZSw86(WS!}+HJ9j6I6g2HiT#5a|HRkU8Ng3^cxOOW+3u);sqZ!ORWm! z=B1_i5Wb}C_DE53z|X>=P3nn5y53rel0;Giw45jQL@wvj3kqfwk#b5m-C@Ap zb-@TdvEnIKPHr5|Gl_jF8~h*QeduN)h95imBO^kR=X^zW&kTiwsZH zX11+{`aDTE&@gnpQ>(?h$9Gly&y)e~`(b}POy&416|~h(?eyl3rMW~@0k;g` zt`B$0I{$3BtstM{lBr*OqP`~;!(p`R^k8V0lf)u|4Q3k&^|ss9VT6Goe}&cWc6mTr zt&0e-ZrAavRB7B*wUNpc_8P18iP;qjeR4@wDp-NceY_C@(O5P(%Kj-orfbaYxNHi7 zxq>~eTh+43$2HCAUV=%HOc}-JTUAQCUI4^zany!z|=CX|8dxrR6fTf>D zl&#~CyWd8ZX^AkZ!^Wj+2!)HV7pFgCa?+T)lW^4SXh|S0?IRobx-E6<#L)t%u(HvB zu|m*2i3jrD?Vn0w?Fgr-68Lxh@<{KnKSPX4u6r^j=J<#wXP0iYI?8pOfxszyFM^X| zwPgxW%>L~pPH}G7F?(69=S9^Svp=bLQ06g&WRzsZl8i0S_K{z4 zVtpwn=dw(NmQ0R2Dcj4rCYtVc|C72LsG{Y)$!V~U+CQ=Y*LXjaA?LIIcR3pUKR-%J Ab^rhX diff --git a/pages/vpc/how-to/create-vpc.mdx b/pages/vpc/how-to/create-vpc.mdx index 546a2a7f53..2bf011ca49 100644 --- a/pages/vpc/how-to/create-vpc.mdx +++ b/pages/vpc/how-to/create-vpc.mdx @@ -3,14 +3,13 @@ title: How to create and manage VPCs description: Learn how to create a Virtual Private Cloud (VPC) with the Scaleway console. Follow this detailed guide to set up secure and isolated network infrastructure for your cloud resources. tags: vpc default create regional virtual-private-cloud dates: - validation: 2025-11-13 + validation: 2026-06-22 posted: 2023-06-13 --- import Requirements from '@macros/iam/requirements.mdx' import NetworkResourceNaming from '@macros/vpc/network-resource-naming.mdx' import image from './assets/scaleway-default-vpc.webp' -import image2 from './assets/scaleway-create-vpc.webp' import image3 from './assets/scaleway-vpc-overview.webp' @@ -49,8 +48,6 @@ If you created your Scaleway Project after 13 May 2025, default VPCs are no long 2. Click **Create a VPC**. The VPC creation wizard displays. - - 3. Choose a **region** in which to create your VPC. 4. Enter a **name** for your VPC (or use the wand icon to generate a random name). Optionally, you can also add **tags** to help organize your VPCs. Each tag should be separated by a space. @@ -61,7 +58,13 @@ If you created your Scaleway Project after 13 May 2025, default VPCs are no long You can create Private Networks in this VPC after you have created the VPC itself. However, you can not move an existing Private Network from one VPC to another. -5. Click **Create VPC** to finish. +5. Optionally, under **Advanced configuration**, tick the **Enable transitive peering** checkbox if you want this VPC to be able to forward traffic between two other VPCs that are both peered with it. This is only required for a VPC acting as an intermediary in a [transitive peering](/vpc-peering/concepts/#transitive-peering) chain. + + + Transitive peering cannot be disabled after the VPC is created. + + +6. Click **Create VPC** to finish. Your VPC is created, and you are redirected to its **Overview** page. diff --git a/pages/vpc/how-to/manage-routing.mdx b/pages/vpc/how-to/manage-routing.mdx index 62f4ad2d08..af197ad53d 100644 --- a/pages/vpc/how-to/manage-routing.mdx +++ b/pages/vpc/how-to/manage-routing.mdx @@ -3,7 +3,7 @@ title: How to manage routing description: Learn how to manage routing in Scaleway Virtual Private Cloud (VPC). Configure custom routes to control traffic flow and optimize network performance. tags: private-network vpc routing route-table routes default-route local-route subnet dates: - validation: 2025-06-11 + validation: 2026-06-22 posted: 2024-04-09 --- import Requirements from '@macros/iam/requirements.mdx' diff --git a/pages/vpc/quickstart.mdx b/pages/vpc/quickstart.mdx index a2a9b6d676..54eb9be1a9 100644 --- a/pages/vpc/quickstart.mdx +++ b/pages/vpc/quickstart.mdx @@ -11,7 +11,6 @@ import NetworkResourceNaming from '@macros/vpc/network-resource-naming.mdx' import PnNaming from '@macros/vpc/pn-naming.mdx' import image from './assets/scaleway-vpc-basics.webp' -import image2 from './assets/scaleway-create-vpc.webp' import image3 from './assets/scaleway-create-pn.webp' import image4 from './assets/scaleway-pn-overview.webp' import image5 from './assets/scaleway-pn-attached-resources.webp' @@ -57,8 +56,6 @@ If you created your Scaleway [Project](/organizations-and-projects/concepts/#pro 2. Click **Create a VPC**. The VPC creation wizard displays. - - 3. Choose a **region** in which to create your VPC. 4. Enter a **name** for your VPC (or use the wand icon to generate a random name). Optionally, you can also add **tags** to help organize your VPCs. Each tag should be separated by a space. From 199f1fe1db91d6fe363a7559cdf61f55a401731c Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 17:32:42 +0200 Subject: [PATCH 08/10] feat(vpc-peering): update --- pages/vpc-peering/reference-content/features-limitations.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/vpc-peering/reference-content/features-limitations.mdx b/pages/vpc-peering/reference-content/features-limitations.mdx index 1a1316afbd..ae7ac0d785 100644 --- a/pages/vpc-peering/reference-content/features-limitations.mdx +++ b/pages/vpc-peering/reference-content/features-limitations.mdx @@ -25,7 +25,7 @@ Once two VPCs are peered, you control exactly which traffic flows across the pee ### Transitive peering -VPC Peering supports transitive peering. This means that VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even without a direct peering connector between A and C. Transitive peering is disabled by default, and must be enabled on the intermediary VPC (here, VPC B) at its creation, and cannot be disabled afterwards. Transitivity also requires custom routes to be configured in each VPC of the chain. +VPC Peering supports transitive peering. This means that VPC A can communicate with VPC C via an intermediate VPC B (A ↔ B ↔ C), even without a direct peering connector between A and C. Transitive peering is disabled by default and must be enabled on the intermediary VPC (here, VPC B) at its creation. This setting cannot be disabled afterward. Transitivity also requires custom routes to be configured in each VPC of the chain. ### Unlimited traffic From b7748416d7106e938e3b8b7c543653d3045e79c8 Mon Sep 17 00:00:00 2001 From: Samy OUBOUAZIZ Date: Mon, 22 Jun 2026 17:48:09 +0200 Subject: [PATCH 09/10] feat(vpc-peering): update --- pages/vpc/concepts.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/vpc/concepts.mdx b/pages/vpc/concepts.mdx index cf8fe8bef7..dfb9b602fd 100644 --- a/pages/vpc/concepts.mdx +++ b/pages/vpc/concepts.mdx @@ -7,7 +7,7 @@ dates: posted: 2023-02-06 --- import RegionAndAz from '@macros/console/region-and-az.mdx' -import IngressRoutingRuleConcept from '@macros/vpc/ingress-routing-rule-concept' +import IngressRoutingRuleConcept from '@macros/vpc/ingress-routing-rule-concept.mdx' import image from './assets/scaleway-vpc-pn-diag.webp' import image2 from './assets/scaleway-vpc-osi.webp' From 2480943753d11d90278cf797f765243f54555e74 Mon Sep 17 00:00:00 2001 From: SamyOubouaziz Date: Tue, 23 Jun 2026 09:40:37 +0200 Subject: [PATCH 10/10] Apply suggestions from code review Co-authored-by: vanda-scw Co-authored-by: Firdevs Arslan --- macros/vpc/ingress-routing-rule-concept.mdx | 4 ++-- pages/vpc/how-to/manage-routing.mdx | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/macros/vpc/ingress-routing-rule-concept.mdx b/macros/vpc/ingress-routing-rule-concept.mdx index ee14bec490..fb2a1e2de7 100644 --- a/macros/vpc/ingress-routing-rule-concept.mdx +++ b/macros/vpc/ingress-routing-rule-concept.mdx @@ -1,8 +1,8 @@ --- macro: ingress-routing-rule-concept --- -An ingress routing rule routes incoming traffic from a peered VPC to a specific private IP address within a destination VPC's Private Network. This allows you to, for example, force all traffic entering a VPC from a peering connection to first go through a central firewall before reaching its final destination to inspect traffic. +An ingress routing rule routes incoming traffic from a peered VPC to a specific private IP address within a destination VPC's Private Network. For example, this allows you to force all traffic entering a VPC from a peering connection to first go through a central firewall before reaching its final destination to inspect traffic. Ingress routing rules are defined at the VPC level and apply only to that VPC. They affect inter-VPC traffic (traffic coming from other VPCs) and do not apply to internal traffic within the VPC itself. You can configure multiple ingress routing rules per VPC. -Each rule is composed of a **source** (the CIDR block of the source subnet targeted by the rule), and a **next hop** (the IP of a resource in a specific Private Network to which the traffic is forwarded). [How to create an ingress routing rule](/vpc-peering/how-to/manage-routing/#how-to-create-an-ingress-routing-rule). \ No newline at end of file +Each rule is composed of a **source** (the CIDR block of the source subnet targeted by the rule), and a **next hop** (the IP of a resource in a specific Private Network to which the traffic is forwarded). For detailed information, see [How to create an ingress routing rule](/vpc-peering/how-to/manage-routing/#how-to-create-an-ingress-routing-rule). \ No newline at end of file diff --git a/pages/vpc/how-to/manage-routing.mdx b/pages/vpc/how-to/manage-routing.mdx index af197ad53d..fd106e4641 100644 --- a/pages/vpc/how-to/manage-routing.mdx +++ b/pages/vpc/how-to/manage-routing.mdx @@ -203,7 +203,7 @@ Follow the steps below to define a custom route: If you selected an IPv6 destination, resources not compatible with IPv6, e.g. Public Gateways, will not be available for selection as next hop. -8. Optionally, under **Enter custom route details**, enter a **route description**,and **route tags**. Tags help you organize your list of routes. +8. Optionally, under **Enter custom route details**, enter a **route description**, and **route tags**. Tags help you organize your list of routes. 9. Click **Create route** to finish.