Networking modes
Every subnet you add in the panel uses one of three networking modes. The mode decides how instance traffic reaches the physical network, and the right choice depends on your provider.
The three modes
Section titled “The three modes”- Bridged. Instances sit directly on the provider network. Each instance’s MAC is visible on the wire. Use this when the provider permits guest MACs on the same Ethernet network as the gateway, including VLAN-delivered subnets. A subnet routed to the host’s main IP needs a routed configuration instead.
- Routed. The hypervisor acts as the gateway for a subnet the provider routes to your server’s main IP. Use this when you buy a whole subnet and can pick its gateway.
- NAT. Instances get private addresses and share the hypervisor’s public IP for outbound traffic. Inbound needs port forwarding or a floating static IP. Use this when public IPv4 addresses are scarce or expensive.
Which mode do I need
Section titled “Which mode do I need”| Your provider gives you | Use mode | Guide |
|---|---|---|
| Single extra IPs with virtual MACs (Hetzner Robot, OVH) | Bridged | Hetzner, OVH |
| A whole subnet routed to your main IP, you choose the gateway | Routed | Hetzner routed |
| An untagged Ethernet network or tagged VLAN with an upstream gateway and guest MACs allowed | Bridged | KVM bridge setup |
| Only one usable public IP | NAT | Configure the subnet with mode NAT in the panel; no host changes needed |
Per-provider guides
Section titled “Per-provider guides”KVM bridge setupPersistent Debian, Ubuntu and RHEL bridge configurations, tagged VLANs, IPv6, subnet setup and connectivity checks.
HetznerBridge mode for extra IPs, routed mode for subnets. Netplan, ifupdown and NetworkManager examples.
OVHBridge mode with virtual MACs. Netplan and NetworkManager examples.