FAQ
We want to give our customers the information they need to get the most out of SNA. This FAQ section answers common questions. This helps you quickly find solutions and improve your experience. We encourage you to check these FAQ before contacting our support team, as you might find your answer here.
-
General information
Is there any change in the external accessibility of resources?
No. Resources can be made reachable by assigning floating IPs.
How is security/are security-groups working in the context of STACKIT Network Areas?
The way security groups work does not change in SNA Projects. Any kind of traffic, whether it is public or from another project in the SNA, needs to be manually enabled.
Is there a difference between SNA and the shared VPC concept of other cloud providers?
The concept of a SNA is a bit different to that of shared VPCs, but both have the goal to connect resources across several projects. The host project of the shared VPC gets replaced by the transfer network of SNA. While you lose a bit of functionality, this simplifies the setup. Also a big difference is that you are implicitly connected to all projects within a SNA, while with shared VPCs this connection is not mandatory. There are more differences depending on which cloud provider you are comparing with.
Can I disable the internet access for a project?
Currently we do not support this, however there are plans to enable this in the future.
What are the drawbacks of a STACKIT Network Area?
The STACKIT Network Area feature of connecting several projects has a few consequences:
- Projects are implicitly connected to all other projects in the same STACKIT Network Area, thus it is essential to be very careful when managing security groups.
- The transfer network of the STACKIT Network Area can not be expanded later on. Therefore the amount of projects in the SNA is restricted by the size of the transfer network.
- It is not possible to change the type of a project after creation. The use of SNA has to be decided before the creation of a project.
How can i change the IP Addresses in my STACKIT Network Area?
It is currently not possible to change existing network ranges of a STACKIT Network Area. To expand it, you can add new network ranges to an existing STACKIT Network Area.
Who can create/delete and manage an SNA?
SNAs can be created, deleted and managed by privileged users of an organisation.
Can I change the size of an existing network in my project?
Unfortunately, there is no way to edit a existing network. However it is possible to add additional networks with the required size.
Why do I see projects with an error in the name column under "Connected projects" in my SNA in the Portal?
This can happen, if you do not have the proper permissions to see a project. This can either be due to insufficient permissions in your own organization or if you booked a STACKIT service which uses service projects. Service projects are attached to your SNA but managed by STACKIT to deliver a specific STACKIT service in your SNA.
Which CIDRs can I use for network ranges and transfer ranges?
You are able to use all IPv4 CIDRs except the following:
CIDR Block RFC / Reference 0.0.0.0/8RFC 1122 100.64.0.0/10RFC 6598 - Carrier grade nat space 127.0.0.0/8RFC 1122 - localhost 169.254.0.0/16RFC 3927 - link local 192.0.2.0/24RFC 5737 - TEST-NET-1 192.88.99.0/24RFC 7526 - 6to4 anycast relay 198.18.0.0/15RFC 2544 - benchmarking 198.51.100.0/24RFC 5737 - TEST-NET-2 203.0.113.0/24RFC 5737 - TEST-NET-3 224.0.0.0/4multicast 240.0.0.0/4reserved 192.168.123.0/24internal use