> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coreweave.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Create VPC
> Create a new CoreWeave VPC with optional host prefixes, VPC prefixes, and ingress/egress policy.
* The API server is `https://api.coreweave.com`.
* Replace `{API_ACCESS_TOKEN}` with your [CoreWeave API access token](/security/authn-authz/manage-api-access-tokens).
* For required permissions, see [IAM Access Policies](/security/iam/access-policies).
Supply the VPC configuration as a JSON object in the request body.
The `hostPrefix` and `hostPrefixes` fields are mutually exclusive;
if neither is set, the server applies a Zone-specific default.
```bash title="Example request" theme={"system"}
curl -X POST https://api.coreweave.com/v1beta1/networking/vpcs \
-H "Content-Type: application/json" \
-H "Authorization: Bearer {API_ACCESS_TOKEN}" \
-d @data.json
```
### About the Host Prefix `type` field
The `type` field on a Host Prefix controls network connectivity
from the prefix to the host. Values are uppercase: `PRIMARY`,
`ROUTED`, or `ATTACHED`.
* **`PRIMARY`** is the main IP range used for Node addresses in
a VPC. Each VPC must have exactly one `PRIMARY` host prefix.
It supports IPv4 and IPv6; for a dual-stack VPC, both
address families must be configured on the same Host Prefix.
When you create a VPC without overriding this range,
CoreWeave automatically applies the default host prefix for
the selected Zone.
* **`ROUTED`** is an additional (secondary) host prefix that
the VPC routes to the host. It supports one address family
per prefix; for dual-stack, each family must be a separate
Host Prefix. Any number of `ROUTED` prefixes are supported.
From the host's perspective, this network is Layer 3-adjacent
to the DPU or underlying network fabric. `ROUTED` prefixes
are typically used for advanced container or tenant networks,
where per-Node sub-prefixes are allocated and advertised
separately from the `PRIMARY` Node addresses.
* **`ATTACHED`** represents an IP range that behaves like a
Layer 2 network segment spanning the host and the DPU. It
supports one address family per prefix. Any number of
`ATTACHED` prefixes are supported. Workloads see it as a
directly connected segment, with gateway behavior controlled
by the prefix's IP address management policy.
You most likely only need the default `PRIMARY` host prefix
that the Cloud Console configures automatically. Additional
`ROUTED` or `ATTACHED` host prefixes are used for specialized
workloads and are configured through the VPC API or Terraform
provider, not directly in the Cloud Console.
### About the IPAM `gatewayAddressPolicy` field
The `gatewayAddressPolicy` on the `ipam` object describes
which IP address from the prefix is allocated to the network
gateway. Values are uppercase:
* **`EUI64`**: The gateway IP is generated using the IPv6
EUI-64 (Extended Unique Identifier) scheme. Only valid when
all `prefixes` are IPv6. The host must accept IPv6 Router
Advertisements to learn the gateway's address; the generated
address is not returned by any other API.
* **`FIRST_IP`**: The first IP address in the prefix is the
gateway.
* **`LAST_IP`**: The last IP address in the prefix is the
gateway.
## OpenAPI
````yaml /openapi/vpc/openapi.yaml post /v1beta1/networking/vpcs
openapi: 3.0.3
info:
title: CoreWeave VPC API
version: 0.0.1
description: >-
The VPC API lets you create, list, update, and delete CoreWeave Virtual
Private Clouds (VPCs).
servers:
- url: https://api.coreweave.com
description: CoreWeave production API.
security:
- bearerAuth: []
tags:
- name: VPCService
description: Endpoints for creating, listing, updating, and deleting CoreWeave VPCs.
x-group: VPCService
paths:
/v1beta1/networking/vpcs:
post:
tags:
- VPCService
summary: Create VPC
description: Creates a new VPC in the specified Availability Zone.
operationId: VPCService_CreateVPC
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/CreateVPCRequest'
responses:
'200':
description: OK
content:
application/json:
schema:
$ref: '#/components/schemas/CreateVPCResponse'
default:
description: Default error response
content:
application/json:
schema:
$ref: '#/components/schemas/Status'
components:
schemas:
CreateVPCRequest:
type: object
properties:
name:
description: The name of the VPC. Must not be longer than 30 characters.
type: string
zone:
description: >-
The [Availability
Zone](https://docs.coreweave.com/platform/regions/about-regions-and-azs#complete-region-list)
in which the VPC is located.
type: string
vpcPrefixes:
description: >-
An array of additional prefixes associated with the VPC. Must be
given in CIDR notation. For example, CKS clusters use these prefixes
for Pod and service CIDR ranges.
type: array
items:
$ref: '#/components/schemas/Prefix'
hostPrefix:
description: |-
A single IPv4 CIDR range used to allocate host addresses when
booting compute into a VPC. Must meet the Availability Zone's
minimum mask size (typically `/18` or larger). If unspecified,
a Zone-specific default is applied by the server. Immutable
once set.
**Deprecated:** use `hostPrefixes` instead. Supports only one
IPv4 prefix. Mutually exclusive with `hostPrefixes`; if neither
field is set, per-Zone defaults apply.
type: string
deprecated: true
hostPrefixes:
description: >-
The Host Prefixes of the VPC. If configured, each IPv4 prefix must
meet the Availability Zone's minimum mask size (typically `/18` or
larger, for example `/17` or `/16`), and each IPv6 prefix must be
`/51` or larger (for example, `/50` or `/49`). If not explicitly
configured, a Zone-specific default is applied by the server. This
field is mutually exclusive with `hostPrefix` and is immutable once
set.
type: array
items:
$ref: '#/components/schemas/HostPrefix'
ingress:
description: The ingress configuration of the VPC.
allOf:
- $ref: '#/components/schemas/Ingress'
egress:
description: The egress configuration of the VPC.
allOf:
- $ref: '#/components/schemas/Egress'
dhcp:
description: The DHCP configuration of the VPC.
allOf:
- $ref: '#/components/schemas/DHCP'
required:
- name
- zone
CreateVPCResponse:
type: object
properties:
vpc:
description: The VPC.
allOf:
- $ref: '#/components/schemas/VPC'
readOnly: true
Status:
description: >-
Standard error response. `code` is a
[`google.rpc.Code`](https://cloud.google.com/apis/design/errors#error_codes);
`message` is human-readable English; `details` carries machine-readable
error details when present.
type: object
properties:
code:
description: >-
The status code, which should be an enum value of
[google.rpc.Code][google.rpc.Code].
type: integer
format: int32
message:
description: >-
A developer-facing error message, which should be in English. Any
user-facing error message should be localized and sent in the
[google.rpc.Status.details][google.rpc.Status.details] field, or
localized by the client.
type: string
details:
description: >-
A list of messages that carry the error details. There is a common
set of message types for APIs to use.
type: array
items:
$ref: '#/components/schemas/GoogleProtobufAny'
Prefix:
description: >-
An IP prefix associated with a VPC. The `status` field reflects the
lifecycle: `STATUS_PENDING_ALLOCATION` → `STATUS_AVAILABLE` →
`STATUS_ALLOCATED`.
type: object
properties:
name:
description: >-
The user-specified name of the VPC Prefix. Must not be longer than
30 characters.
type: string
value:
description: The value of the prefix in IPv4 or IPv6 CIDR notation.
type: string
createdAt:
description: The time the prefix was created.
type: string
format: date-time
readOnly: true
updatedAt:
description: The time the prefix was last updated.
type: string
format: date-time
readOnly: true
status:
description: >-
The current status of the prefix. The lifecycle is
`STATUS_PENDING_ALLOCATION` → `STATUS_AVAILABLE` →
`STATUS_ALLOCATED`.
type: string
format: enum
enum:
- STATUS_AVAILABLE
- STATUS_PENDING_ALLOCATION
- STATUS_ALLOCATED
readOnly: true
required:
- name
- value
HostPrefix:
description: >-
A Host Prefix describes an IP range from which host-specific prefixes
are allocated for Nodes in a VPC. Host prefixes of any type cannot be
changed after the VPC is created. The `type` field's values are
`PRIMARY`, `ROUTED`, and `ATTACHED` — see the Create VPC operation for
the full taxonomy.
type: object
properties:
name:
description: The user-specified name of the Host Prefix.
type: string
type:
description: >-
The host prefix's type, which controls network connectivity from the
prefix to the host. Must be uppercase. Values are `PRIMARY`,
`ROUTED`, and `ATTACHED` — see the Create VPC operation for the full
taxonomy.
type: string
format: enum
enum:
- PRIMARY
- ROUTED
- ATTACHED
prefixes:
description: >-
The VPC-wide aggregates from which host-specific prefixes are
allocated. May be IPv4 or IPv6.
type: array
items:
type: string
ipam:
description: >-
The IP address management (IPAM) configuration for a secondary host
prefix. Must not be set for a `PRIMARY` prefix.
allOf:
- $ref: '#/components/schemas/IPAddressManagementPolicy'
required:
- name
- type
- prefixes
Ingress:
type: object
properties:
disablePublicServices:
description: >-
Disables ingress from the Internet at the VPC level when set to
`true`. Defaults to `false`, so ingress from the Internet is enabled
unless you change this field.
type: boolean
Egress:
type: object
properties:
disablePublicAccess:
description: >-
Disables egress from the Internet at the VPC level when set to
`true`. Defaults to `false`, so egress from the Internet is enabled
unless you change this field.
type: boolean
DHCP:
description: DHCP configuration for the VPC.
type: object
properties:
dns:
description: The DNS configuration for DHCP within the VPC.
allOf:
- $ref: '#/components/schemas/DHCP_DNS'
VPC:
description: >-
A CoreWeave Virtual Private Cloud. The `status` field reflects the
lifecycle: `STATUS_CREATING` → `STATUS_READY`, with `STATUS_UPDATING`
during in-place edits and `STATUS_DELETING` during teardown.
type: object
properties:
id:
description: The unique identifier for the VPC.
type: string
readOnly: true
name:
description: The name of the VPC. Must not be longer than 30 characters.
type: string
status:
description: >-
The current status of the VPC. The lifecycle is `STATUS_CREATING` →
`STATUS_READY`, with `STATUS_UPDATING` during in-place edits and
`STATUS_DELETING` during teardown.
type: string
format: enum
enum:
- STATUS_CREATING
- STATUS_UPDATING
- STATUS_READY
- STATUS_DELETING
readOnly: true
zone:
description: >-
The [Availability
Zone](https://docs.coreweave.com/platform/regions/about-regions-and-azs#complete-region-list)
in which the VPC is located.
type: string
vpcPrefixes:
description: An array of the VPC prefixes. Must be given in CIDR notation.
type: array
items:
$ref: '#/components/schemas/Prefix'
createdAt:
description: The time the VPC was created.
type: string
format: date-time
readOnly: true
updatedAt:
description: The time the VPC was last updated.
type: string
format: date-time
readOnly: true
hostPrefix:
description: |-
A single IPv4 CIDR range from which host addresses are allocated
for compute in this VPC. Must meet the Availability Zone's
minimum mask size (typically `/18` or larger). Immutable once
set.
**Deprecated:** use `hostPrefixes` instead. Present only on VPCs
created with this legacy field; mutually exclusive with
`hostPrefixes`.
type: string
deprecated: true
hostPrefixes:
description: >-
The Host Prefixes of the VPC. If configured, each IPv4 prefix must
meet the Availability Zone's minimum mask size (typically `/18` or
larger), and each IPv6 prefix must be `/51` or larger. Immutable
once set.
type: array
items:
$ref: '#/components/schemas/HostPrefix'
ingress:
description: The ingress configuration of the VPC.
allOf:
- $ref: '#/components/schemas/Ingress'
egress:
description: The egress configuration of the VPC.
allOf:
- $ref: '#/components/schemas/Egress'
dhcp:
description: The DHCP configuration of the VPC.
allOf:
- $ref: '#/components/schemas/DHCP'
required:
- name
- zone
GoogleProtobufAny:
description: >-
Contains an arbitrary serialized message along with a @type that
describes the type of the serialized message.
type: object
properties:
'@type':
description: The type of the serialized message.
type: string
additionalProperties: true
IPAddressManagementPolicy:
description: >-
IP address management (IPAM) configuration for a secondary host prefix.
The `gatewayAddressPolicy` field's values are `EUI64`, `FIRST_IP`, and
`LAST_IP` — see the Create VPC operation for the full taxonomy.
type: object
properties:
prefixLength:
description: >-
The desired length for each Node's allocation from the VPC-wide
aggregate prefix.
type: integer
format: int32
gatewayAddressPolicy:
description: >-
Describes which IP address from the prefix is allocated to the
network gateway. Optional, and only valid when the parent Host
Prefix's `type` is `ATTACHED`. Must be uppercase. Values are
`EUI64`, `FIRST_IP`, and `LAST_IP` — see the Create VPC operation
for the full taxonomy.
type: string
format: enum
enum:
- EUI64
- FIRST_IP
- LAST_IP
required:
- prefixLength
DHCP_DNS:
description: Settings affecting DNS for DHCP within the VPC
type: object
properties:
servers:
description: An array of user-provided DNS servers.
type: array
items:
type: string
securitySchemes:
bearerAuth:
type: http
scheme: bearer
bearerFormat: JWT
description: CoreWeave API access token sent as a bearer token.
x-default: Bearer {API_ACCESS_TOKEN}
````