Shared Private Cloud
Production-grade, multi-tenant cloud on a fully managed Kubernetes & OpenShift platform — with private, isolated namespaces, RBAC and EU data sovereignty built in. Deploy in minutes, pay only for what you run.
Shared Private Cloud (SPC)
Starting at € 0,99/month
- Tenancy modelShared platform, private namespace
- IsolationRBAC + private VLAN + NetworkPolicy
- Entry instanceo1.nano — 1 vCPU / 0.5 GB
- Scales to32 vCPU / 256 GB per workload
- BillingHourly pay-as-you-go
- PlatformManaged OpenShift / OKD
Built on three guarantees
Sustainable
Hosted in the Netherlands on 100% renewable solar energy, with server heat reused and peak-shaving to cut grid congestion.
Sovereign & Secure
EU data residency under GDPR, no US Cloud Act exposure, RBAC with kernel and network isolation, and a signed DPA.
Affordable
Transparent pay-as-you-go pricing with no hidden fees. Network functions are included free; 10% off on annual commitments.
What is the Shared Private Cloud (SPC)?
The Shared Private Cloud gives small teams enterprise infrastructure without enterprise overhead. You get a private, access-controlled slice of GRN’s managed OpenShift platform — isolated at the namespace, network and identity layers — while sharing the underlying cluster to keep costs near zero.
Who it is for
Developers, startups and SMBs running lightweight apps, websites, APIs, and dev/test environments that need real cloud capabilities without managing a cluster.
What you control
Your applications, containers, routes, storage and scaling policies — through a dashboard, CLI, REST API or GitOps. GRN operates the control plane, nodes, networking fabric and security baseline.
Why it is different
Unlike a generic shared host, every tenant runs in a dedicated Kubernetes namespace with RBAC, private subnets and NetworkPolicy firewalls — isolation closer to a private cloud than typical shared hosting.
Platform architecture
Every GRN product runs on the same cloud-native stack — the difference between tiers is the degree of isolation and dedication of the underlying compute.
Containers, Kubernetes manifests, Helm charts, KubeVirt VMs and serverless functions — deployed via dashboard, CLI, REST API or GitOps.
A managed OpenShift/OKD control plane provides scheduling, service mesh (Istio), ingress (Route), autoscaling, RBAC and CI/CD pipelines.
Software-defined networking with load balancing, NAT, private subnets, API gateway, site-to-site VPN and BGP — all included free.
Block, file and S3 object storage on Ceph, local NVMe via OpenEBS, snapshots and Velero backup with cross-region replication.
Isolated namespaces with RBAC and private VLANs on a shared, multi-node cluster for maximum cost efficiency.
Core platform features
A complete, integrated cloud feature set — not an à-la-carte bill. Network functions, security and observability are included as standard.
Authentication & Identity
Centralised identity management with OAuth/OIDC, integrated with platform RBAC for fine-grained, role-based access control.
Role-Based Access Control
Granular RBAC across projects, namespaces and resources, with audit logging of every privileged action.
Virtual Machines
Run traditional VMs alongside containers using KubeVirt — ideal for legacy apps and Virtual DataCenter (VDC) workloads.
Serverless
Event-driven, scale-to-zero functions on the platform — pay only while code runs.
Containers & Kubernetes
Native OpenShift/OKD or vanilla Kubernetes, with Helm, Operators, service mesh and GitOps pipelines.
Object & Block Storage
Ceph-backed block, file and S3-compatible object storage with snapshots and cross-region replication.
Private Networking
Private subnets, NetworkPolicy firewalls, NAT gateways and isolated VLANs — included at no extra cost.
Site-to-Site VPN
Secure Submariner-based VPN to connect your on-prem networks and remote sites to your cloud.
Load Balancing
MetalLB load balancers, OpenShift Routes and Istio API gateway for resilient traffic management.
Monitoring & Logging
Built-in metrics, dashboards, alerting and centralised log aggregation across all workloads.
APIs & Automation
Full REST API, CLI and GitOps/CI-CD integration to automate provisioning and deployment end to end.
Backup & DR
Scheduled Velero backups, volume snapshots and cross-region replication for disaster recovery.
Auto-Scaling
Horizontal and vertical autoscaling with availability-zone-aware scheduling.
Encryption
Encryption in transit (TLS via cert-manager) and at rest on Ceph-backed volumes.
IPv4 / IPv6 & Floating IPs
Dual-stack networking with floating/public IPs and optional BYO-IP / BYO-ASN via BGP.
Compute resources
Choose from purpose-built instance families, sized from a single vCPU to 32+ vCPU and up to 256 GB RAM per node.
Compute Optimised (cx1)
High clock-speed vCPU for CPU-bound workloads: build pipelines, web tiers, application servers. 1–32 vCPU.
Memory Optimised (m1)
High RAM-to-vCPU ratio for in-memory databases, caches and analytics. up to 256 GB.
Network Optimised (n1)
Elevated bandwidth for ingress/egress-heavy services, proxies and streaming. 4–64 vCPU.
Universal Purpose (o1)
Balanced default profile from o1.nano upward for general workloads. 0.5–128 GB.
Real Time (rt1)
Low-latency, jitter-sensitive workloads such as VoIP, trading and telemetry. 1–32 vCPU.
Networking capabilities
Enterprise networking is built in and, for most functions, free of charge — no per-feature surcharges.
| Network Function | Technology | Price |
|---|---|---|
| Firewall | Kubernetes NetworkPolicy | Free |
| Load Balancer | MetalLB | Free |
| Reverse Proxy / Ingress | OpenShift Route | Free |
| TLS Certificates | cert-manager | Free |
| DNS | External-DNS | Free |
| API Gateway | Istio Gateway | Free |
| NAT Gateway | EgressIP / EgressRouter | Free |
| Site-to-Site VPN | Submariner | Free |
| Private Subnets | NetworkAttachment | Free |
| Public / Floating IPv4 | MetalLB ExternalIP | € 3.00/mo |
| BYO-IP / BYO-ASN (BGP) | MetalLB BGP | € 50.00/mo |
Storage options & performance tiers
Software-defined storage on Rook Ceph and OpenEBS, with snapshots, replication and Velero-based backup. Billed per GB-month.
| Storage Tier | Technology | Price |
|---|---|---|
| Local NVMe Storage | OpenEBS LocalVolume | € 0.044 / GB-mo |
| Block Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| File Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| S3 Object Storage | Rook Ceph ObjectBucketClaim | € 0.044 / GB-mo |
| Cross-Region Replication | Rook Ceph VolumeReplication | € 0.0465 / GB-mo |
| Backup & Snapshots | Velero | € 0.008 / GB-mo |
Security & compliance
Security is layered through identity, network, workload and data — and compliance is built into the platform, not bolted on.
- RBAC & OAuth/OIDC identity management
- NetworkPolicy firewalls & private VLANs
- Private, isolated Kubernetes namespaces
- TLS everywhere via cert-manager
- Encryption in transit and at rest
- Audit logging of privileged actions
- GDPR / EU data residency (Netherlands)
- No US Cloud Act exposure
- Sovereign & NITS compliant
- Signed Data Processing Agreement (DPA)
Reliability, availability & recovery
High Availability
Multi-node scheduling across availability zones with automated failover and self-healing workloads.
SLA
Platform target 99.9% availability with multi-node scheduling and automated workload rescheduling on node failure.
Backup & Disaster Recovery
Velero backups, volume snapshots and cross-region replication to meet your RPO/RTO targets.
Typical use cases
Web & CMS hosting
WordPress, headless CMS, marketing sites and APIs with TLS, CDN-ready routing and autoscaling.
Dev / test & staging
Spin up ephemeral environments per branch with GitOps, then tear them down to stop billing.
Startup MVPs
Launch a product on production-grade infrastructure and scale vertically to 32 vCPU / 256 GB as you grow.
Microservices & APIs
Run containerised services with built-in service mesh, ingress and observability.
Optional add-ons
Tailor the platform with managed services and capacity add-ons — only pay for what you need.
Additional Block / Object Storage
Expand Rook Ceph block, file or S3 object storage in 100 GB increments with optional cross-region replication.
Additional Public IPs
Reserve extra floating IPv4 addresses for additional services or zero-downtime cutovers.
Managed Backup
Scheduled, retained Velero backups of persistent volumes and namespace state.
Support Plans
Upgrade from community support to Basic (8×5), Professional (16×5) or Enterprise (24×7).
Migration Services
Assisted migration of existing sites, containers or VMs onto the platform.
How it compares
Shared Private Cloud shares the platform control panel. Need a dedicated control panel and guaranteed CPU? See Virtual Private Cloud. Need dedicated hardware? See Dedicated Private Cloud.
| Shared Private Cloud | Virtual Private Cloud | Dedicated Private Cloud | |
|---|---|---|---|
| Tenancy | Shared platform, private namespace | Dedicated control plane | Dedicated bare-metal |
| Isolation | RBAC + network | Kernel-level + dedicated vCPU/RAM | Full hardware + network |
| Guaranteed CPU | Shared / burstable | Yes | Yes (bare-metal) |
| Own control panel | No (platform shared) | Yes | Yes |
| Minimum size | 1 instance | 3 VMs | 3 nodes (48 vCPU/128 GB) |
| Scales to | 32 vCPU / 256 GB | 100+ nodes | 100+ nodes / 512 GB |
| GPU option | No | No | Optional |
| SLA target | 99.9% | 99.9%+ | 99.99% |
| From | € 0,99/mo | € 99/mo | € 330/mo |
Frequently asked questions
Is “shared” cloud secure for production?
Where is my data stored?
How does billing work?
Can I run containers and Kubernetes workloads?
What happens when I outgrow the shared tier?
Ready to build on a greener, sovereign cloud?
Get a tailored quote for your Shared Private Cloud (SPC), or talk to our engineers about migrating your workloads to GDPR-compliant, 100% renewable EU infrastructure.
100% renewable energy · EU data residency · No US Cloud Act exposure · Cancel anytime
