Virtual Private Cloud
Your own isolated cloud platform — a dedicated OpenShift/OKD control plane with kernel-level isolation, guaranteed (un-throttled) CPU and full cluster control, on 100% renewable, GDPR-compliant EU infrastructure.
Virtual Private Cloud (VPC)
Starting at € 99/month
- Tenancy modelDedicated platform & control panel
- IsolationKernel-level + dedicated vCPU/RAM
- Minimum size3 VMs — 1 vCPU / 0.5 GB each
- Scales to100+ nodes, 32 vCPU / 256 GB each
- PerformanceGuaranteed CPU, no rate limits
- PlatformDedicated OpenShift / OKD cluster
Built on three guarantees
Sustainable
Hosted in the Netherlands on 100% renewable solar energy, with server heat reused and peak-shaving to cut grid congestion.
Sovereign & Secure
EU data residency under GDPR, no US Cloud Act exposure, RBAC with kernel and network isolation, and a signed DPA.
Affordable
Transparent pay-as-you-go pricing with no hidden fees. Network functions are included free; 10% off on annual commitments.
What is the Virtual Private Cloud (VPC)?
The Virtual Private Cloud gives you a private, single-tenant cloud platform — your own OpenShift control panel and cluster with kernel-isolated, dedicated compute — while running on GRN’s shared physical fabric to stay cost-efficient. It is the sweet spot between shared hosting and dedicated hardware.
Who it is for
Application teams, SaaS platforms and businesses running production workloads that need cluster-level control, predictable performance and tenant isolation — without operating bare-metal hardware.
What you control
Your full cluster: namespaces, nodes, networking, ingress, storage classes, RBAC, autoscaling and platform configuration — plus everything you control on the shared tier. GRN manages the physical hosts and the hardware lifecycle.
Why it is different
You receive dedicated vCPU and memory with guaranteed performance (no noisy-neighbour throttling) and kernel-level isolation with root privileges, while keeping the elasticity and economics of virtualised infrastructure.
Platform architecture
Every GRN product runs on the same cloud-native stack — the difference between tiers is the degree of isolation and dedication of the underlying compute.
Containers, Kubernetes manifests, Helm charts, KubeVirt VMs and serverless functions — deployed via dashboard, CLI, REST API or GitOps.
A managed OpenShift/OKD control plane provides scheduling, service mesh (Istio), ingress (Route), autoscaling, RBAC and CI/CD pipelines.
Software-defined networking with load balancing, NAT, private subnets, API gateway, site-to-site VPN and BGP — all included free.
Block, file and S3 object storage on Ceph, local NVMe via OpenEBS, snapshots and Velero backup with cross-region replication.
Dedicated vCPU and memory with kernel-level isolation and guaranteed, un-throttled performance.
Core platform features
A complete, integrated cloud feature set — not an à-la-carte bill. Network functions, security and observability are included as standard.
Authentication & Identity
Centralised identity management with OAuth/OIDC, integrated with platform RBAC for fine-grained, role-based access control.
Role-Based Access Control
Granular RBAC across projects, namespaces and resources, with audit logging of every privileged action.
Virtual Machines
Run traditional VMs alongside containers using KubeVirt — ideal for legacy apps and Virtual DataCenter (VDC) workloads.
Serverless
Event-driven, scale-to-zero functions on the platform — pay only while code runs.
Containers & Kubernetes
Native OpenShift/OKD or vanilla Kubernetes, with Helm, Operators, service mesh and GitOps pipelines.
Object & Block Storage
Ceph-backed block, file and S3-compatible object storage with snapshots and cross-region replication.
Private Networking
Private subnets, NetworkPolicy firewalls, NAT gateways and isolated VLANs — included at no extra cost.
Site-to-Site VPN
Secure Submariner-based VPN to connect your on-prem networks and remote sites to your cloud.
Load Balancing
MetalLB load balancers, OpenShift Routes and Istio API gateway for resilient traffic management.
Monitoring & Logging
Built-in metrics, dashboards, alerting and centralised log aggregation across all workloads.
APIs & Automation
Full REST API, CLI and GitOps/CI-CD integration to automate provisioning and deployment end to end.
Backup & DR
Scheduled Velero backups, volume snapshots and cross-region replication for disaster recovery.
Auto-Scaling
Horizontal and vertical autoscaling with availability-zone-aware scheduling.
Encryption
Encryption in transit (TLS via cert-manager) and at rest on Ceph-backed volumes.
IPv4 / IPv6 & Floating IPs
Dual-stack networking with floating/public IPs and optional BYO-IP / BYO-ASN via BGP.
Dedicated Control Panel
Your own OpenShift web console and cluster administration — not a shared dashboard.
Compute resources
Choose from purpose-built instance families, sized from a single vCPU to 32+ vCPU and up to 256 GB RAM per node.
Compute Optimised (cx1)
High clock-speed vCPU for CPU-bound workloads: build pipelines, web tiers, application servers. 1–32 vCPU.
Memory Optimised (m1)
High RAM-to-vCPU ratio for in-memory databases, caches and analytics. up to 256 GB.
Network Optimised (n1)
Elevated bandwidth for ingress/egress-heavy services, proxies and streaming. 4–64 vCPU.
Universal Purpose (o1)
Balanced default profile from o1.nano upward for general workloads. 0.5–128 GB.
Real Time (rt1)
Low-latency, jitter-sensitive workloads such as VoIP, trading and telemetry. 1–32 vCPU.
Networking capabilities
Enterprise networking is built in and, for most functions, free of charge — no per-feature surcharges.
| Network Function | Technology | Price |
|---|---|---|
| Firewall | Kubernetes NetworkPolicy | Free |
| Load Balancer | MetalLB | Free |
| Reverse Proxy / Ingress | OpenShift Route | Free |
| TLS Certificates | cert-manager | Free |
| DNS | External-DNS | Free |
| API Gateway | Istio Gateway | Free |
| NAT Gateway | EgressIP / EgressRouter | Free |
| Site-to-Site VPN | Submariner | Free |
| Private Subnets | NetworkAttachment | Free |
| Public / Floating IPv4 | MetalLB ExternalIP | € 3.00/mo |
| BYO-IP / BYO-ASN (BGP) | MetalLB BGP | € 50.00/mo |
Storage options & performance tiers
Software-defined storage on Rook Ceph and OpenEBS, with snapshots, replication and Velero-based backup. Billed per GB-month.
| Storage Tier | Technology | Price |
|---|---|---|
| Local NVMe Storage | OpenEBS LocalVolume | € 0.044 / GB-mo |
| Block Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| File Storage | Rook Ceph PVC | € 0.044 / GB-mo |
| S3 Object Storage | Rook Ceph ObjectBucketClaim | € 0.044 / GB-mo |
| Cross-Region Replication | Rook Ceph VolumeReplication | € 0.0465 / GB-mo |
| Backup & Snapshots | Velero | € 0.008 / GB-mo |
Security & compliance
Security is layered through identity, network, workload and data — and compliance is built into the platform, not bolted on.
- RBAC & OAuth/OIDC identity management
- NetworkPolicy firewalls & private VLANs
- Kernel-level isolation with root privileges
- TLS everywhere via cert-manager
- Encryption in transit and at rest
- Audit logging of privileged actions
- GDPR / EU data residency (Netherlands)
- No US Cloud Act exposure
- Sovereign & NITS compliant
- Signed Data Processing Agreement (DPA)
Reliability, availability & recovery
High Availability
Multi-node scheduling across availability zones with automated failover and self-healing workloads.
SLA
High-availability control plane across multiple nodes with a 99.9%+ availability target; automated rescheduling and rolling updates.
Backup & Disaster Recovery
Velero backups, volume snapshots and cross-region replication to meet your RPO/RTO targets.
Typical use cases
SaaS platforms
Run a multi-environment SaaS product with dedicated clusters per stage and predictable, un-throttled CPU.
Enterprise application hosting
Host business-critical applications with cluster-level RBAC, private networking and high availability.
Kubernetes / OpenShift workloads
Operate your own OpenShift or vanilla Kubernetes cluster with full admin control and GitOps automation.
Stateful & data services
Run databases, queues and caches on dedicated memory-optimised nodes with Ceph-backed persistent storage.
Optional add-ons
Tailor the platform with managed services and capacity add-ons — only pay for what you need.
Managed Kubernetes / OpenShift
Let GRN operate your control plane, upgrades, patching and scaling under an SLA.
Additional Storage
Add block, file or S3 object storage, with optional cross-region replication for resilience.
BYO-IP / BYO-ASN
Bring your own IP ranges and AS number and advertise them via MetalLB BGP.
Backup & Disaster Recovery
Scheduled Velero backups plus cross-region replication for RPO/RTO targets.
Database Hosting
Managed PostgreSQL, MySQL and other data services on your cluster.
Support Plans
Basic (8×5), Professional (16×5) or Enterprise (24×7) response tiers.
How it compares
VPC gives you a dedicated control plane on shared hardware. Need fully dedicated bare-metal nodes, local NVMe and hardware isolation? See Dedicated Private Cloud. Just need to deploy an app cheaply? See Shared Private Cloud.
| Shared Private Cloud | Virtual Private Cloud | Dedicated Private Cloud | |
|---|---|---|---|
| Tenancy | Shared platform, private namespace | Dedicated control plane | Dedicated bare-metal |
| Isolation | RBAC + network | Kernel-level + dedicated vCPU/RAM | Full hardware + network |
| Guaranteed CPU | Shared / burstable | Yes | Yes (bare-metal) |
| Own control panel | No (platform shared) | Yes | Yes |
| Minimum size | 1 instance | 3 VMs | 3 nodes (48 vCPU/128 GB) |
| Scales to | 32 vCPU / 256 GB | 100+ nodes | 100+ nodes / 512 GB |
| GPU option | No | No | Optional |
| SLA target | 99.9% | 99.9%+ | 99.99% |
| From | € 0,99/mo | € 99/mo | € 330/mo |
Frequently asked questions
How is a VPC different from the Shared Private Cloud?
Do I get guaranteed CPU performance?
How large can a VPC scale?
Which Kubernetes distribution runs on a VPC?
Is it GDPR compliant?
Ready to build on a greener, sovereign cloud?
Get a tailored quote for your Virtual Private Cloud (VPC), or talk to our engineers about migrating your workloads to GDPR-compliant, 100% renewable EU infrastructure.
100% renewable energy · EU data residency · No US Cloud Act exposure · Cancel anytime
