An online store that keeps customer data private
Customers shop on your public website. The database holding orders and customer details sits on the private network with no public address.
Customer data stays off the internet
New Private networking
Keep your most important systems off the internet.
Turn on private networking and your databases, ERP and internal tools disappear from the public internet. Your team still reaches them from anywhere, signed in with the Microsoft or Google account they already use.
- Free to use
- Every Seemi region
- Works with every container
What is private networking on Seemi Cloud?
An encrypted private network, built on NetBird and WireGuard, that connects your Seemi Cloud containers and your team’s devices. A container can be public, private, or both. Private containers have no address on the internet, yet your team and your other containers in the same resource group can reach them from anywhere, across every Seemi region.
Why it matters
Attackers can’t break into what they can’t find
Anything reachable from the internet is probed by automated attacks every day. Private networking takes your internal systems off the map.
The usual way
- Your database has an address on the public internet.
- Bots and attackers can find it and try to log in, day and night.
- One weak password or missed update can expose customer data.
With Seemi private networking
- Your database has no public address. To the internet, it doesn’t exist.
- Only people you’ve given access in the portal can connect, signed in with Microsoft or Google.
- Access follows portal permissions: remove someone there and their private access goes too.
You decide
Choose who can reach each container
Two switches per container, changeable at any time. Try them.
Your containerPrivate
Can connect No access
Containers on the same server
Your other containers in the same resource group on that server, over a local private network. Always on.
Can connect No access
The internet
Only the ports you choose to publish, optionally limited by IP allowlists or SSO sign-in.
Can connect No access
Your team’s devices
Laptops and phones running the NetBird app, signed in with Microsoft or Google and allowed by portal permissions.
Can connect No access
Your containers in other regions
Containers in the same resource group with private networking on, in any Seemi region.
Private: Invisible to the internet, yet your team and your other containers can reach it from anywhere.Good for: Databases, ERP, file sharing and admin tools.
| Option | Internet access | Private network | Who can reach it | Good for |
|---|---|---|---|---|
| Isolated | Off | Off | Containers on the same server | Background workers and caches that only talk to apps next to them. |
| Public | On | Off | Containers on the same server, The internet | Websites and public APIs. |
| Private | Off | On | Containers on the same server, Your team’s devices, Your containers in other regions | Databases, ERP, file sharing and admin tools. |
| Public and private | On | On | Containers on the same server, The internet, Your team’s devices, Your containers in other regions | A web shop that serves customers and talks privately to its database. |
Use cases
Real-world ways to use it
Internal business apps, reachable from anywhere
Run Odoo ERP or Nextcloud entirely privately. Staff open them from the office, home or a hotel after signing in with their company account.
No public login page for attackers to target
Apps and data in different regions
Serve customers from Singapore while your data stays in Amsterdam. Containers in the same resource group talk privately across Seemi regions.
Private traffic, wherever your apps run
Get connected
Connected in four steps
- 1
Switch it on
In the container’s settings, turn on Private network. Turn Internet access off for anything that should stay internal.
- 2
Install NetBird
Download the free NetBird app for Windows, macOS, Linux, iOS or Android.
Get the app - 3
Sign in
In NetBird, set the server to https://vnet.seemi.net:443 and sign in with Microsoft or Google, using your Seemi Cloud account.
- 4
Connect
Open Connection guide on the container’s details page for its private address and credentials.
Good to know
Reconnect after a deployment
After a container is deployed or redeployed, disconnect and reconnect the NetBird app to refresh your private routes.
Phones: turn off battery optimisation
On mobile, battery optimisation can interrupt NetBird sign-in. Turn it off for the NetBird app.
Free to use
Private networking adds nothing to your bill. For the exact cost of your services, use the pricing estimator. Availability on free tiers is not guaranteed.
Open the pricing estimatorSecurity in layers
One more layer in a security-first platform
Private networking joins IP allowlists, forward authentication and resource-group isolation. Combine them to match each workload: public where customers need it, private everywhere else.
Explore Seemi Cloud securityForward authenticationWeb apps ask for a Microsoft or Google sign-in, checked against portal permissions, before anything loads.IP allowlistsPublic ports answer only to the addresses you approve.Private networkingNewInternal systems get no public address at all. Your team reaches them through an encrypted tunnel.Resource-group isolationEach resource group’s containers share a local private network, separated from everyone else’s.
Your workloads and data
For your technical team
How it works under the hood
Open-source building blocks, identity-based access and simple per-container settings.
- Encryption
- WireGuard tunnels, managed with NetBird
- Client apps
- NetBird for Windows, macOS, Linux, iOS and Android
- Sign-in
- Microsoft or Google single sign-on, the same account as the Seemi Cloud portal
- Who can connect
- Anyone with at least L1 (read) access to the resource group or the whole tenant in the Seemi Cloud portal.
- Scope
- Containers in the same resource group with private networking on, across all Seemi regions. Containers on the same server also share a local private network.
- Settings
- Internet access and private network are separate switches per container, changeable at any time
- Server
- https://vnet.seemi.net:443
Need a different network design?
More network topologies are on the way. Enterprise teams can work with Seemi engineers today to design and deploy the setup they need.
Private networking questions
What is private networking on Seemi Cloud?
An encrypted private network that connects your Seemi Cloud containers and your team’s devices, built on NetBird and WireGuard. A container can be public, private or both. Private containers have no internet address, yet your team and your other containers in the same resource group can reach them from any Seemi region.
Can my database be completely hidden from the internet?
Yes. Turn Internet access off and Private network on. The database then has no public address, and only your team and your private containers can reach it.
Can a container be public and private at the same time?
Yes. For example, a web shop can serve customers on the internet while talking to its database over the private network. Both switches can be changed at any time.
Is this a VPN?
It works like a modern VPN, but access is tied to identity. Your team signs in with Microsoft or Google, and only people with access to the resource group or tenant in the Seemi Cloud portal can connect.
Who can connect from their computer or phone?
Anyone with at least L1 (read) access to the resource group or the whole tenant in the Seemi Cloud portal.
Does private networking cost extra?
No. Private networking is free to use in every Seemi region. For the exact monthly cost of your services, use the pricing estimator. Availability on free tiers is not guaranteed.
Which containers can use it?
Every container: your own images and managed services such as PostgreSQL, MySQL, Redis, Odoo and Nextcloud.
Why do I need to reconnect after a deployment?
When a container is deployed or redeployed, disconnect and reconnect the NetBird app so it picks up the latest private routes.
Can Seemi set up a different network design for us?
More network topologies are on the way. Enterprise teams can work with Seemi engineers on custom designs today: contact cloud.support@seemi.net.
Make your internal systems invisible today
Private networking is free and ready in every Seemi region, for every container.