Enum NetworkSettings 

pub enum NetworkSettings {
    UseDefault,
    Create {
        cidr: Option<String>,
        availability_zones: u8,
    },
    ByoVpcAws {
        vpc_id: String,
        public_subnet_ids: Vec<String>,
        private_subnet_ids: Vec<String>,
        security_group_ids: Vec<String>,
    },
    ByoVpcGcp {
        network_name: String,
        subnet_name: String,
        region: String,
    },
    ByoVnetAzure {
        vnet_resource_id: String,
        public_subnet_name: String,
        private_subnet_name: String,
    },
}

Network configuration for the stack.

Controls how VPC/VNet networking is provisioned. Users configure this in StackSettings; the Network resource itself is auto-generated by preflights.

Egress policy

Container cluster VMs are configured for egress based on the mode:

• UseDefault → VMs get ephemeral public IPs (no NAT is provisioned)
• Create → VMs use private IPs; Alien provisions a NAT gateway for outbound access
• ByoVpc* / ByoVnet* → no public IPs assigned; customer manages egress

For production workloads, use Create. For fast dev/test iteration, UseDefault is sufficient. For environments with existing VPCs, use the appropriate ByoVpc* variant.

Variants

UseDefault

Use the cloud provider’s default VPC/network.

Designed for fast dev/test provisioning. No isolated VPC is created, so there is nothing to wait for or clean up. VMs receive ephemeral public IPs for internet access — no NAT gateway is provisioned.

• AWS: Discovers the account’s default VPC. Subnets are public with auto-assigned IPs.
• GCP: Discovers the project’s default network and regional subnet. Instance templates include an AccessConfig to assign an ephemeral external IP.
• Azure: Azure has no default VNet, so one is created along with a NAT Gateway. VMs stay private and use NAT for egress.

Not recommended for production. Use Create instead.

Create

Create a new isolated VPC/VNet with a managed NAT gateway.

All networking infrastructure is provisioned by Alien and cleaned up on delete. VMs use private IPs only; all outbound traffic routes through the NAT gateway.

Recommended for production deployments.

Fields

cidr: Option<String>

VPC/VNet CIDR block. If not specified, auto-generated from stack ID to reduce conflicts (e.g., “10.{hash}.0.0/16”).

availability_zones: u8

Number of availability zones (default: 2).

ByoVpcAws

Use an existing VPC (AWS).

Alien validates the references but creates no networking infrastructure. The customer is responsible for routing and egress (NAT, proxy, VPN, etc.).

Fields

vpc_id: String

The ID of the existing VPC

public_subnet_ids: Vec<String>

IDs of public subnets (required for public ingress)

private_subnet_ids: Vec<String>

IDs of private subnets

security_group_ids: Vec<String>

Optional security group IDs to use

ByoVpcGcp

Use an existing VPC (GCP).

Alien validates the references but creates no networking infrastructure. The customer is responsible for routing and egress (Cloud NAT, proxy, VPN, etc.).

Fields

network_name: String

The name of the existing VPC network

subnet_name: String

The name of the subnet to use

region: String

The region of the subnet

ByoVnetAzure

Use an existing VNet (Azure).

Alien validates the references but creates no networking infrastructure. The customer is responsible for routing and egress (NAT Gateway, proxy, VPN, etc.).

Fields

vnet_resource_id: String

The full resource ID of the existing VNet

public_subnet_name: String

Name of the public subnet within the VNet

private_subnet_name: String

Name of the private subnet within the VNet

Trait Implementations

impl Clone for NetworkSettings

fn clone(&self) -> NetworkSettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for NetworkSettings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for NetworkSettings

fn eq(&self, other: &NetworkSettings) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for NetworkSettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for NetworkSettings

impl StructuralPartialEq for NetworkSettings