Network Access¶
Some services are reached over a plain TCP connection, for example PostgreSQL, MariaDB, and Redis. For these services you choose how the instance is exposed on the network. This choice is called the access mode, and you select it when you provision the instance.
Services that are accessed over HTTP(S), for example Nextcloud, Keycloak, and Codey, are reached through a regular hostname and do not use these access modes.
Access modes¶
When you provision a TCP service, you can choose between two access modes:
- TCP Gateway (shared)
- Load Balancer (dedicated)
Both give you a hostname and a port to use with your client. The difference is in how the network endpoint is provided and whether it is shared with other services.
TCP Gateway (shared)¶
Your instance is published through a gateway that is shared with other services. The platform automatically allocates a port on this shared gateway and routes it to your instance. There is no additional infrastructure cost, which makes this a good default for most use cases.
Because the gateway is shared, your instance is reached on an assigned port rather
than on the service's default port (for example PostgreSQL's 5432). Always use
the hostname and port shown on the instance detail page.
Load Balancer (dedicated)¶
A dedicated load balancer with its own public IP address is allocated exclusively for your instance, so the endpoint is not shared with any other service. This incurs additional infrastructure cost (see servala.com for pricing) and is useful when you need a stable, dedicated IP address, for example for firewall allow-lists on the side of the connecting application.
Which one should I choose?¶
| TCP Gateway | Load Balancer | |
|---|---|---|
| Endpoint | Shared gateway | Dedicated load balancer and IP |
| Port | Assigned by the platform | Dedicated |
| Additional cost | None | Yes |
| Dedicated IP address | No | Yes |
| Recommended for | Most use cases | Stable IP or firewall allow-lists |
Choose TCP Gateway unless you have a specific need for a dedicated IP address. Choose Load Balancer when a connecting system requires a stable, dedicated IP address, or when you want network isolation from other tenants.
Connecting¶
Whichever access mode you choose, the hostname and port to connect with are always shown on the instance detail page in the portal, together with your credentials. See the relevant service page in the Service Catalog for client examples.