VPC Limits

A Virtual Private Cloud (VPC) is a private network interface for collections of DigitalOcean resources. VPC networks provide a more secure connection between resources because the network is inaccessible from the public internet and other VPC networks. Traffic within a VPC network doesn’t count against bandwidth usage.


  • We do not support VPC networks between resources in different datacenter regions.

  • VPC networks only support up to 10,000 resources, even if the subnet size allows for more.

  • You cannot migrate load balancers or Kubernetes clusters between VPC networks. Droplets can be migrated between networks using snapshots, and databases can be directly migrated in their Settings tab.

  • VPC network ranges cannot overlap with the ranges of other networks in the same account. The IP ranges available for VPC networks are the same as those outlined in RFC 1918.

  • VPCs do not support multicast, broadcast, or jumbo frames (Ethernet frames with more than 1500 bytes of payload).

  • Resources do not currently support multiple private network interfaces and cannot be placed in multiple VPC networks.

  • Apps deployed on App Platform are not connected to VPC networks. This includes connections between apps and DigitalOcean Managed Databases. See How to Manage Databases in App Platform for detailed instructions about how to connect apps to databases.

  • We reserve a few addresses in each VPC network and subnet for internal use, including the network ID and the broadcast ID.

  • The,, and IP address ranges are reserved in all regions for DigitalOcean internal use. We also reserve the following IP ranges in these regions:

    Region Reserved Range

Known Issues

  • When creating new resources, the VPC Network drop-down menu on the create page can only list up to 50 VPC networks. We are working to increase this limit.