CloudHub VPCs, load balancers and static IPs
How to plan and connect a CloudHub 1.0 Anypoint VPC, resolve private domains, route traffic with the shared and dedicated load balancers, restrict access with firewall rules and allowlists, and give applications static IPs.
Design integration solutions deployed to CloudHub to address specific requirements using CloudHub's network features.
~8 min read · 11 practice questions
What the exam expects
- Size and place a CloudHub 1.0 Anypoint VPC so it can connect to private networks and grow.
- Predict whether an application runs inside a VPC, and connect the VPC through a VPN, transit gateway, peering or Direct Connect.
- Configure VPC Internal DNS for private domains and choose between load-balanced and direct worker endpoints.
- Design dedicated load balancer (DLB) mapping rules and predict the path an application receives.
- Combine VPC firewall rules, DLB allowlists and static IPs for inbound and outbound access requirements.
Anypoint VPC: a private, isolated network segment that hosts CloudHub workers. Dedicated load balancer (DLB): an optional load balancer inside a VPC that routes external HTTP and HTTPS traffic to applications. Mapping rule: a DLB rule that turns a request into a target application and path. Static IP: a fixed public address allocated to an application (Virtual Private Cloud, Dedicated Load Balancers).
Key facts
- Detail
- /24 smallest, /16 largest; must not overlap peered networks
- Detail
- At least two, plus infrastructure reserves
- Detail
- App enters the VPC after a restart
- Detail
- Same region as the Anypoint VPC
- Detail
- 95 per VPC across all connections
- Detail
- Up to 3 server IPs; domains within 229 characters; up to 60 minutes to propagate
- Detail
- VPC-only; bypasses load distribution
- Detail
- Literal only; no patterns
- Detail
- Inbound to workers only
- Detail
- Twice the Production vCores by default
- Detail
- Each unit equals two workers; up to four units
Sources for this section (7)
- Provision a VPCdocs.mulesoft.com (opens in a new tab)
- Connectivity methodsdocs.mulesoft.com (opens in a new tab)
- Private domainsdocs.mulesoft.com (opens in a new tab)
- Networking guidedocs.mulesoft.com (opens in a new tab)
- Mapping rulesdocs.mulesoft.com (opens in a new tab)
- Firewall rulesdocs.mulesoft.com (opens in a new tab)
- Dedicated Load Balancersdocs.mulesoft.com (opens in a new tab)
- What are the smallest and largest CIDR blocks an Anypoint VPC can use?
- What rule of thumb does MuleSoft give for sizing an Anypoint VPC subnet?
- Why can a broad mapping rule placed above a more specific one capture the specific requests?
- When static IPs are enabled for applications, how many are available by default?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the MuleSoft Platform Integration Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 40 lessons of the MuleSoft Platform Integration Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (11 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both