Networking & ports

The model

instance  i-52ab77c1
hostname  i-52ab77c1.powergpu.io
mapping   container 8000  ->  i-52ab77c1.powergpu.io:8000   (https, TLS terminated)
          container 22    ->  i-52ab77c1.powergpu.io:2201   (tcp, direct)

• Declared HTTP ports are fronted by our edge: TLS certificate, HTTP/2, WebSocket pass-through. Your container speaks plain HTTP inside.
• TCP ports (SSH, databases, game servers) map to high ports on the same hostname, direct to the machine.
• Port budget — each machine advertises how many ports it can map (8–100, shown on the offer card). Filter by it in the console (portsMin).

Bandwidth

$0.01/GB, in and out, worldwide — no tiers, no inter-region matrix. The instance page shows a live transfer counter; the ledger itemises it per instance. A 40 GB model download costs $0.40; serving a million 2 KB responses costs about $0.00.

Network security

• Only declared ports are reachable — everything else is dropped at the edge.
• Instance-to-instance traffic inside a region stays on the private fabric (and is free).
• Outbound is open (package installs, model downloads) with standard abuse controls — see the acceptable use policy.

Practical notes

• WebSockets & SSE work through the HTTP edge unmodified (vLLM streaming, ComfyUI live previews).
• Long-lived connections idle-timeout at 4 hours on the edge; raw TCP ports have no such timeout.
• Custom domains — CNAME your domain to the instance hostname and we mint the certificate; per-instance, from the instance page.