Overview

Networking → Networks lists every network on your account, whether it sits inside a VPC or stands on its own. It is the flat view; the VPC Networks tab is the same networks filtered to one VPC.
Navigation: Networking → Networks. Clicking a network opens seven sections.

Columns

Network Offering is the column worth reading. It decides whether the network can carry a load balancer, a VPN, port forwarding and so on — capabilities are fixed by the offering at creation and cannot be added later. A network on a “NoLB” offering will never accept a load balancer rule, however the interface behaves.

Standalone networks versus VPC tiers

If you are building anything with more than one tier, use a VPC. Standalone networks cannot be joined by a private gateway or reached over VPN, so a two-tier application built from two standalone networks has no supported path between them.

The detail sections

The Load Balancing section only appears when load balancing is enabled for your deployment. See Load Balancing.

Egress Rules

What instances on this network may reach on the way out. Rules are ordered and can be reordered by dragging. Deleting a rule asks first, and states the two things worth knowing: rules are evaluated in order so removing one can change which later rule matches, and if it was the only rule permitting a destination then traffic to that destination stops.
Egress rules here are distinct from two other things with similar names: the egress rules on a security group, and the egress rules on a public address. They sit at different layers. See Duplicates and aliases if you are working through the API.

Network Permissions

Which accounts and projects may deploy instances into this network — how a network is shared without being public.
Reset all permissions is not selective — it removes every grant on the network, not just the ones matching your current filter, and each account or project then has to be granted access again individually. The confirmation says so; read it before confirming.
Removing access never disconnects a running instance. It only prevents new deployments. To actually cut something off, change the network’s egress rules or the tier’s firewall policy.

Deleting a network

From the row menu, or from the network’s own detail page. Both open the same confirmation.
A network with instances still attached cannot be cleanly removed — move or delete them first. Static NAT mappings pointing into the network should be disabled from Public IPs too, so you don’t leave an address mapped to nothing.

VPC Networks

Tiers inside a VPC, and assigning policies.

Load Balancing

Internal load balancers on a network.

Security Groups

The basic-networking alternative.

Public IPs

Publishing an instance on a network.