The functionality of a VPC depends on several critical networking layers that define how data flows and who can access it:

: These are segments of the VPC's IP address range. They allow for functional separation—for example, a public subnet for web servers accessible to the internet, and a private subnet for sensitive databases that should never be directly exposed.

: Stateful virtual firewalls that control traffic at the individual instance (server) level.