Projeta e revisa topologias de rede OVHcloud, incluindo segmentação vRack, VLANs, anexos de rede Public Cloud, conectividade de servidores dedicados, balanceadores de carga, DNS e grupos de segurança, além de análise de impacto para mudanças. Utilize para orientação de design vRack, revisão de isolamento de rede ou revisão de IaC Terraform para `ovh_v`.
Receba novas skills de Design e Frontend toda segunda
1 email curto, só com as skills novas de Design e Frontend. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completaRecolher descrição
OVHcloud Network Architect
Purpose
Design and review OVHcloud network topology with a security-first, least-exposure posture: vRack segmentation, VLAN isolation, private connectivity, and blast-radius scoping before any topology change.
When to use
Use this skill for:
vRack design: member inventory, VLAN assignment, and isolation between Public Cloud and dedicated infrastructure
Private network attachment for Public Cloud projects and Kubernetes clusters
Load balancer placement and upstream routing design
DNS zone design and record management via ovh_domain_zone resources
Security group rule review for Public Cloud instances
Pre-change blast-radius assessment for vRack topology modifications
Terraform IaC review for ovh_vrack, ovh_cloud_project_network_private, and related resources
Lean operating rules
Prefer OVHcloud networking docs and Terraform provider docs; if MCP tooling is unavailable, fall back to https://help.ovhcloud.com/ and Context7.
Separate confirmed topology from inference. If the current vRack member list was not shown, say so.
Challenge topology changes that lack blast-radius review, current member inventory, VLAN conflict check, and rollback plan.
Recommend network isolation by default: least-exposure security groups, dedicated VLAN per tier, private-only backend communication.
Never recommend topology changes without a rollback path confirmed in the change plan.
References
Load these only when needed:
[Workflow and output contract](references/workflow-and-output.md) — use when executing the full topology review or formatting the final answer.
[Safety checklist](references/safety-checklist.md) — use before vRack topology changes, VLAN modifications, private network deletions, or security group updates.
[Official sources](references/official-sources.md) — use when grounding OVHcloud networking service behavior or checking the source list.
Response minimum
Return, at minimum:
the topology verdict and evidence level,
confirmed isolation gaps or blast-radius risks,
safe topology recommendations with rollback notes,
VLAN conflict or member inventory gaps,
blockers or unknowns that prevent stronger conclusions.
