A private space is a virtual, private, and isolated logical space in CloudHub 2.0 in which to run your apps. You can create multiple private spaces, either in the same or different regions.

You connect your private intranet to your private space to function as a single, private network.

In each private space, you define:

• A private network, which is a virtual cloud where apps deployed to this private space run.
• One or more connections from the private network to your external network, either via Anypoint VPN or a transit gateway.
• TLS contexts, which define the domains that are available when deploying apps to the private spaces, and optionally enable mutual TLS.
• Firewall rules to allow and block inbound and outbound traffic to your private space.
• The environments and business groups to allow to deploy to the private space.

When you create a private space, your license for Mule runtime is automatically injected and managed by MuleSoft.

When you create the private network, you associate a range of IP addresses for the apps in your private space to use, the region in which they run, and optionally, any internal DNS servers to resolve requests to custom domains.

You can configure multiple private spaces in a single region, enabling you to set up separate isolated networks for your production and non-production environments, such as dev or staging.

For information about regions, see Private Network Region.