Creating Private Spaces | MuleSoft Documentation
# Creating Private Spaces
To extend your network to Anypoint Platform, create a _private space_ , a virtual, private, and isolated network hosted in CloudHub 2.0, to deploy your apps to.
## Create a Private Space
  1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**.
The page shows any private spaces associated with the selected business group.
  2. Click **Create private space**.
  3. Enter a name for your private space and click **Create**.
You cannot rename your private space after you create it.


## Create a Private Network
You can’t change the private network configuration after it’s created. To change the configuration, delete the private space and create it again. See Managing Private Spaces.   
---  
  1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**.
The page shows any private spaces associated with the selected business group.
  2. Click the name of the private space to manage.
  3. On the **Network** tab, click **Create Private Network**.
  4. On the **Create Private Network** page:
    1. Select the region where you want your apps to run.
    2. Enter the CIDR block, which is the range of IP addresses that your apps can use.
    3. Optionally, reserve your corporate private network’s CIDRs to connect to your private space by entering them in a comma-separated list.
When you reserve your corporate CIDRs, Anypoint Platform creates IPs for your private space without using these blocks to prevent conflicts with your corporate private network.
    4. Click **Create**.
The private network can take up to 30 minutes to create.
While the network is created, you can create a connection to an external network.
  5. After the network creation succeeds, you can deploy an application to test the private network connection.


If the private network creation fails, delete it and click **Create Private Network** to try again.
### Resolve Private Domains in Your Internal Network
If your corporate network uses internal DNS servers to resolve requests to custom domains, configure the private space with these IP addresses and domain names. The private space uses your internal DNS to resolve internal host names of your private network (make sure your applications call the backend resources by FQDN).
  1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**.
  2. Click the name of the private space to manage.
  3. On the **Network** tab, click the **Configure** link for **Internal DNS servers**.
  4. Enter the (comma-separated) server IP addresses for your internal DNS servers.
  5. Enter the (comma-separated) domain addresses to be resolved by internal DNS.
  6. Click **Save**.


After you configure internal DNS, the **Network** tab indicates the number of configured server IP addresses and domains:
You can’t add MuleSoft domains or public domains as private space internal DNS.   
---  
## Create a Connection to an External Network
After you create your private network, connect it to an external network using a VPN or transit gateway attachment.
  1. From Anypoint Platform, select **Runtime Manager** > **Private Spaces**.
  2. Click the name of the private space to manage.
  3. On the **Network** tab, click **Create Connection**.
  4. On the **Create Connection** page, select the connection type, enter the VPN or transit gatewayconnection name, and click **Next**.
Depending on the connection type you selected:
     * **VPN** : Follow the steps in Creating VPN Connections.
     * **Transit Gateway** : Follow the steps in Creating Transit Gateway Attachments.


## See Also
  * Gathering Required Setup Information
  * Creating VPN Connections
  * Creating Transit Gateway Attachments
  * Configuring Private Spaces
  * Managing Private Spaces