use private_network only