Release notes
Start typing to search…
Back to All

Apr 9, 2026 — Linode Interfaces and firewall templates

about 4 hours ago

Linode Interfaces and firewall templates is now Generally Available (GA).

Linode Interfaces offer an alternative to the existing Configuration Profile Interfaces for Linode networking. Both interface types support the creation of Public, VPC and VLAN network interfaces, but they differ in the following ways:

  • Interface management endpoints. Configuration Profile interfaces are managed using the Configuration profile interfaces endpoints, while Linode interfaces are managed using the new Linode interfaces endpoints.
  • Power settings Linode Interface addresses can only be created, deleted, or updated when the Linode is powered off. This ensures a clear and reliable association between the Linode and its network interface settings. In contrast, Configuration Profile Interfaces do not require the Linode to be powered off to make changes; however, any changes will only take effect after the Linode is rebooted.
  • Support for Linodes and LKE. Linode interfaces are supported on standard Linodes, but not on Linodes within an LKE cluster. If you're using LKE Cluster Linodes, please continue using Configuration Profile interfaces for your setup.
  • Support for private IPs. Private IPs are not available on Linode interfaces. A private IP allows you to access the data center’s private network, enabling communication with other Linodes that have private IPs in the same region without using a public IPv4 address. The private IP feature requires a public network interface. Instead of a private IP, consider using a VPC. If a private IP is required, you must use Configuration Profile Interfaces on the Linode.
  • Cloud Firewall integration. Linode Interfaces allow you to assign a Cloud Firewall directly to the interface. Firewall templates are available for both VPC and public interfaces, and include pre-configured protection rules. For Configuration Profile Interfaces, Cloud Firewalls are assigned at the Linode level, and the same firewall rules apply to all non-VLAN interfaces in the profile.

    📘

    Change in firewall_id behavior when set to null

    Prior to Linode Interfaces GA, setting firewall_id = null meant you opted out of assigning a firewall to the Linode or Linode interface.
    Starting on Linode Interfaces GA, setting firewall_id = null means the default firewall is used if available.

Linode Instances

Linode Interfaces. Endpoints for configuring and getting information for Linode interfaces:

Linode Instances. Endpoints with information related to Linode interfaces:

  • Create a Linode. POST /linode/instances
    • The interface_generation field lets you select one interface type for new Linodes when both legacy configuration profile interfaces and Linode interfaces options are available on your account.
      🚧

      If the interface_generation option is set to linode, and an interface is created, or the legacy configuration profile interfaces are upgraded, the Linode can't use legacy_config interfaces again.

    • Linode interface objects for VPC, VLAN and public have been added to the interfaces field.
  • List Linodes. GET linode/instances and Get a Linode. GET linode/instances/{linodeId}
    • The interface_generation field in the response, indicates if the Linode is configured to use linode interfaces or legacy_config interfaces.
  • Boot a Linode. POST linode/instances/{linodeId}/boot
    • If the Linode is using Linode interfaces, where interface_generation is set as linode, an error is returned if the Linode has to boot without any interface defined.
  • Reboot a Linode. POST linode/instances/{linodeId}/reboot
    • If the Linode is using Linode interfaces, where interface_generation is set as linode, an error is returned if the Linode has to reboot without any interface defined.
  • Boot a Linode into rescue mode. POST linode/instances/{linodeId}/rescue
    • Linodes with legacy configuration interfaces receive a public IP and boot into the recovery Linux distribution. Linodes with Linode interfaces still boot into recovery mode with the recovery Linux distribution, but they retain their original network interfaces and settings from before entering rescue mode.
  • Clone a Linode. POST linode/instances/{linodeId}/clone
    • For Linodes using Linode interfaces, the clone needs to be located in a region that supports Linode interfaces (see GET a region).
    • The account settings needs to allow creation of Linodes with Linode interfaces.
  • Initiate a DC migration/pending host migration. POST linode/instances/{linodeId}/migrate
    • If the Linode is using Linode interfaces, the destination region needs to also support Linode interfaces.
    • After migrating to a different data center, Linode public interfaces retain the same number of IP addresses, but the IP addresses themselves are changed.
  • Rebuild a Linode. POST linode/instances/{linodeId}/rebuild
    • Linode interfaces are not changed during a rebuild.

Configurations. Endpoints with information related to Linode interfaces:

IP addresses. Endpoints with information related to Linode interfaces:

Networking - Firewalls

Firewall templates. These endpoints list available firewall templates or retrieve a specific firewall template type. You can use firewall templates with Linode VPC and public interfaces. Each template includes pre-configured protection rules. Operations and responses:

Firewall settings. Endpoints to get or update the default firewalls for Linodes, Linode interfaces, and NodeBalancers.

Firewalls.

Networking - IPs

  • Allocate an IP address. POST networking/ips
    • This API can't be used for Linodes with Linode interfaces. To allocate an IP for a Linode with Linode interfaces, use the Add a Linode interface operation and set the public IPv4 address to auto.
    • The interface_id is returned if the IP address belongs to a Linode interface. This value is null if a Linode interface is not assigned or if the IP is assigned to a legacy configuration profile interface.
  • List IP addresses GET networking/ips
    • This API now returns public IP addresses for both Linode interfaces and Linodes.
    • An interface_id is returned if the IP address belongs to a Linode interface. This value is null if a Linode interface is not assigned or if the IP is assigned to a legacy configuration profile interface.
  • Get an IP address. GET networking/ips/{address}
    • An interface_id is returned if the IP address belongs to a Linode interface. This value is null if a Linode interface is not assigned or if the IP is assigned to a legacy configuration profile interface.
  • Assign IP addresses. POST networking/ips/assign
    • For Linode interfaces, the Linode needs to have a public interface and the address it receives can't be a private IPv4 address.
  • Assign IPv4s to Linodes. POST networking/ipv4/assign
    • For Linode interfaces, the Linode needs to have a public interface and the address it receives can't be a private IPv4 address.
  • Share IP addresses. POST networking/ips/share
    • A public IPv4 address can't be shared if it's configured for a 1:1 NAT on a vpc-purpose configuration profile interface or on a VPC Linode interface.
  • Configure IPv4 sharing. POST networking/ipv4/share
    • A public IPv4 address can't be shared if it's configured for a 1:1 NAT on a vpc-purpose configuration profile interface or on a VPC Linode interface.

Networking - VLANs

  • List VLANs. GET /networking/vlans
    • This endpoint now lists VLANs interfaces from both legacy configuration profiles and Linode interfaces.

VPCs

  • List VPCs. GET /vpcs and Get a VPC. GET /vpcs/{vpcId}
    • The config_id is the globally general entity ID for the Linode configuration profile where the VPC is included. If this is a VPC Linode interface, the value is null.
  • List VPC subnets. GET /vpcs/{vpcId}/subnets and Get a VPC subnet. GET /vpcs/{vpcId}/subnets/{vpcSubnetId}
    • The config_id is the globally general entity ID for the Linode configuration profile where the VPC is included. If this is a VPC Linode interface, the value is null.
  • List VPC IP addresses.GET /vpcs/ips and List a VPC's IP addresses. GET /vpcs/{vpcId}/ips
    • If config_id is null, it indicates that this is a VPC Linode interface.

Accounts

Changed

Accounts settings. You can view and update the interfaces to use on new Linodes:

  • Get account settings. GET /account/settings
    • The interfaces_for_new_linodes field indicates if new Linodes created on the account can use legacy configuration interfaces.
  • Update account settings. PUT /account/settings
    • interfaces_for_new_linodes indicates if new Linodes created on the account can use legacy configuration interfaces.

Service transfers. "VPC interface" and "/32" IPv6 range conditions also prevent service transfers.

Regions

Changed

  • List regions. GET /regions
    • Added Linode Interfaces to the list of capabilities that may be available in a region.