Function Overview

The Virtual Private Cloud (VPC) service enables you to provision logically isolated, configurable, and manageable virtual networks for cloud servers, cloud containers, and cloud databases, improving cloud service security and simplifying network deployment.

You can create security groups and VPNs, configure IP address ranges, and specify bandwidth sizes in your VPC. With a VPC, you can configure and manage the networks within the VPC, making changes to these networks as needed, quickly and securely. You can also define rules for communication between ECSs in the same security group or in different security groups.

A subnet is a unique CIDR block with a range of IP addresses in your VPC. All resources in a VPC must be deployed on subnets. Once a subnet has been created, its CIDR block cannot be modified.

HUAWEI CLOUD allows you to create subnets, modify subnet information, and delete subnets.

A route table contains routes, which are used to determine where traffic is directed.

When you create a VPC, the system automatically creates a default route table. The route table ensures that all subnets in the VPC can communicate with each other. You can also add custom routes to control where traffic is directed.

HUAWEI CLOUD allows you to add, query, modify, and delete routes.

A virtual IP address is not allocated to an actual ECS NIC. An ECS can have both private and virtual IP addresses, and you can access the ECS through either one. In addition, the virtual IP address has the same network access capability as the private IP address. Virtual IP addresses are used for high availability as they make active/standby ECS switchover possible.

HUAWEI CLOUD allows you to assign virtual IP addresses, delete virtual IP addresses, bind an EIP or ECS to a virtual IP address, and access a virtual IP address through an EIP, a VPN, a Direct Connect connection, or a VPC peering connection.

Networking mode 1: HA
If you want to improve service availability and avoid single points of failure, you can deploy ECSs in the active/standby mode or one active and multiple standby mode. In this arrangement, the ECSs all use the same virtual IP address. If the active ECS becomes faulty, a standby ECS takes over services from the active ECS and services continue uninterrupted.
(1) In this configuration, two ECSs in a subnet are bound to a single virtual IP address.
(2) Keepalived is then used to configure the two ECSs to work in the active/standby mode. Follow industry standards for configuring Keepalived. The details are not included here.

IPv4 and IPv6 dual stack allows your resources to use both the IPv4 and IPv6 addresses for private and public network communication.
If your application needs to provide services for users who use IPv6 clients, you can use IPv6 EIPs or the IPv4 and IPv6 dual-stack function.

If your application needs to both provide services for users who use IPv6 clients and analyze the access request data, you can use only the IPv4 and IPv6 dual-stack function.

If internal communication is required between your application systems or between your application system and another system (such as the database system), you can use only the IPv4 and IPv6 dual-stack function.

HUAWEI CLOUD supports the IPv4/IPv6 dual stack. You can create an IPv4/IPv6 dual-stack network or add an IPv6 subnet to an existing VPC to form a dual-stack network.

A security group is a collection of access control rules for ECSs that have the same security protection requirements and are mutually trusted within a VPC.
After a security group is created, you can create different access rules for the security group to protect the ECSs that are added to this security group.

HUAWEI CLOUD allows you to create, delete security groups, add, quickly add multiple security group rules, replicate security group rules, modify, delete, import or export security group rules, view the security group of an ECS, change the security group of an ECS, and add cloud resources to or remove them from a security group.

A network ACL is an optional layer of security for your subnets. You associate one or more subnets with a network ACL. The network ACL can help you control traffic in and out of the subnets.
Similar to security groups, network ACLs control access to the network. They add an additional layer of defense to your VPC. Security groups operate at the ECS level, whereas network ACLs operate at the subnet level. You can use network ACLs together with security groups to implement access control that is both comprehensive and fine-grained.
HUAWEI CLOUD allows you to create, view, modify, delete, enable, disable network ACLs, associate subnets with or disassociate them from network ACLs, add, modify, change the sequence of, enable, disable, and delete network ACL rules.

An EIP is a public IP address that can be accessed directly over the Internet. An EIP consists of a public IP address and some amount of public network egress bandwidth. You can bind EIPs to or unbind them from cloud resources.

HUAWEI CLOUD allows you to assign EIPs, bind EIPs to cloud resources, unbind EIPs from cloud resources, release EIPs, modify EIP bandwidth, and upgrade static BGP to dynamic BGP.

Shared bandwidth allows multiple EIPs to share the same bandwidth. All ECSs, BMSs, and load balancers that have EIPs bound in a region can use the same bandwidth.
When you host a large number of applications on the cloud, if each EIP uses an independent bandwidth, a lot of bandwidths are required, which incurs high bandwidth costs. If all EIPs share the same bandwidth, your network operation costs will be lowered and your system O&M as well as resource statistics will be simplified.
HUAWEI CLOUD allows you to assign, modify, delete a shared bandwidth, add EIPs to a shared bandwidth, and remove EIPs from a shared bandwidth.

A VPC peering connection is a network connection between two VPCs. A VPC peering connection allows two VPCs communicate with each other using private IP addresses as if they were in the same VPC. You can create a VPC peering connection between your own VPCs, or between your VPC and a VPC of another account within the same region. A VPC peering connection between VPCs in different regions will not take effect.

HUAWEI CLOUD allows you to create a VPC peering connection with another VPC in your account or with a VPC in another account. You can also view, modify, and delete VPC peering connections.