Help Center/ Cloud Container Engine/ User Guide (Kuala Lumpur Region)/ Service Overview/ What Is CCE?
Updated on 2026-06-26 GMT+08:00
View PDF
Share

What Is CCE?

Cloud Container Engine (CCE) is a Kubernetes cluster hosting service for enterprises. It manages the entire lifecycle of containerized applications and delivers scalable, high-performance solutions for deploying and managing cloud native applications.

Why CCE?

CCE is a one-stop platform integrating compute (ECS), networking (VPC, EIP, and ELB), storage (EVS, SFS, and OBS), and many other services. Multi-AZ, multi-region disaster recovery (DR) ensures high availability (HA) of Kubernetes clusters.

For more information, see CCE Advantages and Application Scenarios.

CCE Cluster Types

There are multiple types of CCE clusters.

Cluster Type

CCE standard

CCE Turbo

Positioning

Standard clusters that provide highly reliable, secure containers for commercial use

Next-generation clusters designed for Cloud Native 2.0, with accelerated compute, networking, and scheduling

Application Scenario

For users who expect to use container clusters to manage applications, obtain elastic compute resources, and enable simplified management of compute, network, and storage resources

For users who have higher requirements on performance, resource utilization, and full-scenario coverage

Network

For scenarios where there are not so many containers and high performance is not needed, the following networks are provided:

  • Tunnel networks
  • VPC networks

Cloud Native 2.0 networks: for scenarios where there are many containers and high performance is needed

A maximum of 2,000 nodes is supported.

Host Ports (hostPort) for Pods

Supported

Not supported

Network Performance

The container network is overlaid with the VPC network, causing certain performance loss.

The VPC network and container network are flattened into one for zero performance loss.

Network Isolation
  • Tunnel networks: network policies for communications within a cluster
  • VPC networks: After DataPlane V2 is enabled, CCE supports network policies.

Pods can be associated with security groups for isolation. This ensures consistent security isolation both within and outside a cluster.

Container Resource Isolation

cgroups are used to isolate common containers.
  • VM-level isolation is supported for secure containers that run only on physical machines.
  • cgroups are used to isolate common containers.

Edge Infrastructure Management

Not supported

Support for management of edge cloud resources
Parent topic: Service Overview