What's New

1

Traffic Mirroring example scenarios

Example scenarios:

• Mirroring inbound TCP traffic to a single network interface
• Mirroring inbound TCP and UDP traffic to multiple network interfaces

Commercial use

Mirroring Inbound TCP Traffic to a Single Network Interface

Mirroring Inbound TCP and UDP Traffic to Multiple Network Interfaces

1

Optimized console for managing resource tags

You can manage tags of a resource more flexibly.

Commercial use

Managing VPC Tags

Managing Subnet Tags

Managing Security Group Tags

Managing Network ACL Tags

2

Optimized console for creating VPCs and subnets

You can create VPCs and subnets on the console in an easier and more interactive way.

Commercial use

Creating a VPC and Subnet

3

Optimized navigation bar of the network console

Service features are reorganized and rearranged in the navigation bar of the network console. The main changes of VPC include: IP Address Groups is put under Access Control, and Flow Logs and Traffic Mirroring are put under Network Monitoring.

Commercial use

Creating an IP Address Group

Creating a VPC Flow Log

Creating a Mirror Session

1

Optimized documentation related to virtual IP addresses

• Differences between virtual IP addresses, private IP Addresses, and EIPs
• Application scenarios and quotas of virtual IP addresses
• Using a virtual IP address and Keepalived to set up a high-availability web cluster

Commercial use

Virtual IP Address Overview

Using a Virtual IP Address and Keepalived to Set Up a High-Availability Web Cluster

2

VPC network connection solutions

This section describes how you can set up private networks, public networks, and hybrid cloud networks based on the network architecture.

Commercial use

Overview

Connecting VPCs

Connecting VPCs to the Public Network

Connecting VPCs to On-Premises Data Centers

3

VPC and subnet planning

This section provides network architecture figures to show you how to plan your VPCs and subnets in different networks.

Commercial use

VPC and Subnet Planning

1

Rules adjustable

When you create a security group, you can modify the rules on the creation page.

Commercial use

Creating a Security Group

2

Optimized quick start

The configuration guide for the following two scenarios is provided:

• Setting Up an IPv4 Network in a VPC
• Quickly Setting Up an IPv4/IPv6 Dual-Stack Network In a VPC

Commercial use

Setting Up an IPv4 Network in a VPC

Quickly Setting Up an IPv4/IPv6 Dual-Stack Network In a VPC

1

A more user-friendly page for creating a VPC peering connection

Some configuration examples for configuring VPC peering connections are provided for you to follow.

Commercial use

Creating a VPC Peering Connection with Another VPC in Your Account

Creating a VPC Peering Connection with a VPC in Another Account

VPC Peering Connection Usage Examples

2

Optimized user guide

Added the following content:

• The VPC CIDR block range
• The guidance for querying security group rule changes
• The descriptions about cloud services that support VPC sharing

Commercial use

VPC and Subnet Planning Suggestions

Querying Security Group Rule Changes

VPC Sharing

1

More user-friendly security group documentation

• Added sequence on how traffic matches security group and network ACL rules.
• Added the security group architecture, sequence on how traffic matches security group rules, and security group application examples.
• Added the content on how to use IP address groups to simplify security group rule management.

Commercial use

What Is Access Control?

Security Groups and Security Group Rules

Security Group Configuration Examples

Using IP Address Groups to Reduce the Number of Security Group Rules

2

Network ACL tags

You can use tags to identity and search for network ACLs.

Commercial use

Creating a Network ACL

Managing Network ACL Tags

3

Security group tags

You can use tags to identity and search for security groups.

Commercial use

Creating a Security Group

Managing Security Group Tags

4

Easier VPC and subnet deletion

When you delete a VPC or subnet that is used by other resources, you can view the associated resource list on the console and delete them more easily.

Commercial use

Deleting a VPC

Deleting a Subnet

5

New console style

The style of the VPC console is upgraded.

Commercial use

Creating a VPC

1

VPC sharing

With Resource Access Manager (RAM), you can share subnets in a VPC with one or more accounts so you can centrally manage resources in multiple accounts, which improves resource management efficiency and reduces O&M costs.

Commercial use

VPC Sharing Overview

1

More operations on an IP address group

The following operations are allowed:

• Add descriptions to IP addresses.
• Export IP address group details.
• Import IP addresses to an IP address group in batches.

Commercial use

Creating an IP Address Group

Adding IP Addresses to an IP Address Group

Exporting IP Address Group Details

Importing IP Addresses to an IP Address Group in Batches

2

Associating a subnet with a network ACL on the Subnets page

The following operations on the Subnets page are allowed:

• Associate a subnet with a network ACL.
• Go to the details page of a network ACL.

Commercial use

Associating Subnets with a Network ACL

Disassociating Subnets from a Network ACL

1

Optimized the function of adding routes for a VPC peering connection.

If you want to add routes for a VPC peering connection, you do not need to switch to the VPC route table. You can directly add, view, or delete routes on the VPC peering connection details page.

Commercial use

Creating a VPC Peering Connection with Another VPC in Your Account

Creating a VPC Peering Connection with a VPC in Another Account

Viewing Routes Configured for a VPC Peering Connection

Deleting Routes Configured for a VPC Peering Connection

2

Added the Allow Common Ports function.

Commercial use

Allowing Common Ports with A Few Clicks

3

Optimized resource deletion function.

• Deleting an IP address group can also delete the network resources associated with the IP address group.
• Optimized the message displayed in the dialog boxes for deleting elastic network interfaces and supplementary network interfaces.

Commercial use

Deleting an IP Address Group

Deleting a Network Interface

Deleting a Supplementary Network Interface

1

Elastic network interfaces and supplementary network interfaces

• An elastic network interface is a virtual network card. You can create network interfaces and attach them to your cloud instances to obtain flexible and highly available network configurations.
• Supplementary network interfaces are a supplement to elastic network interfaces. If the number of elastic network interfaces that can be attached to your cloud instance cannot meet your requirements, you can use supplementary network interfaces.

Commercial use

Network Interface Overview

Supplementary Network Interface Overview

1

Multiple IP addresses can be specified when you add a security group rule.

If you select IP address for Source or Destination when you add a security group rule, you can enter multiple IP addresses in the same IP address box. Each IP address represents a different security group rule.

Commercial use

Adding a Security Group Rule

2

The Fast-add rule template is available.

If you select the Fast-add rule template when you create a security group, you can select common protocols and ports on the page to quickly add security group rules.

Commercial use

Creating a Security Group

1

Network ACLs support enterprise projects.

When creating a network ACL, you can add the network ACL to an enabled enterprise project.

Commercial use

Creating a Network ACL

2

Optimized IP address group functions

An IP address group is a collection of IP addresses. It can be associated with security groups and network ACLs to simplify IP address configuration and management in networking. The following are optimized:

• Optimized the page for creating an IP address group.
• Added the IP address group details page.
• Supported adding IP addresses to or delete them from an IP address group.

Commercial use

IP Address Group Overview

3

Optimized information on the VPC peering connection console

A VPC peering connection is a network connection between two VPCs in one region. The following are optimized:

• Optimized the page for creating a VPC peering connection.
• Optimized the dialog box for adding routes for a VPC peering connection.

Commercial use

Creating a VPC Peering Connection with Another VPC in Your Account

Creating a VPC Peering Connection with a VPC in Another Account