What's New

1

More user-friendly security group documentation

• Added sequence on how traffic matches security group and network ACL rules.
• Added the security group architecture, sequence on how traffic matches security group rules, and security group application examples.
• Added the content on how to use IP address groups to simplify security group rule management.

Commercial use

What Is Access Control?

Security Groups and Security Group Rules

Security Group Configuration Examples

Using IP Address Groups to Reduce the Number of Security Group Rules

2

Network ACL tags

You can use tags to identity and search for network ACLs.

Commercial use

Creating a Network ACL

Managing Network ACL Tags

3

Security group tags

You can use tags to identity and search for security groups.

Commercial use

Creating a Security Group

Managing Security Group Tags

4

Easier VPC and subnet deletion

When you delete a VPC or subnet that is used by other resources, you can view the associated resource list on the console and delete them more easily.

Commercial use

Deleting a VPC

Deleting a Subnet

5

New console style

The style of the VPC console is upgraded.

Commercial use

Creating a VPC

1

VPC sharing

With Resource Access Manager (RAM), you can share subnets in a VPC with one or more accounts so you can centrally manage resources in multiple accounts, which improves resource management efficiency and reduces O&M costs.

Commercial use

VPC Sharing Overview

1

More operations on an IP address group

The following operations are allowed:

• Add descriptions to IP addresses.
• Export IP address group details.
• Import IP addresses to an IP address group in batches.

Commercial use

Creating an IP Address Group

Adding IP Addresses to an IP Address Group

Exporting IP Address Group Details

Importing IP Addresses to an IP Address Group in Batches

2

Associating a subnet with a network ACL on the Subnets page

The following operations on the Subnets page are allowed:

• Associate a subnet with a network ACL.
• Go to the details page of a network ACL.

Commercial use

Associating Subnets with a Network ACL

Disassociating Subnets from a Network ACL

1

Optimized the function of adding routes for a VPC peering connection.

If you want to add routes for a VPC peering connection, you do not need to switch to the VPC route table. You can directly add, view, or delete routes on the VPC peering connection details page.

Commercial use

Creating a VPC Peering Connection with Another VPC in Your Account

Creating a VPC Peering Connection with a VPC in Another Account

Viewing Routes Configured for a VPC Peering Connection

Deleting Routes Configured for a VPC Peering Connection

2

Added the Allow Common Ports function.

Commercial use

Allowing Common Ports with A Few Clicks

3

Optimized resource deletion function.

• Deleting an IP address group can also delete the network resources associated with the IP address group.
• Optimized the message displayed in the dialog boxes for deleting elastic network interfaces and supplementary network interfaces.

Commercial use

Deleting an IP Address Group

Deleting a Network Interface

Deleting a Supplementary Network Interface

1

Elastic network interfaces and supplementary network interfaces

• An elastic network interface is a virtual network card. You can create network interfaces and attach them to your cloud instances to obtain flexible and highly available network configurations.
• Supplementary network interfaces are a supplement to elastic network interfaces. If the number of elastic network interfaces that can be attached to your cloud instance cannot meet your requirements, you can use supplementary network interfaces.

Commercial use

Network Interface Overview

Supplementary Network Interface Overview

1

Multiple IP addresses can be specified when you add a security group rule.

If you select IP address for Source or Destination when you add a security group rule, you can enter multiple IP addresses in the same IP address box. Each IP address represents a different security group rule.

Commercial use

Adding a Security Group Rule

2

The Fast-add rule template is available.

If you select the Fast-add rule template when you create a security group, you can select common protocols and ports on the page to quickly add security group rules.

Commercial use

Creating a Security Group

1

Network ACLs support enterprise projects.

When creating a network ACL, you can add the network ACL to an enabled enterprise project.

Commercial use

Creating a Network ACL

2

Optimized IP address group functions

An IP address group is a collection of IP addresses. It can be associated with security groups and network ACLs to simplify IP address configuration and management in networking. The following are optimized:

• Optimized the page for creating an IP address group.
• Added the IP address group details page.
• Supported adding IP addresses to or delete them from an IP address group.

Commercial use

IP Address Group Overview

3

Optimized information on the VPC peering connection console

A VPC peering connection is a network connection between two VPCs in one region. The following are optimized:

• Optimized the page for creating a VPC peering connection.
• Optimized the dialog box for adding routes for a VPC peering connection.

Commercial use

Creating a VPC Peering Connection with Another VPC in Your Account

Creating a VPC Peering Connection with a VPC in Another Account

1

New VPC console

A new VPC console is available and you can click Virtual Private Cloud in the navigation pane on the left and visit My VPCs, Subnets, Route Tables, Network Interfaces, and VPC Peering Connections.

Commercial use

Creating a VPC

1

Fine-grained VPC permission management

If you need to assign different permissions to employees in your enterprise to access your VPC resources, IAM is a good choice for fine-grained permissions management.

Commercial use

Permissions Management

1

Secondary CIDR block

You can add a secondary IPv4 CIDR block to your VPC.

Commercial use

Adding a Secondary CIDR Block to a VPC

1

IP address group

An IP address group is a collection of IP addresses that use the same security group rules. You can use an IP address group to manage IP addresses that have the same security requirements or whose security requirements change frequently. An IP address group frees you from repeatedly modifying security group rules and simplifies security group rule management.

Commercial use

IP Address Group Overview

1

IPv4 and IPv6 dual stack

IPv4 and IPv6 dual stack allows your resources, such as ECSs, to use both the IPv4 and IPv6 addresses for private and public network communication.

Open beta testing

IPv4 and IPv6 Dual-Stack Network