Function Overview
OBS 2.0 Supported
-
The Virtual Private Cloud (VPC) service enables you to provision logically isolated, configurable, and manageable virtual networks for cloud servers, cloud containers, and cloud databases, improving cloud service security and simplifying network deployment.
You can create security groups and VPNs, configure IP address ranges, and specify bandwidth sizes in your VPC. With a VPC, you can configure and manage the networks within the VPC, making changes to these networks as needed, quickly and securely. You can also define rules for communication between ECSs in the same security group or in different security groups.
Availability: All regions
-
OBS 2.0 Supported
-
A subnet is a unique CIDR block with a range of IP addresses in your VPC. All resources in a VPC must be deployed on subnets. Once a subnet has been created, its CIDR block cannot be modified.
You can create, modify, and delete subnets.
Availability: All regions
-
OBS 2.0 Supported
-
A route table contains routes, which are used to determine where traffic is directed.
When you create a VPC, the system automatically creates a default route table. The route table ensures that all subnets in the VPC can communicate with each other. You can also add custom routes to control where traffic is directed.
You can add, query, modify, and delete routes.
Availability: All regions
-
OBS 2.0 Supported
-
A virtual IP address is not allocated to an actual ECS NIC. An ECS can have both private and virtual IP addresses, and you can access the ECS through either one. In addition, the virtual IP address has the same network access capability as the private IP address. Virtual IP addresses are used for high availability as they make active/standby ECS switchover possible.
You can assign and release virtual IP addresses, bind a virtual IP address to an EIP or ECS, and access a virtual IP address through an EIP, a VPN, Direct Connect, or VPC peering connection.
Networking mode 1: HA
If you want to improve service availability and avoid single points of failure, you can deploy ECSs in the active/standby mode or one active and multiple standby mode. In this arrangement, the ECSs all use the same virtual IP address. If the active ECS becomes faulty, a standby ECS takes over services from the active ECS and services continue uninterrupted.
(1) In this configuration, two ECSs in a subnet are bound to a single virtual IP address.
(2) Keepalived is then used to configure the two ECSs to work in the active/standby mode. Follow industry standards for configuring Keepalived. The details are not included here.Networking mode 2: HA load balancing cluster
If you want to build a high-availability load balancing cluster, use Keepalived and configure LVS nodes as direct routers.(1) Bind two ECSs to the same virtual IP address.
(2) Configure the two ECSs as LVS nodes working as direct routers and use Keepalived to configure the nodes in the active/standby mode. The two ECSs will evenly forward requests to different backend servers.
(3) Configure another two ECSs as backend servers.
(4) Disable the source/destination check for the two servers.
Follow industry standards for configuring Keepalived. The details are not included here.Availability: All regions
-
OBS 2.0 Supported
-
IPv4 and IPv6 dual stack allows your resources to use both the IPv4 and IPv6 addresses for private and public network communication.
If your application needs to provide services for users who use IPv6 clients, you can use IPv6 EIPs or the IPv4 and IPv6 dual-stack function.If your application needs to both provide services for users who use IPv6 clients and analyze the access request data, you can use only the IPv4 and IPv6 dual-stack function.
If internal communication is required between your application systems or between your application system and another system (such as the database system), you can use only the IPv4 and IPv6 dual-stack function.
You can create an IPv4/IPv6 dual-stack network or add an IPv6 subnet to a VPC to form a dual-stack network.
Availability: CN North-Beijing4, CN East-Shanghai1, CN South-Guangzhou, CN Southwest-Guiyang1, CN-Hong Kong, AP-Bangkok, P-Singapore, LA-Mexico City1, LA-Mexico City2, LA-Sao Paulo1, LA-Santiago, AP-Jakarta, TR-Istanbul, and ME-Riyadh
-
OBS 2.0 Supported
-
A security group is a collection of access control rules for ECSs that have the same security protection requirements and are mutually trusted within a VPC.
After a security group is created, you can create different access rules for the security group to protect the ECSs that are added to this security group.You can create and delete security groups, add, replicate, modify, delete, import and export security group rules, view and change the security group of an ECS, and add cloud resources to or remove them from a security group.
Availability: All regions
-
OBS 2.0 Supported
-
A network ACL is an optional layer of security for your subnets. You associate one or more subnets with a network ACL. The network ACL can help you control traffic in and out of the subnets.
Similar to security groups, network ACLs control access to the network. They add an additional layer of defense to your VPC. Security groups operate at the ECS level, whereas network ACLs operate at the subnet level. You can use network ACLs together with security groups to implement access control that is both comprehensive and fine-grained.You can create, view, modify, delete, enable, disable network ACLs, associate subnets with or disassociate them from network ACLs, and add, modify, change the sequence of, enable, disable, and delete network ACL rules.
Availability: All regions
-
OBS 2.0 Supported
-
An IP address group is a collection of IP addresses that can use the same security group rule.
You can use an IP address group to manage IP addresses that have the same security requirements or whose security requirements change frequently.
Availability: All regions
-
OBS 2.0 Supported
-
An EIP is a public IP address that can be accessed directly over the Internet. An EIP consists of a public IP address and some amount of public network egress bandwidth. You can bind EIPs to or unbind them from cloud resources.
You can assign EIPs, bind EIPs to cloud resources, unbind EIPs from cloud resources, release EIPs, modify EIP bandwidth, and upgrade static BGP to dynamic BGP.
Availability for IPv6 function: CN North-Beijing4, CN East-Shanghai1, and CN South-Guangzhou
-
OBS 2.0 Supported
-
Shared bandwidth allows multiple EIPs to share the same bandwidth. All ECSs, BMSs, and load balancers that have EIPs bound in a region can use the same bandwidth.
When you host a large number of applications on the cloud, if each EIP uses an independent bandwidth, a lot of bandwidths are required, which incurs high bandwidth costs. If all EIPs share the same bandwidth, your network operation costs will be lowered and your system O&M as well as resource statistics will be simplified.You can assign, modify, delete a shared bandwidth, add EIPs to a shared bandwidth, and remove EIPs from a shared bandwidth.
Availability: All regions
-
OBS 2.0 Supported
-
A shared data package is a traffic package that is easy to use and cost-effective. Shared data packages take effect immediately after your purchase. If you have subscribed to pay-per-use EIPs using bandwidth billed by traffic in a region and buy a shared data package in the same region, the EIPs will use the shared data package. After the package quota is used up or the package expires, the EIPs will continue to be billed on a pay-per-use basis.
Availability: CN North-Beijing4, CN East-Shanghai1, CN South-Guangzhou, CN Southwest-Guiyang1, CN-Hong Kong, AP-Bangkok, AP-Singapore, and AF-Johannesburg
-
OBS 2.0 Supported
-
A VPC peering connection is a networking connection that connects two VPCs for them to communicate using private IP addresses. The VPCs to be peered can be in the same account or different accounts, but must be in the same region.
You can create a VPC peering connection with another VPC in your account or with a VPC in another account. You can also view, modify, and delete VPC peering connections.
-
OBS 2.0 Supported
-
A VPC flow log records information about the traffic going to and from a VPC. VPC flow logs help you monitor network traffic, analyze network attacks, and determine whether security group and network ACL rules require modification.
You can create, view, enable, disable, and delete VPC flow logs.
Availability: All regions
-
OBS 2.0 Supported
-
Traffic Mirroring can be used to mirror traffic that meets a mirror filter from an elastic network interface. You can configure inbound and outbound rules for a mirror filter to determine which traffic from an elastic network interface will be mirrored to a network interface or load balancer. You can then send the traffic for inspection, audit analysis, and troubleshooting.
You can create mirror filters and mirror sessions, enable and disable mirror sessions, and view mirror sessions.
Availability: CN North-Beijing4, CN East-Shanghai1, CN South-Guangzhou, and AP-Singapore
-
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot