1

SDK interface invoking

Enterprise Edition VPN provides software development kits (SDKs) in Java, Python, Go, NodeJs, and PHP languages.

Commercial use

Software Development Kit SDK

2

Tags

Enterprise Edition VPN allows you to set tags for VPN gateways, customer gateways, and VPN connections to facilitate resource identification and management.

You can select predefined tags or customize tags.

Commercial use

Creating a VPN Gateway

Creating a Customer Gateway

Creating a VPN Connection

1

Specifying an IP address for a VPN gateway of the private network type

When creating an Enterprise Edition VPN gateway of the private network type, you can specify an IP address in the access subnet as the VPN gateway IP address.

Commercial use

Specifying an IP Address for a VPN Gateway of the Private Network Type

2

Access via non-fixed IP addresses

An Enterprise Edition VPN gateway can connect to a customer gateway that uses a non-fixed IP address.

Commercial use

Connecting an On-premises Data Center to a VPC on the Cloud Through VPN (Access via Non-fixed IP Addresses)

1

VPN gateway of the GM specification (supporting SM series cryptographic algorithms)

Enterprise Edition VPN gateways of the GM specification are supported, in compliance with the GB∕T 36968-2018 Information security technology —Technical specification for IPSec VPN.

Commercial use

Differences Between Enterprise Edition VPN and Classic VPN

2

Shared bandwidth

An Enterprise Edition VPN gateway can be bound to EIPs that share bandwidth, reducing bandwidth costs.

Commercial use

Creating a VPN Gateway

3

Active/Standby mode

• An Enterprise Edition VPN gateway can establish active and standby connections with a customer gateway. In normal cases, the VPN gateway communicates with the customer gateway through the active connection. If the active connection fails, traffic is automatically switched to the standby VPN connection. After the fault is rectified, traffic is switched back to the active VPN connection.

• For open APIs of Enterprise Edition VPN gateways, the master_eip and slave_eip fields are replaced with eip1 and eip2. During July 2023 to January 2024, the four fields coexist. For details, see Change History.

Commercial use

Connecting an On-premises Data Center to a VPC on the Cloud Through VPN (Active/Standby Mode)

1

User-defined bandwidth

The bandwidth can be adjusted when an EIP instance is created for an Enterprise Edition VPN gateway.

Commercial use

Creating a VPN Gateway

1

Increase or decrease in the connection quota for a yearly/monthly VPN gateway

The connection quota can be increased or decreased for yearly/monthly Enterprise Edition VPN gateways. The adjustment takes effect immediately.

Commercial use

Increasing or Decreasing the VPN Connection Group Quota of a Yearly/Monthly VPN Gateway

2

Gateway and connection traffic monitoring

Enterprise Edition VPN supports monitoring of network metrics (such as the packet receive rate and packet send rate) and connection metrics (such as the number of connections) on Cloud Eye.

Commercial use

Metrics

3

VPN gateway of the Basic specification

Enterprise Edition VPN gateways of the Basic specification are supported. Such a gateway supports a maximum bandwidth of 100 Mbit/s and 10 connection groups.

Commercial use

Differences Between Enterprise Edition VPN and Classic VPN

1

Private VPN gateways

Private Enterprise Edition VPN gateways are supported to encrypt traffic transmitted over Direct Connect connections, improving data transmission security.

Commercial use

Using VPN to Encrypt Data over Direct Connect Lines

2

Association with enterprise routers

• An Enterprise Edition VPN gateway can be associated with an enterprise router so that the on-premises data center can access multiple VPCs simultaneously.
• Enterprise Edition VPN gateways support backup between Direct Connect and VPN. When the Direct Connect connection fails, traffic is automatically switched to VPN connections, ensuring service continuity.

Commercial use

Allowing Direct Connect and VPN to Work in Active and Standby Mode to Link Data Center to Cloud

1

Enterprise VPN Commercial Use

• Supports tenant-exclusive gateways, dual connections, and active-active gateways to be deployed across AZs, ensuring high reliability.
• Supports the BGP route-based mode, and VPN hub function.
• Supports large-capacity gateways that offer up to 1 Gbit/s bandwidth and 50 subnets.

Commercial use

--

1

Enterprise VPN Open Beta Testing

• Supports tenant-exclusive gateways, dual connections, and active-active gateways to be deployed across AZs, ensuring high reliability.
• Supports the BGP route-based mode, and VPN hub function.
• Supports large-capacity gateways that offer up to 1 Gbit/s bandwidth and 50 subnets.

Open beta testing

--

1

The value of Remote Subnet can be 0.0.0.0/0.

The AF-Johannesburg region allows the value of Remote Subnet to be set to 0.0.0.0/0.

Commercial use

Buying a VPN Connection

1

Change between billing by traffic and by bandwidth.

• A pay-per-use VPN gateway billed by traffic can be changed to be billed by bandwidth.
• A pay-per-use VPN gateway billed by bandwidth can be changed to be billed by traffic.

Commercial use

Billing

1

Customer gateways

Customers gateways are under OBT in the AP-Singapore region.

A VPN consists of a VPN gateway, a customer gateway, and VPN connections.

• A VPN gateway is the egress router of a VPC. VPN connections use VPN gateways to securely connect your data center to your VPC. To support VPN access, you must buy an EIP when creating the VPN gateway.
• A customer gateway provides information to the cloud about your on-premises gateway device.
• A VPN connection is an encrypted tunnel that transmit data over the Internet and connects your data center or network to a VPC. Currently, VPN connections use the IPsec protocol.

Open beta testing

-