This topic describes Alibaba Cloud Virtual Private Clouds (VPCs) and VSwitches (indicated as subnets in this topic). You can create multiple VSwitches to divide a VPC into multiple subnets. By default, VSwitches in a VPC are connected through the intranet.
VPC and subnets
VPC is a virtual cloud network dedicated to you. You can deploy cloud products in your VPC.
CIDR blocks and IP addresses
VPCs support both IPv4 and IPv6 addressing protocols. By default, each VPC uses the IPv4 addressing protocol. However, you can enable the IPv6 addressing protocol as needed.
VPCs can operate in dual-stack mode, whereby resources in a VPC can communicate through IPv4 or IPv6 addresses. However, when you configure routes and security groups for IP addresses, you need to set the routes and security groups for IPv4 addresses and IPv6 addresses separately in a VPC.
|IPv4 VPC||IPv6 VPC|
|32 bits, 4 groups. Each group consists of up to 3 numbers.||128 bits, 8 groups, each group consists of 4 hexadecimal numbers.|
|The IPv4 address protocol is enabled by default.||You can select to enable the IPv6 address protocol.|
|The size of the VPC CIDR block can range from /8 to /24.||The size of the VPC CIDR block is /56.|
|The size of the VSwitch CIDR block can range from /16 to /29.||The size of the VSwitch CIDR block is /64.|
|You can select the IPv4 CIDR block to use.||You cannot select the IPv6 CIDR block to use. The system allocates an IPv6 CIDR block from the IPv6 address pool to your VPC.|
|All types of instances support the IPv4 protocol.||Some types of instances do not support the IPv6 protocol.
For more information, see Instance type families.
|Configuring ClassicLink is supported.||Configuring ClassicLink is not supported.|
|Configuring elastic IPv4 addresses is supported.||Configuring elastic IPv6 addresses is not supported.|
|Configuring VPN Gateway and NAT Gateway is supported.||Configuring VPN Gateway or NAT Gateway is not supported.|
By default, both IPv4 and IPv6 addresses of VPC only support intranet communication, which means products under different VSwitches in a VPC can only communicate with each other through the intranet. To connect a VPC to another VPC or an on-premises data center, you need to configure a Smart Access Gateway, Express Connect, a VPN Gateway or another related product to achieve communication. For more information, see Connect an on-premises data center.
IPv4 Internet communication
You can associate an EIP or NAT Gateway so that ECS instances in a VPC can communicate through the Internet by using IPv4 addresses.
IPv6 Internet communication
You need to purchase an Internet bandwidth for the IPv6 address used for communication with the Internet. Then, you can configure an egress-only rule for the IPv6 address, so that cloud products in the VPC can only access the Internet by using the IPv6 address, and IPv6 clients can actively establish connections with other cloud products in the VPC.
Route tables implements the longest prefix match algorithm. Therefore, when multiple IP addresses match the destination IP address, the IP address with the longest mask is selected as the next hop. You can also add a custom route entry to route the traffic to the specified IP address. For more information, see Add a custom route entry.