A Virtual Private Cloud (VPC) is a private network dedicated to your Alibaba Cloud account. You have full control over your VPC, which you can define and customize by specifying the IP address range and configuring route tables and network gateways. You can also launch Alibaba Cloud resources such as Elastic Compute Service (ECS), Relational Database Service (RDS), and Server Load Balancer (SLB) in your own VPC.

Furthermore, you can connect your VPC to other VPCs or local networks to create a custom network environment. In this way, you can smoothly migrate applications to the cloud and extend on-premises data centers.



Each VPC consists of one VRouter, at least one private CIDR block, and one or more VSwitches.

VPC components
  • Private CIDR block

    When you create a VPC or a VSwitch, you must specify the private IP address range in the form of a CIDR block.

    You can use the standard private CIDR blocks listed in the following table and their subnets as CIDR blocks of your VPCs. For more information, see Plan a VPC network.

    CIDR block Number of available private IP addresses (excluding those reserved by the system) 65,532 1,048,572 16,777,212
  • VRouter

    A VRouter is a hub that connects all VSwitches in a VPC and serves as a gateway between the VPC and other networks. After a VPC is created, a VRouter is automatically created for the VPC. Each VRouter is associated with a route table.

    For more information, see Route table overview.

  • VSwitch

    A VSwitch is a basic network device that connects different cloud resources in a VPC. After you create a VPC, you can create one or more subnets in the VPC by creating VSwitches. The VSwitches within a VPC are interconnected. You can deploy your applications in VSwitches that belong to different zones to improve service availability.

    For more information, see Create a VSwitch.