ApsaraDB for MongoDB supports Virtual Private Cloud (VPC) and the classic network. We recommend that you use VPC because it is more secure.
VPC
VPC allows ApsaraDB for MongoDB to implement advanced network access control. VPC and IP address whitelists greatly improve the security of ApsaraDB for MongoDB instances.
A VPC allows you to build an isolated network environment in Alibaba Cloud. You can resolve resource conflicts by customizing route tables, IP addresses, and gateways in VPCs.
A VPC is a private network environment that completely isolates your network packets by using underlying network protocols. You can connect your data center to Alibaba Cloud by using a leased line or a VPN, and use the customized CIDR block of an ApsaraDB for MongoDB instance in a VPC to resolve resource conflicts. This way, you can access the ApsaraDB for MongoDB instance from both your data center and Alibaba Cloud Elastic Compute Service (ECS).
- Before you apply for a public IP address, you must configure the corresponding whitelist. For more information about how to configure a whitelist, see Configure a whitelist or an ECS security group for an ApsaraDB for MongoDB instance.
- For more information about how to apply for a public IP address, see Apply for a public endpoint for an ApsaraDB for MongoDB instance.
For more information about VPCs, see What is a VPC?
Classic network
Cloud services in the classic network are not isolated. Unauthorized access to cloud services is blocked only by security groups or whitelists. We recommend that you select VPC, which provides increased security.