All Products
Search
Document Center

Express Connect:Create and manage a VBR-to-VPC connection

Last Updated:Aug 15, 2023

You can create a connection between a virtual border router (VBR) and a virtual private cloud (VPC). This topic describes how to create and manage a VBR-to-VPC connection.

Prerequisites

A VPC and a VBR are created. For more information, see Create and manage a VPC and Create and manage a VBR.

Create a VBR-to-VPC connection

  1. Log on to the Express Connect console.

  2. In the left-side navigation pane, choose VPC Peering Connections > VBR-to-VPC.

  3. On the VBR-to-VPC page, click Create Peering Connection.

  4. On the Establish VBR-VPC Interconnection page, configure the parameters.

    You can create VBR-to-VPC connections of the following types: same-account and intra-region, same-account and inter-region, cross-account and intra-region, and cross-account and inter-region.

    The following table describes the parameters that are required when you create different types of VBR-to-VPC connections.

    Parameter

    Description

    Resource Group

    Select the resource group to which the VBR belongs.

    Initiator Region

    Select the region where the initiator is deployed.

    Initiator VBR

    Select a VBR as the initiator from the drop-down list.

    Acceptor Region Type

    Specify whether the initiator and acceptor belong to the same region. Valid values:

    • Intra-Region: The acceptor and initiator belong to the same region.

    • Inter-Region: The acceptor and initiator belong to different regions.

      If you select Inter-Region, select the region where the acceptor is deployed from the Acceptor Region drop-down list.

    Acceptor Account Type

    Specify whether the initiator and acceptor belong to the same Alibaba Cloud account. Valid values:

    • Current Account: The acceptor and initiator belong to the same Alibaba Cloud account.

      After you initiate a connection request from the initiator, the system automatically establishes a connection. You do not need to accept the request on the acceptor.

    • Another Account: The acceptor and initiator belong to different Alibaba Cloud accounts.

      After you initiate a connection request from the initiator VBR, you can accept the request on the acceptor VPC to establish the VBR-to-VPC peering connection or reject the request to deny the connection.

      If you select Another Account, select the ID of the Alibaba Cloud account to which the VPC belongs from the Acceptor Account ID drop-down list.

    Note
    • By default, you cannot connect VBRs to instances that belong to a different account due to security requirements. If you want to connect VBRs to Cloud Enterprise Network (CEN) instances or VPCs that belong to a different account, you must provide a Proof of Affiliation to prove that the two Alibaba Cloud accounts belong to the same enterprise or entity. Send the Proof of Affiliation to your account manager to apply for the permissions.

      The following figure shows the format of the Proof of Affiliation:证明文件

    • If you select Another Account, you must grant the VBR permissions on the VPC that belongs to another account. After the permissions are granted to the VBR, you can select the UID of the Alibaba Cloud account to which the VPC belongs and the VPC. For more information, see Attach a VBR to a VPC that belongs to a different account.

    Acceptor VPC

    Select a VPC as the acceptor from the drop-down list.

    Tags

    • Tag Key: the key of a tag. You can select or enter a key. The tag key can be up to 64 characters in length. It cannot contain http:// or https:// and cannot start with acs: or aliyun.

    • Tag Value: the value of a tag. You can select or enter a value. The tag value can be up to 128 characters in length. It cannot contain http:// or https:// and cannot start with acs: or aliyun.

    You can also add tags to the VBR-to-VPC connection in the Tags column after you create the connection. After you add tags, you can modify, view, and delete the tags.

    Billing Method

    Select a billing method for the VBR-to-VPC connection. Only the Subscription, Pay-By-Bandwidth billing method is supported.

    Note

    This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.

    Select Bandwidth

    Specify the bandwidth of the VBR-to-VPC connection.

    You do not need to specify the bandwidth for the acceptor. The default bandwidth is used.

    Note

    This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.

    Subscription Duration

    Specify the subscription duration of the VBR-to-VPC connection.

    You can select Auto-renewal to allow the system to automatically renew the subscription of the VBR-to-VPC connection.

    Note

    This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.

    Coupon

    Select a coupon. You can also select Do Not Use Coupons.

    Note

    This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.

    Fee Details

    The bandwidth fee is automatically displayed in the Bandwidth Fee field.

  5. Read and select the Terms of Service and click OK.

    Note

    If the initiator or acceptor is deployed outside the Chinese mainland and the acceptor is deployed in the Chinese mainland or vice versa, the VBR-to-VPC connection is a cross-border connection. In this case, you must select the agreement for cross-border connections before you can create the VBR-to-VPC connection.

    After the VBR-to-VPC connection is established, the status of the initiator and the acceptor changes to Activated.

Configure routes

After the VBR-to-VPC connection is established, you must configure routes for the VBR and VPC.

  1. Log on to the Express Connect console.

  2. In the top navigation bar, select a region and choose VPC Peering Connections > VBR-to-VPC in the left-side navigation pane.

  3. On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and click Route Settings in the Route Settings column.

  4. In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the acceptor VPC and click OK.

    After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.

  5. Return to the VBR-to-VPC page. In the Acceptor column, click Route Settings.

  6. In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the initiator VBR and click OK.

    After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.

Delete a VBR-to-VPC connection

You can delete a VBR-to-VPC connection that is no longer needed. After you delete a VBR-to-VPC connection, you cannot restore it and your service may be interrupted. Proceed with caution.

  1. Log on to the Express Connect console.

  2. In the top navigation bar, select a region. Choose VPC Peering Connections > VBR-to-VPC in the left-side navigation pane.

  3. On the VBR-to-VPC page, find the pay-as-you-go VBR-to-VPC connection that you want to delete and choose 更多操作 > Delete or click Delete in the Actions column.

  4. In the dialog box that appears, click OK.

What to do next

Disable the initiator or acceptor

You can disable the initiator or the acceptor of a peering connection to stop data transfer. If you want to re-use the connection, you can re-enable the initiator or acceptor to transfer data.

Operation

Procedure

Disable the initiator or acceptor

  1. On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and choose 更多操作 > Suspend Initiator or 更多操作 > Suspend Acceptor in the Actions column.

  2. In the dialog box that appears, click OK.

Enable the initiator or acceptor

  1. On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and choose 更多操作 > Activate Initiator or 更多操作 > Activate Acceptor in the Actions column.

  2. In the dialog box that appears, click OK.

Manage a pay-as-you-go VBR-to-VPC connection

Operation

Description

Procedure

Upgrade

Upgrade the bandwidth of a VBR-to-VPC connection

  1. On the VBR-to-VPC page, find the pay-as-you-go VBR-to-VPC connection whose bandwidth you want to manage and click Upgrade in the Upgrade column.

  2. On the page that appears, modify Bandwidth, select the Terms of Service, and then click OK.

References

Related API operations

Related topics