This topic describes how to connect different virtual private clouds (VPCs) by using Cloud Enterprise Network (CEN) or VPN Gateway.

CEN

You can use CEN to establish private network connections between VPCs. CEN uses automatic routing and automatic learning to speed up network convergence. This improves the security and quality of cross-network connections and allows different VPCs to communicate with each other. For more information, see Cloud Enterprise Network.

You can use CEN to connect VPCs that belong to the same Alibaba Cloud account or different Alibaba Cloud accounts. The following table describes the scenarios.
Scenario Method
Connect VPCs that belong to the same Alibaba Cloud account Connect VPCs that belong to the same Alibaba Cloud account in the same region
Connect VPCs that belong to the same Alibaba Cloud account in different regions
Connect VPCs that belong to different Alibaba Cloud accounts Connect VPCs that belong to different Alibaba Cloud accounts in the same region
Connect VPCs that belong to different Alibaba Cloud accounts in different regions
CEN has the following benefits:
  • Worldwide connection

    CEN allows cloud resources that are deployed in different regions around the world to communicate with each other. CEN ensures that the IP addresses are unique and do not conflict with each other. In addition, CEN automatically forwards and learns multi-node routes through controllers to rapidly converge global routes.

  • Low latency and high speed

    CEN provides low-latency and high-speed network transmission. CEN ensures that on-premises networks communicate with each other at the highest data transfer rate supported by the device ports. CEN provides network connections with lower latency than Internet connections.

  • Nearest access and shortest path transmission

    CEN has deployed access points and nodes in more than 60 regions in the world to support nearest access to Alibaba Cloud. Compared with communication over the Internet, CEN connections provides lower network latency.

  • Standby connections and disaster recovery

    CEN provides at least four standby connections between two nodes. Therefore, CEN ensures high availability for your services. If some connections fail to work, the standby connections take over. This way, CEN ensures that your service is not interrupted and prevents network jitter.

  • Systematic management

    CEN can monitor networks in a systematic manner and automatically detects route conflicts that are caused by system changes. This ensures the stability of your services.

VPN Gateway

VPN Gateway is an Internet-based networking service that supports route-based IPsec-VPN connections. You can use IPsec-VPN connections to establish secure and reliable communication between VPCs. For more information, see Establish IPsec-VPN connections between two VPCs.

VPN Gateway has the following benefits:
  • High security

    VPN Gateway uses the IKE and IPsec protocols in data transmission to ensure data security.

  • High availability

    The active-active architecture enables VPN Gateway to perform failovers within seconds. This ensures that your service and session are not interrupted when errors occur.

  • Low cost

    VPN Gateway establishes encrypted connections over the Internet, which are more cost-efficient than leased lines.

  • Easy to use

    VPN Gateway supports an out-of-the-box feature and configurations immediately take effect.