Cloud Enterprise Network:Access to cloud services

Limits

An on-premises network associated with a VBR can use a transit router to access only the cloud services that are deployed in the same region as the on-premises network.

For example, if cloud services are deployed in the China (Beijing) region, only on-premises networks connected to VBRs in the China (Beijing) region can access the cloud services.

Prerequisites

• A VPC in the region where the cloud services are deployed is connected to a transit router. For more information, see Create a VPC connection.

• The VBR or CCN instance associated with your on-premises network is connected to a transit router. For more information, see Connect VBRs or Associate a CCN instance with a transit router.

• The IP address or CIDR block of the cloud service is obtained. You can refer to the service documentation to obtain the IP address or CIDR block.

  For more information about the IP address or CIDR block of OSS, see Internal endpoints of OSS buckets and VIP ranges.

Enable access to a cloud service from an Enterprise Edition transit router

Enable access to a cloud service

1. Log on to the CEN console.
2. On the Instances page, click the ID of the CEN instance that you want to manage.

3. On the Basic Settings > Transit Router tab, click the ID of the transit router that resides in the region where the cloud service is deployed.

4. On the details page of the transit router, click the Route Table tab.

5. On the Route Table tab, click the ID of the route table that you want to manage in the left-side list. In the Route Table Details section, click the Route Entry tab, and then click Add Route Entry.

6. In the Add Route Entry dialog box, set the following parameters and click OK.

   Parameter	Description
   Route Table	The current route table is selected by default.
   Transit Router	The current transit router is selected by default.
   Name	Enter a name for the route.
   Destination CIDR	Enter the IP address or CIDR block that the cloud service uses to provide services. For example, OSS buckets in the China (Hangzhou) region use the CIDR block 100.118.28.0/24.
   Blackhole Route	Select whether to specify the route as a blackhole route. Valid values: Yes: specifies the route as a blackhole route. Traffic that matches the route is dropped. No: specifies that the route is not a blackhole route. In this case, you must specify the next hop of the route. No is selected in this example.
   Next Hop	Select the next hop type. Select the ID of the VPC connection on the transit router.
   Description	Enter a description for the route entry.

   Important

   If the cloud service uses more than one IP address or CIDR block, repeat this step to add all the IP addresses or CIDR blocks of the cloud service.

Disable access to a cloud service

1. Log on to the CEN console.
2. On the Instances page, click the ID of the CEN instance that you want to manage.

3. On the Basic Settings > Transit Router tab, click the ID of the transit router that resides in the region where the cloud service is deployed.

4. On the details page of the transit router, click the Route Table tab.

5. On the Route Table tab, click the route table that you want to manage in the left-side list. In the Route Table Details section, click the Route Entry tab and find the route to the cloud service.

6. Then, click Delete in the Actions column. In the Delete Route Entry message, click OK.

Enable access to a cloud service from a Basic Edition transit router

Enable access to a cloud service

1. Log on to the CEN console.
2. On the Instances page, click the ID of the CEN instance that you want to manage.

3. On the Basic Settings > Transit Router tab, click the ID of the transit router that resides in the region where the cloud service is deployed.

4. On the details page of the transit router, click the Cloud Services tab.

5. On the Cloud Services tab, click Configure AnyTunnel.

6. In the Configure AnyTunnel dialog box, configure the parameters and click OK. The following table describes the parameters.

   Parameter	Description
   Service IP Address	Enter the IP address or CIDR block that the cloud service uses to provide services, for example, 100.118.28.0/24.
   Service Region	Select the region where the cloud service is deployed.
   Service VPC	Select the VPC that is connected to the transit router.
   Access Region	Select the region where the VBR or CCN instance that needs to access the cloud service is deployed.
   Description	Enter a description for the cloud service.

   Important

   If the cloud service uses more than one IP address or CIDR block, repeat this step to add all the IP addresses or CIDR blocks of the cloud service.

Disable access to a cloud service

1. Log on to the CEN console.
2. On the Instances page, click the ID of the CEN instance that you want to manage.

3. On the Basic Settings > Transit Router tab, click the ID of the transit router that resides in the region where the cloud service is deployed.

4. On the details page of the transit router, click the Cloud Services tab.

5. On the Cloud Services tab, find the cloud service that you want to manage and click Delete in the Actions column.

6. In the Delete Route Service message, click OK.