Possible cause | Troubleshooting |
The EIP instance is not associated with a cloud resource. | Verify that the EIP instance is associated with the target cloud resource. Log on to the EIP console and check the IP Status column for the target EIP. If the status is Allocated, the EIP is associated with the target cloud resource. You can call the DescribeEipAddresses operation to check the status of the target EIP. The EIP is associated with a cloud resource if the Status parameter returns InUse.
|
The EIP instance has expired or has overdue payments. | Check if the EIP instance has overdue payments. Alibaba Cloud sends you notifications before and after a payment becomes overdue. To prevent service interruptions, promptly renew your instance or add funds to your account. |
Blocked by cloud security policies. | Check if the following cloud security policies are blocking traffic: DDoS blocking Anti-DDoS Origin Basic automatically sets a traffic scrubbing threshold based on the EIP's bandwidth. When traffic exceeds this threshold, traffic scrubbing begins, regardless of whether it is legitimate service traffic. If inbound traffic from the internet exceeds the DDoS protection capacity, the system redirects it to a black hole to protect the entire cluster. This blocks all incoming traffic. WAF blocking If you use Web Application Firewall (WAF) for your website and encounter access exceptions, see Website access exceptions for troubleshooting. Cloud Firewall blocking The internet firewall feature of Cloud Firewall helps you monitor traffic between the internet and your public IP assets. If you have enabled Cloud Firewall for the EIP, an access control policy may be blocking the traffic.
|
Blocked by security policies of the associated resource. | Check the security policies of the associated resource. For example, if the EIP is associated with an ECS instance, check the instance's iptables rules, system firewall policies, and third-party security software. Also, verify that the network interface driver is installed correctly. If the EIP is associated with other cloud resources, refer to the security policy documentation for that product. |
Blocked by an internet service provider (ISP). | You can use Problem Diagnosis to identify the region where access is abnormal. If traffic is blocked by an ISP, consider the following recommendations: Contact the ISP to confirm the reason for the block. Import the VPC flow logs from the elastic network interface of the EIP into Network Intelligence Service (NIS) to view public network performance and traffic data. If the issue is urgent, you can replace the EIP. First, disassociate the original EIP, and then associate a new EIP.
|