A dedicated Express Connect circuit provides a private, secure, and high-performance connection to the cloud. Deployment typically takes one to three months. We recommend planning your budget and connection strategy in advance.
Provisioning workflow
Provisioning a physical connection requires coordination between you, Alibaba Cloud, your provider, and the colocation facility operator. The following diagram shows the workflow:
After you a**** for a physical port, you can track the status and instructions for each step in the Construction Procedure column for the target physical port in the Express Connect console.
Step 1: Choose an access point
An access point is a physical location where Alibaba Cloud provides Express Connect services. Each access point is equipped with redundant devices, allowing you to connect your on-premises data center to the Alibaba Cloud network over a physical connection. Each region contains one or more access points. For a complete list, see Access point addresses.
Factor | Description |
Proximity | Choose the access point geographically closest to your on-premises data center to minimize latency. The available providers and bandwidth options vary by access point. |
Provider | Select a provider that operates in your region. Supported providers include China Unicom, China Telecom, China Mobile, and some local providers. If you select China Unicom, China Telecom, or China Mobile, you must use their own physical connections. Connections from other providers and dark fiber are not supported. |
Port requirements | Express Connect uses fiber-optic ports. The following port types are supported: 100GE single-mode optical port, 40GE single-mode optical port, GE single-mode optical port, and 10GE single-mode optical port.
You can check port availability in the next step when you apply for a physical port. For example, when you apply in classic mode, the console displays the port availability for each port type after you select a region, provider for physical connection, and access point.
For connections that require a bandwidth of more than 10 Gbps, contact your account manager. |
Step 2: Apply for a physical port
A physical port is a network interface that Alibaba Cloud provisions at the access point facility. After your provider installs the physical connection to the Alibaba Cloud facility, a patch cable is used to connect it to this port, completing the physical link. If this is your first application, you must first activate outbound data transfer billing as prompted in the console.
Multiple application modes are available:
High Reliability Mode
High reliability mode provides automatic traffic failover through redundant physical connections. For details about the service level agreement (SLA), see the Express Connect Service Level Agreement.
CloudBox scenarios do not support high reliability mode.
Go to the Physical Ports page in the Express Connect console. Click Create Physical Connection, set Select Access Point Mode to High Reliability Mode, and select a Combination Type.
Combination type
Description
Diagram
Optimal Disaster Recovery
This option connects four physical connections to two Alibaba Cloud access points, with two connections per access point. This provides the highest level of protection against both single-device and single-site failures.
Powerful Disaster Recovery
This option connects two physical connections to two Alibaba Cloud access points, with one connection per access point. This provides strong protection against both single-device and single-site failures.
Development and Testing
This option connects two physical connections to a single Alibaba Cloud access point. This provides device-level failover but does not provide site-level redundancy.
Load Balancing for Large Bandwidth
This option connects multiple physical connections to a single Alibaba Cloud access point. These connections are used for load balancing to increase the aggregate forwarding bandwidth.
To use the load balancing for large bandwidth feature, contact your account manager to request permissions.
ImportantBy default, you can create up to two physical connections at a single access point (quota ID: ec_quota_pconn_count_per_ap). You can request a quota increase.
If you order multiple ports at a time and the creation of any port fails, the entire order fails.
Configure Connection:
Port Type: The supported types are GE single-mode optical port and 10GE single-mode optical port.
Advanced Configurations: You can enable features such as VBR Bandwidth Limits, IPv6, BFD, MPBGP, MPBGP, QOS, VBR-HA, and Failover Group. If the underlying resources do not have ports that support the selected advanced features, the creation will fail.
Select Access Point: Select your target Region, ISP, and Access Point. For a complete list of access points, see Access point addresses.
Review Configuration: After you confirm the configuration, select I have read and understand the billing rules and click Submit.
Classic Mode
This mode lets you select access point resources for the physical connection from a drop-down list. This mode is suitable for users who have specific requirements for access points.
Go to the Physical Ports page in the Express Connect console. Click Create Physical Connection and set Select Access Point Mode to Classic Mode.
Parameter
Description
Region
The region where your Alibaba Cloud resources are located.
Provider for physical connection
The provider of the physical connection. The available access points vary based on the provider.
NoteIf you select China Unicom, China Telecom, or China Mobile, you must use their own physical connections. Connections from other providers and dark fiber are not supported.
Access point
Select the access point that is closest to your on-premises IDC. For more information about how to select an access point, see Access point addresses.
CloudBox device cluster name
Select a CloudBox device cluster.
To purchase a physical port for CloudBox, contact your account manager to request permissions.
Port type
You can select 100GE single-mode optical port, 40GE single-mode optical port, GE single-mode optical port, or 10GE single-mode optical port.
Advanced configuration
Click Advanced Configuration. You can select VBR Bandwidth Limits, IPv6, BFD, MPBGP, MPBGP-v6, QOS, and VBR-HA.
If the backend resources do not have ports with the advanced capabilities that you select, the creation fails.
Select the billing rule and click OK.
NoteAfter the physical connection is installed and the payment is complete, the Port Status of the physical port changes to Up. Before the payment, the Port Status is Down.
Recommend Mode
The system calculates latency based on the zone where your cloud resources are located and recommends the optimal access point. This mode is suitable for latency-sensitive services.
Latency data is for reference only. Actual latency may vary. We recommend that you perform your own tests.
Log on to the Express Connect console, click Apply for Physical Port, and select recommended mode.
NoteThe latency data is for reference only. Actual latency may vary. We recommend that you perform your own tests.
Parameter
Description
Access point selection method
Select an access point in one of the following ways:
System recommended: The system calculates the latency from each access point in the specified region to a specified zone in that region. By default, the system recommends the access point with the lowest latency.
Manual selection: After you select the region of the access point, the system calculates the average latency from each access point to each zone in that region. The results are displayed on a visualization dashboard.
Region of cloud resources
Select the region where your Alibaba Cloud resources are located.
NoteThis parameter is available only when you set Access point selection method to System recommended.
Zone of cloud resources
Select the zone where your Alibaba Cloud resources are located.
NoteThis parameter takes effect only when you set Access point selection method to System Recommended.
Select access point
Based on the specified region and zone of your resources, the system calculates the latency from each access point to the specified zone. The access points are sorted by latency in ascending order, and the one with the lowest latency is selected by default. You can select an access point that meets your latency requirements.
NoteThis parameter is available only when you set Access point selection method to System recommended.
In the access point latency list, click the icon in the Trend column to view historical latency data for a specified or custom time range.
Latency dashboard
After you select the region of the access point, the system calculates the average latency from each access point to each zone in that region.
In the right-side pane, you can enable Show Latency, click to select a suitable access point, and view the Information about the selected access point.
NoteThis parameter is available only when you set Access point selection method to Manual selection.
In the access point latency list, click the icon in the Trend column to view historical latency data for a specified or custom time range.
Port type
You can select 100GE single-mode optical port, 40GE single-mode optical port, GE single-mode optical port, or 10GE single-mode optical port.
Advanced configuration
Click Advanced Configuration. You can select VBR Bandwidth Limits, IPv6, BFD, MPBGP, MPBGP-v6, QOS, and VBR-HA.
If the backend resources do not have ports with the advanced capabilities that you select, the creation fails.
Resource group
Resource group: Select an existing resource group to manage physical ports by group.
Tag key
Tag key and value: Select existing tag keys and tag values, or enter new tag keys and tag values. You can bind specific tags to physical port instances for categorized management.
Tag value
Select the billing rule and click OK.
After the physical connection is installed and the payment is complete, the Port Status of the physical port changes to Up. Before the payment, the Port Status is Down.
Step 3: Apply for and download the LOA
A Letter of Authorization (LOA) grants construction personnel access to the Alibaba Cloud colocation facility for physical connection installation. Personnel must present the LOA to enter the facility. After creating a physical port, you must apply for an LOA for each physical port.
Apply for an LOA: After applying for an LOA, Alibaba Cloud reviews the application within two business days. After the application is approved, Alibaba Cloud matches and racks the optical module for on-site installation.
NoteIf you need to re-enter the facility for circuit adjustments or other changes, you can submit another LOA application.
The processing times for LOA applications, facility access, and installation may be affected by public holidays and network freeze policies. For example, dates affected by network freezes are grayed out and cannot be selected.
On the Physical Connection page, find the port and click Apply for LOA.
In the Apply For LOA panel, enter the following information and click OK.
Parameter
Description
Company Name
For a corporate account, enter the company name specified when the Alibaba Cloud account was created.
For an individual account, enter the name of the Alibaba Cloud account owner.
Construction Company That Enters Data Centers of Alibaba Cloud
The name of the construction company, typically the connectivity provider or IDC operator.
Leased Line Type
You can select MSTP, MPLSVPN, Fiber Connection, or Others.
Construction Schedule
The time when the construction company will enter the data center.
Customer Data Center Location
The location of the data center.
Leased Line Bandwidth
Enter the bandwidth value specified in your Express Connect circuit contract.
NoteThe bandwidth value here is only used as a reference for Alibaba Cloud service configuration. Your actual fees and bandwidth limit are based on the contract you signed with the carrier. Please fill in the actual contract bandwidth.
Add Field Engineer
Click Add Field Engineer to add information about the personnel who need to enter the Alibaba Cloud data center for construction. You can specify one or more field engineers.
ImportantThe field engineer information is required.
After you apply for an LOA, the LOA Status of the instance becomes LOA Being Applied. After the Alibaba Cloud reviewer approves the application within two business days, the LOA Status changes to LOA Approved.
Receive a text message notification and perform the following steps:
NoteYou can skip this step if your access point is a third-party data center access point, or an access point in China (Hong Kong) or an international data center.
Obtain an entry credential: Click the entry credential link in the text message and log on to the entry application platform. Select the data center information and Confirm Visit, then click Entry Credential to obtain the entry QR code.
Complete your personal information:
Copy the text message link to a computer browser and access the link. Read and agree to the privacy protection statement and the Alibaba Cloud data center entry agreement.
Fill in your personal information and click Submit Information. When the page displays Submitted Successfully, you can close the browser window.
Download the LOA: After the application is approved, you can download the LOA to get detailed information about the access point and facility. The following procedure depends on whether the access point is at a third-party facility:
If the access point is at a third-party facility, the provider uses the LOA to contact the on-site engineer and enter the facility for a site survey.
If it is an Alibaba Cloud facility, Alibaba Cloud sends an SMS. The provider then obtains and scans a QR code to enter the facility for a site survey or installation.
Step 4: Circuit construction
The construction process for physical connections varies based on the network topology. The following sections provide examples of two common network topologies. For details specific to your scenario, consult your provider.
The location of your on-premises IDC relative to the Alibaba Cloud access point determines the topology:
In different facilities
In the same facility
Construction steps:
Provider site survey: Alibaba Cloud assists the site survey personnel in completing the on-site inspection within two business days. Contact your provider to confirm the end-to-end costs. For more information about pricing, see Billing overview.
NoteChinese mainland: You must apply for access to the Alibaba Cloud cage within the facility to perform a site survey.
Outside the Chinese mainland: The construction team only needs to request access to the provider's Meet-Me Room from the facility operator. Access to the Alibaba Cloud cage is not required.
Key items to verify during the site survey:
Equipment specifications
Confirm the specifications of the optical modules, including the transmission rate, wavelength, and transmission distance.
Clarify the cable type and interface specifications, including single-mode fiber (SMF), multi-mode fiber (MMF), and interface types such as LC-LC.
Physical cabling plan
Identify the specific rack location for cable termination.
Confirm the cable and routing paths.
Verify the actual cable installation distance and related parameters.
Safety measures: Confirm whether the facility requires anti-static measures, such as wearing an ESD wrist strap.
Procedural compliance: Confirm whether the facility has special operating procedures.
On-site installation: The provider's construction personnel connect the physical connection to the equipment outside the cage according to the site survey plan.
Purchase in-building patch cable: The colocation facility operator orders the in-building patch cable. You must pay the rental fee for the in-building cable to the facility operator.
In-facility cabling by provider:
In-facility cabling includes equipment deployment and configuration, laying fiber optic cables, cross-connecting, testing optical power, and network connectivity, bandwidth, and SLA testing. This process ensures the high reliability of the physical connection and covers the full lifecycle from physical deployment and link validation to compliance management and operational assurance.
After the installation is complete, obtain the physical connection test report from the construction team, and contact your provider to get the provider's circuit ID, in-building cable labels, or patch panel port information.
Confirm Delivery: You click Confirm Delivery in the console. The Alibaba Cloud on-site engineer connects the physical connection to the designated physical port in the Alibaba Cloud facility, completing the patch cable installation.
It takes up to two business days to lay the patch cables and connect to the physical port in facilities within the Chinese mainland, and up to three business days in facilities outside the Chinese mainland.
Pay port resource usage fee: After the patch cable installation is complete, you must pay the port resource usage fee in the Express Connect console. When the instance status changes to Available, the physical connection is activated.
Step 5: Connect to your VPC
After the physical port is activated, you can create a Virtual Border Router (VBR) on the physical port. Then, use an Express Connect Router (ECR) and a Transit Router (TR) to connect your on-premises IDC to your cloud VPC. For detailed steps, see Connect an on-premises IDC to the cloud over active/standby physical connections by using ECR.
Manage physical connections
Modify circuit O&M information
Log on to the Express Connect console and select the region of the target instance.
In the Actions column of the target instance, click
> Line O&M, modify the following parameters, and click OK.Parameter
Description
Carrier
The name of the carrier.
Carrier's leased line ID/In-building cabling ID
Contact your carrier or circuit provider to obtain this information.
ODF port information
Carrier's circuit O&M contact
The carrier's circuit O&M contact information.
Upgrade a physical connection port
Upgrading the port specification involves data migration and adjustment, which deletes the VBR instances on the original physical connection and interrupts services. Back up your services in advance.
Apply for a physical connection port with a higher specification.
Migrate the configuration from the original physical connection instance to the new port and adjust the configuration as needed.
On the new physical connection, create VBR, ECR, and TR instances, and then configure BGP. For detailed steps, see Connect an on-premises IDC to the cloud over active/standby physical connections by using an ECR.
Delete a physical port instance
Before you delete a physical port instance, ensure that you have deleted its associated VBR instances and shared ports.
You can delete a physical port instance only when its status is LOA Application Rejected, Port Assigned, Pending Payment, Canceled, Terminated, or Resource Allocation Failed. You can view the status in the PortStatus column of the target port instance.
ImportantTo terminate a dedicated physical port instance, you can click
> Terminate in the Actions column. Billing continues after termination. For more information, see Port resource usage fee and Renewal management. If you no longer need the instance, you can unsubscribe from it to release its resources.
Log on to the Express Connect console and select the region of the target instance.
Find the target physical port instance, click Delete in the Actions column, then click OK.
Related APIs
CreateHighReliablePhysicalConnection: Creates a physical connection in high-reliability mode.
CreatePhysicalConnection: Creates a request for a physical connection.
ApplyPhysicalConnectionLOA: Applies for an LOA.
CompletePhysicalConnectionLOA: Reports that the construction of a physical connection is complete.
CreatePhysicalConnectionOccupancyOrder: Creates an occupancy order for a physical connection.
ConfirmPhysicalConnection: Confirms that a physical connection is in the available state.
EnablePhysicalConnection: Enables a physical connection.
ModifyPhysicalConnectionAttribute: Modifies the configuration of a physical connection.
DescribePhysicalConnections: Queries physical connections in a specified region.
CancelPhysicalConnection: Cancels physical connection access before the physical connection is enabled.
TerminatePhysicalConnection: Terminates a physical connection.
DeletePhysicalConnection: Deletes a physical connection.
FAQ
Issues connecting an on-premises IDC to a VPC: See Troubleshooting.
Common issues during physical connection installation: See Physical connection installation.
Common issues with dedicated connections: See Dedicated connections.
To test the speed of a physical connection, see How to test the network performance of a physical connection.