ApsaraDB for MongoDB supports Virtual Private Cloud (VPC) and the classic network. We recommend that you use VPC because it is more secure.


VPC allows ApsaraDB for MongoDB to implement advanced network access control. VPC and IP address whitelists greatly improve the security of ApsaraDB for MongoDB instances.

A VPC allows you to build an isolated network environment in Alibaba Cloud. You can resolve resource conflicts by customizing route tables, IP addresses, and gateways in VPCs.

A VPC is a private network environment that completely isolates your network packets by using underlying network protocols. You can connect your data center to Alibaba Cloud by using a leased line or a VPN, and use the customized CIDR block of an ApsaraDB for MongoDB instance in a VPC to resolve resource conflicts. This way, you can access the ApsaraDB for MongoDB instance from both your data center and Alibaba Cloud Elastic Compute Service (ECS).

ApsaraDB for MongoDB instances deployed in a VPC can be accessed only by the ECS instances in the same VPC. If necessary, you can apply for a public IP address to allow access requests from the Internet (not recommended). For example, you can allow access requests from elastic IP addresses (EIPs) of ECS instances and the Internet egress of your data center.

For more information about VPCs, see What is a VPC?

Classic network

Cloud services in the classic network are not isolated. Unauthorized access to cloud services is blocked only by security groups or whitelists. We recommend that you select VPC, which provides increased security.