Platform For AI:Manage Lingjun VPDs

Lingjun VPD overview

The components are as follows:

• The virtual private router (VPR) is the central hub of a Lingjun VPD. It connects all Lingjun subnets within the VPD and serves as the gateway to other networks.

• When you create a Lingjun VPD, the system automatically creates a virtual private router and associates it with a system route table. Each Lingjun VPD has only one system route table, which you cannot create or delete manually.

• A subnet is a key component of a Lingjun VPD that connects Lingjun nodes. After you create a Lingjun VPD, you can divide it into one or more subnets. All subnets within the same Lingjun VPD can communicate with each other over the private network.

Create a Lingjun VPD

1. Log on to the Lingjun console.

2. In the left-side navigation pane, choose Network Resources > VPDs.

3. Click Create Lingjun network segment.

4. On the Create Lingjun network segment page, configure the Lingjun VPD parameters.

   1. Enter a Name and specify a Node IPv4 CIDR Block. We recommend that you use one of the standard private CIDR blocks listed in the following table for your Lingjun VPD and its subnets. For more information, see Cluster and group configuration.

      CIDR block	Available IPs
      192.168.0.0/16	65,532
      172.16.0.0/12	1,048,572
      10.0.0.0/8	16,777,212

      Important

      • You cannot use the 100.64.0.0/10, 224.0.0.0/4, 127.0.0.0/8, or 169.254.0.0/16 CIDR blocks for a Lingjun VPD.

      • Ensure the selected CIDR block does not overlap with other networks you plan to connect, such as other VPCs or on-premises data centers.

   2. In the Create Lingjun Subnet section, specify a Name, select a Zone, and configure other parameters for the Lingjun subnet.

   3. (Optional) Click Add to create another Lingjun subnet within the current Lingjun VPD.

5. Click OK to create the Lingjun VPD.

View Lingjun VPD information

1. In the left-side navigation pane, choose Network Resources > VPDs.

2. Search for the Lingjun VPD by its instance ID or instance name.

3. View information such as the instance ID/name, CIDR block, and Status. In the Actions column for the target Instance ID/Name, you can add Lingjun compute nodes or delete it.

4. Click the Instance ID/Name of the target Lingjun VPDto view its Basic Information and Lingjun Resources.

View route entries

1. On the Lingjun CIDRs page, click the Instance ID/Name of the target Lingjun VPD.

2. Click the Route Entry tab to view the route entries.

   Parameter	Description
   Destination CIDR block	The destination CIDR block for the route entry.
   Next hop type	The type of the next hop. Valid values: Lingjun VPD Lingjun connection Lingjun Hub
   Next hop instance	The instance ID of the next hop.
   Route type	The type of the route. Valid values: System route (SYSTEM): A route whose destination is the current Lingjun VPD. BGP route (BGP): A route that the Lingjun VPD learns automatically through the Border Gateway Protocol (BGP).
   Status	The status of the route entry.
   Last modified at	The time the route entry was last updated.

Associate Lingjun VPD with Lingjun Hub

1. In the left-side navigation pane, choose Network Resources > VPDs.

2. In the Bind Lingjun Hub column for the target Instance ID/Name, click .

3. On the Lingjun Hubs page, associate the target Lingjun VPD with a Lingjun Hub. For more information, see Manage a Lingjun Hub.

Authorize a cross-account Lingjun Hub

1. On the Lingjun CIDRs page, click the Instance ID/Name of the target Lingjun VPD.

2. Click the Lingjun Hub Cross-account Authorization tab to view authorization information.

3. Click Lingjun Hub Cross-account Authorization. In the dialog box that appears, enter the Alibaba Cloud account ID and the Lingjun Hub instance ID of the peer account.

   Important

   Granting this permission allows the peer account to attach your Lingjun VPD to its Lingjun Hub, which connects their network to yours. Proceed with caution.

Revoke cross-account authorization

1. Choose Network Resources > VPDs and click the ID of the target Lingjun VPD.

2. Click the Lingjun Hub cross-account authorization tab. Find the target authorization and click Cancel Authorization in the Actions column.

3. In the Cancel authorization dialog box, click OK.

Create a Lingjun subnet

Lingjun nodes must be deployed in a subnet and cannot be deployed directly in a Lingjun VPD. A Lingjun subnet's CIDR block must be a subset of the CIDR block of its parent Lingjun VPD. The system reserves the first IP address and the last three IP addresses of every Lingjun subnet.

For example, if the CIDR block of a Lingjun VPD is 192.168.0.0/16, its subnet CIDR blocks can range from 192.168.0.0/17 to 192.168.0.0/29. If the CIDR block of a Lingjun subnet is 192.168.1.0/24, the four reserved addresses are 192.168.1.0, 192.168.1.253, 192.168.1.254, and 192.168.1.255.

1. In the left-side navigation pane, choose Network Resources > Lingjun Subnets.

2. Click Create Lingjun Subnet.

3. On the Create Lingjun Subnet page, configure parameters such as the Name and VPD.

4. Click OK.

View Lingjun subnet information

1. In the left-side navigation pane, choose Network Resources > Lingjun Subnets.

2. Search for the Lingjun subnet by its instance ID or instance name.

3. View information such as the instance ID/name, Parent Lingjun VPD, and Status.

   Note

   A subnet whose Instance ID/Name ends with the OOB suffix is reserved for Cloud Parallel File Storage (CPFS). Each Lingjun VPD reserves two subnets for CPFS. For more information, see Network configuration.

4. Click the instance ID/name of a Lingjun subnet to view its Basic information and Lingjun resources.

Create a secondary CIDR block

If the primary CIDR block of a Lingjun VPD does not provide enough IP addresses for your needs, you can add a secondary CIDR block.

Limitations

• By default, each Alibaba Cloud account can create up to three secondary CIDR blocks in each region. To request a quota increase, see Manage quotas.

• A secondary CIDR block cannot start with 0, and its prefix length must be between /8 and /28.

• You cannot use 100.64.0.0/10, 224.0.0.0/4, 127.0.0.0/8, or 169.254.0.0/16 as a secondary CIDR block for a Lingjun VPD.

• A secondary IPv4 CIDR block cannot overlap with the primary IPv4 CIDR block or any other existing secondary IPv4 CIDR blocks. For example, if a Lingjun VPD has a primary IPv4 CIDR block of 192.168.0.0/16, you cannot add any of the following as a secondary IPv4 CIDR block:

  • A CIDR block identical to 192.168.0.0/16.

  • A CIDR block larger than 192.168.0.0/16, such as 192.168.0.0/8.

  • A CIDR block smaller than 192.168.0.0/16, such as 192.168.0.0/24.

Procedure

1. In the left-side navigation pane, choose Network Resources > VPDs.

2. In the top navigation bar, select the region where the target secondary CIDR block is located.

3. On the Lingjun CIDRs page, click the Instance ID/Name of the target Lingjun VPD.

4. On the instance details page of the target Lingjun VPD, click the CIDR block management tab.

5. Click Add Secondary CIDR Block.

6. In the Add Secondary CIDR Block dialog box, enter the secondary CIDR block and click OK.

Delete a secondary CIDR block

1. In the left-side navigation pane, choose Network Resources > VPDs.

2. In the top navigation bar, select the region where the target secondary CIDR block is located.

3. On the Lingjun CIDRs page, click the Instance ID/Name of the target Lingjun VPD.

4. On the instance details page of the target Lingjun VPD, click the CIDR block management tab.

5. Find the target secondary CIDR block and click Delete in the Actions column. Click OK in the confirmation dialog box.