ApsaraDB RDS supports two network types: virtual private cloud (VPC) and classic network. This page answers common questions about choosing between them, switching network types, and moving an instance to a different VPC.
What network types does ApsaraDB RDS support? What are the differences?
ApsaraDB RDS supports two network types:
-
VPC: Each VPC is an isolated virtual network with higher security than the classic network. All RDS instances support VPC. Within a VPC, you can configure route tables, CIDR blocks, and gateways. To extend your on-premises data center into the cloud, connect it to a VPC over a leased line or VPN. For more information, see What is a VPC?
-
Classic network: RDS instances on the classic network are not isolated at the network level. Access control relies solely on IP address whitelists or security groups. Only RDS instances that use Premium Local SSDs support the classic network.
Use VPC to enhance security for your RDS instance.
The following table compares the two network types.
| Feature | VPC | Classic network |
|---|---|---|
| Layer 2 logical isolation | Supported | Not supported |
| Custom private CIDR block | Supported | Not supported |
| Private IP address planning | Unique within a single VPC; duplicates allowed across VPCs | Must be unique across the classic network |
| Instance communication | Instances in the same VPC can communicate; different VPCs are isolated | Instances in the same region and account can communicate |
| Tunneling | Supported | Not supported |
| Custom router | Supported | Not supported |
| Route table | Supported | Not supported |
| vSwitch | Supported | Not supported |
| Software-Defined Networking (SDN) | Supported | Not supported |
| Self-managed NAT gateway | Supported | Not supported |
| Self-managed VPN | Supported | Not supported |
Can I change the network type of an RDS instance? What is the impact?
You can change a classic network instance to VPC, but not the reverse. For instructions and a description of the impact, see Change the network type.
How do I change the VPC for an RDS instance?
It depends on whether your instance supports a direct VPC or vSwitch change:
-
If direct change is supported: Change the VPC directly in the console. See the instructions for your database engine:
-
If direct change is not supported: Purchase a new RDS instance in the target VPC, then migrate your data from the original instance. See the migration guide for your database engine: