All Products
Search
Document Center

VPN Gateway:New features for IPsec-VPN connections bound to a Transit Router

Last Updated:Jun 22, 2026

New features

IPsec-VPN connections bound to a Transit Router (TR) now include the following new features:

  1. You can now configure multiple encryption algorithms, authentication algorithms, and DH groups simultaneously. Alibaba Cloud VPN automatically handles algorithm negotiation when you create an IPsec tunnel.

  2. This update adds two new encryption algorithms (AES128-GCM16 and AES256-GCM16) and ten new DH groups (15 to 24) for greater security and performance flexibility.

  3. In traffic selector mode, the maximum number of configurable local and remote networks is now 10, up from 5.

  4. You can now select a 3 Gbps tunnel bandwidth, in addition to the existing 1 Gbps option. Pricing varies by bandwidth. For details, see Billing.

Limitations

This feature is in beta. IPsec-VPN connections are free of charge during the beta period. To join, contact an Alibaba Cloud engineer to enable this feature for your account.

Available regions

  • Supported regions: Malaysia (Kuala Lumpur), UK (London), China (Chengdu), US (Virginia), US (Silicon Valley), China (Hong Kong), and Singapore.

  • More regions will be added. Check this page for updates.

Get started

For details, see ipsec-vpn connection (bound to TR).