All Products
Search
Document Center

VPN Gateway:Modify the specifications of a VPN Gateway instance

Last Updated:Aug 13, 2025

To modify the bandwidth or features of a VPN Gateway instance, you can upgrade or downgrade the instance.

Upgrade

Item

Description

Scenarios

Upgrade a VPN Gateway instance to increase its specifications immediately.

Upgrade features

You can increase the bandwidth of a VPN Gateway instance.

Note

To enable the IPsec-VPN or SSL-VPN feature, or to increase the maximum number of SSL-VPN connections, see the following topics:

Upgrade limits

  • If the bandwidth of a VPN Gateway instance is 200 Mbps or less, you cannot upgrade it to 500 Mbps or 1000 Mbps. If the bandwidth is 500 Mbps, you can only upgrade it to 1000 Mbps.

    Note

    For VPN Gateway instances that support dual-tunnel IPsec-VPN connections, you can contact your account manager to request the removal of bandwidth upgrade limits.

  • The upgrade process does not affect your services.

Effective period

After you upgrade a VPN Gateway instance, the new specifications take effect immediately and are valid until the instance expires.

The new specifications may take a few minutes to take effect due to network latency.

Billing impact

After you submit the specification change order, the system starts billing based on the new configuration. For more information, see Billing.

  1. Log on to the VPN Gateway console.

  2. In the top menu bar, select the region of the VPN gateway.

  3. On the VPN Gateways page, find the target VPN Gateway instance and click Upgrade in the Bandwidth column.

  4. On the VPN Gateway | Upgrade/Downgrade page, change the Maximum Bandwidth of the VPN Gateway instance.

  5. In the Service Agreement section, read and select the service agreement, and then click Buy Now and complete the payment.

Downgrade

Item

Description

Scenarios

Downgrade a VPN Gateway instance to decrease its specifications immediately.

Downgrade features

  • You can decrease the bandwidth of a VPN Gateway instance.

  • You can disable the IPsec-VPN and SSL-VPN features for a VPN Gateway instance.

  • You can decrease the maximum number of SSL-VPN connections for a VPN Gateway instance.

Downgrade limits

  • When you downgrade, to disable the IPsec-VPN feature, make sure that no IPsec-VPN connections exist for the VPN Gateway instance. To delete an IPsec-VPN connection, see Delete an IPsec-VPN connection.

  • When you downgrade, to disable the SSL-VPN feature, make sure that no SSL servers or IPsec servers exist for the VPN Gateway instance. To delete SSL servers and IPsec servers, see Delete an SSL server and Delete an IPsec server.

  • If the bandwidth of a VPN Gateway instance is 1000 Mbps, you can only downgrade it to 500 Mbps. If the bandwidth is 500 Mbps, you cannot downgrade it.

    Note

    For VPN Gateway instances that support dual-tunnel IPsec-VPN connections, you can contact your account manager to request the removal of bandwidth downgrade limits.

  • During a bandwidth downgrade, if the traffic transmitted through the VPN Gateway instance exceeds the new bandwidth specification, connections may be interrupted. We recommend that your backend applications have a reconnection mechanism.

  • When you decrease the maximum number of SSL-VPN connections, if the number of connected clients exceeds the new specification, connections may be interrupted. We recommend that your backend applications have a reconnection mechanism.

Effective period

After you downgrade a VPN Gateway instance, the new specifications take effect immediately and are valid until the instance expires.

The new specifications may take a few minutes to take effect due to network latency.

Billing impact

After you submit a downgrade order, the system starts billing based on the new configuration. For more information, see Billing.

  1. Log on to the VPN Gateway console.

  2. In the top menu bar, select the region of the VPN gateway.

  3. On the VPN Gateways page, find the target VPN Gateway instance and click Downgrade in the Bandwidth column.

  4. On the VPN Gateway | Downgrade page, change the configuration of the VPN Gateway instance.

    You can decrease the maximum bandwidth, disable the IPsec-VPN or SSL-VPN feature, or decrease the maximum number of SSL-VPN connections for the VPN Gateway instance.

  5. In the Service Agreement section, read and select the service agreement, and then click Buy Now and complete the payment.