Use scenarios of VPN Gateway - VPN Gateway - Alibaba Cloud Documentation Center

VPN Gateway supports various use scenarios. This topic provides an overview of use scenarios and provides references.

Best practices of IPsec-VPN connections

VPN gateway network type	Use scenarios	Best practices
Public	Enable communication between VPCs by using a VPN gateway	Enable communication between two VPCs by using an IPsec-VPN connection in dual-tunnel mode
	Data synchronization by using Data Transmission Service (DTS) over a VPN gateway	Synchronize data to a database in a VPC over a VPN gateway
	Establish IPsec-VPN connections between Alibaba Cloud VPN gateways and other cloud services	Connect Alibaba Cloud VPC to AWS VPC by using IPsec-VPN

VPN gateway network type	Use scenarios	Best practices
Public	Enable communication between VPCs by using a VPN gateway	Enable communication between VPCs
	Establish high-availability IPsec-VPN connections	Use two public IP addresses to create active/standby IPsec-VPN connections Use two customer gateways to implement high availability Use multiple VPN gateways to balance the loads of IPsec-VPN connections for high availability Configure active/standby connections by using IPsec-VPN and an Express Connect circuit
	Establish an IPsec-VPN connection between a data center and a classic network	Connect a data center to a classic network by using IPsec-VPN
	Use VPN Gateway together with other services	Configure active/standby connections by using IPsec-VPN and an Express Connect circuit Use IPsec-VPN and CEN to build a high-quality global network
	Connect multiple offices to each other and to a VPC	Connect multiple offices to each other and to a VPC
Private	Encrypt a private connection by using a private VPN gateway	Overview Encrypt private connections by using static routes Encrypt private connections by using static routing and BGP routing Encrypt private connections by using BGP routing

Note

In scenarios where an IPsec-VPN connection is associated with a transit router, the IPsec-VPN connection supports only the single-tunnel mode.

Network type of IPsec-VPN connections	Use scenarios	Best practices
Public	Establish high-availability IPsec-VPN connections	Configure active/standby connections by using IPsec-VPN (transit router associated) and an Express Connect circuit
Public	Establish high-availability IPsec-VPN connections	Create multiple IPsec-VPN connections over the Internet for load balancing
Private	Enable encrypted connections by using IPsec-VPN	Create multiple private IPsec-VPN connections to implement load balancing

Use scenarios	Best practices
Use two-factor authentication	Set up two-factor authentication for Windows clients Enable two-factor authentication for Linux clients Enable two-factor authentication for macOS clients Establish an SSL-VPN connection by using LDAP authentication
Establish SSL-VPN connections between clients and classic networks	Establish SSL-VPN connections to access resources in classic networks