Virtual Private Cloud

A virtual private cloud service that provides an isolated cloud network to operate resources in a secure environment.

VPC helps you build an isolated network environment based on Alibaba Cloud including customizing the IP address range, network segment, route table, and gateway. In addition, you can connect VPC and a traditional IDC through a leased line, VPN, or GRE to provide hybrid cloud services.

Benefits

Secure Isolation
Builds an isolated network environment based on Alibaba Cloud. Layer-2 logical isolation is achieved between different VPC instances.
Flexibility
SDN configures the network as required, customizes the IP address range and route table.
Scalability
Works with multiple products and easily manages Internet portals to provide a hybrid cloud architecture.
Free of Charge
Achieve a fully isolated VPC environment for free on the Alibaba Cloud platform.

Features

  • Layer-2 logical isolation

    Builds an isolated network environment based on Alibaba Cloud. Layer-2 logical isolation is achieved between different VPC instances.


    Virtual networks are built on a physical network based on the OverLay technology.

    Network virtualization


    VPC instances are isolated using Vxlan. Layer-2 logical isolation is achieved between different VPC instances to prevent them from communication.

    Full isolation among VPC instances

  • Custom network environment

    You can customize the IP address range, network segment, route table, and gateway. You can also plan and manage the network as needed.


    Subnet division

    You can divide the private IP address of VPC into one or several subnets using VSwitches and deploy applications and other services under the corresponding VSwitch as needed.


    Custom route rules

    The route rules of VRouters are configured based on business needs to manage the forwarding routes of VPC traffic.

  • Access control

    Flexible access control rules are compliant with the secure isolation regulations for government and financial users


    Security group

    With the help of the security group function, product instances in VPC can be classified into different security domains and each security domain can have custom access control rules.


    RAM

    RAM can be used to manage network permissions.

  • Internet portal management

    Meets the requirement for VPC resources to actively access the Internet and provide external services.


    Internet access

    EIPs can be bound to cloud product instances of the VPC type in the same region as needed to allow the instances to access the Internet.


    Internet portal management

    NAT Gateway supports SNAT configuration to meet the needs of VPC resources to actively access the Internet. It also supports DNAT configuration and provides IP address mapping, port mapping, and 10 Gbit/s forwarding capabilities to enable multiple services to share the bandwidth so as to save costs.

  • Hybrid cloud architecture

    VPC can be connected to a traditional IDC through leased lines or VPN to build a hybrid cloud.


    VPC intranet communication

    Express Connect can be used to establish an intranet connection between VPC instances in different regions and of different users, to achieve interconnection of user networks on Alibaba Cloud.


    Hybrid cloud architecture

    Through leased lines, VPC can communicate with intranets of an IDC with excellent communication quality to easily build a hybrid cloud.

Common Scenarios

  • On-cloud Intranet
  • Hybrid Cloud Architecture
  • External Service Provision
  • Proactive Internet Access
  • Multi-region High-speed Interconnection
On-cloud Intranet

On-cloud Intranet

Fully isolated network environment

The service system can be deployed in both local and on-cloud IDCs. Different service modules are built on Alibaba Cloud VPC to create fully isolated on-cloud environments. On-cloud and off-cloud services are interacted with each other through the Internet.

Advantages

  • Flexible Configuration

    VPC is an SDN that enables you to customize network settings as required. Management operations take effect in real time.

  • Secure Isolation

    VPC instances of different users are fully isolated from each other and do not share the Internet.

Hybrid Cloud Architecture

Hybrid Cloud Architecture

High-speed data interconnection on and off the cloud

An on-cloud IDC is built on Alibaba Cloud VPC and connected to the off-cloud IDC over a leased line. This protects the user's core data, perfectly copes with service surges and fast data synchronization, and implements a hybrid cloud solution.

Advantages

  • Enhanced Data Security

    Core data is stored in the off-cloud IDC to ensure security.

  • Service Surge Protection

    The on-cloud IDC is used to handle surge of real-time service access.

  • Fast Data Synchronization

    By using leased lines, on-cloud and off-cloud data can be fast synchronized in batches.

External Service Provision

External Service Provision

Multiple services share Internet bandwidth

If you create multiple applications based on Alibaba Cloud VPC, where each application must provide external services and their traffic fluctuations are inconsistent, you can share bandwidth among multiple IP addresses to minimize the effect of these fluctuations and reduce costs.

Advantages

  • External Service Provisioning

    Port mapping and IP address mapping are provided, allowing VPC ECS instances to provide external services.

  • Low-cost

    Multiple VPC ECS instances can share Internet bandwidth to optimize costs.

  • High-performance

    NAT Gateway provides the large-bandwidth throughput and a large number of connections.

Proactive Internet Access

Proactive Internet Access

Flexible Internet access for multiple VPC ECS instances

If you create on-cloud interactive modules on VPC and deploy other systems in multiple off-cloud physical IDCs, the on-cloud VPC ECS instances must be able to proactively access the Internet to synchronize content processed on the cloud to the off-cloud IDCs, providing users with reliable HD video services.

Advantages

  • Easy to Configure

    Multiple VPC ECS instances can use the SNAT function to proactively access the Internet, ensuring convenient management.

  • Security

    VPC ECS instances do not need their own public IP addresses, avoiding management hassles and security risks.

Multi-region High-speed Interconnection

Multi-region High-speed Interconnection

Widely spread services and high-speed data interconnection

On-cloud services can be built fully based on VPC with users spread across all regions. To speed up user access, networks of the service systems in different nodes must be interconnected with each other at high speed.

Advantages

  • Secure Isolation

    Services are deployed on Alibaba Cloud VPC, which is secure and reliable.

  • High Reliability

    Express Connect is used to connect different VPC instances, ensuring the quality of cross-region interconnection.

  • High-performance

    VPC with Express Connect provides the maximum interconnection bandwidth of 10 Gbit/s, easily meeting the needs of massive applications.