Networking

The VPC provides a more flexible access control mechanism, allowing users to finely control and manage incoming and outgoing network traffic through security groups, network ACLs, and other methods. This effectively prevents unauthorized access and data leaks.

The VPC offers Layer 2 isolation technology, ensuring that each VPC functions as an independent network environment without interference, thus enhancing security. VPC also allows users to customize network topology and IP address ranges, reducing security risks caused by improper network configurations.

VPC supports a broader range of networking features and functionalities, such as VPN connections and NAT gateways. These capabilities enable users to construct more complex and secure network environments, catering to diverse business requirements.

Configuring VPC is relatively simple, allowing for easy setup and management of networks. Additionally, VPC supports automatic learning and distribution of routes, making network connectivity management more convenient.

Using the VXLAN protocol, each VPC network is isolated, ensuring Layer 2 logical isolation between different VPCs, thus preventing communication between them.

Additionally, based on Overlay technology, a virtual network is constructed on top of the physical network. Users have complete control over their virtual network, including selecting their IP address range, segmenting subnets, configuring routing tables, and gateways.

Partition the private IP addresses of the dedicated network into one or more subnets and deploy applications and other services under the corresponding subnets as needed. Regarding routing rules, configure routing rules for the virtual router according to business requirements to manage the forwarding paths of traffic within the dedicated network.

In a VPC, independently assignable public IP addresses can be requested and bound to cloud product instances of the same region and network type as needed. Binding and unbinding operations take effect immediately.

You can partition the product instances in the dedicated network into different security domains and define different access control rules for each security domain.