A virtual private cloud (VPC) is a dedicated private network on edge nodes that gives you full control over a logically isolated network environment. Within your VPC, you can specify CIDR blocks, create vSwitches, configure route tables, and deploy Edge Node Service (ENS) resources such as computing instances and edge load balancers (ELBs).
Components
Each VPC consists of three building blocks: a private CIDR block, vSwitches, and a route table.
| Component | What it is | Key constraint |
|---|---|---|
| Private CIDR block | The private IP address range of the VPC, specified in CIDR notation when you create the VPC and a vSwitch. | — |
| vSwitch | A subnet within the VPC. Create one or more vSwitches to segment the VPC. vSwitches in the same VPC can communicate with each other. | Only IPv4 CIDR blocks are supported. CIDR blocks of vSwitches in the same VPC cannot overlap. The IPv4 CIDR block of a vSwitch cannot be modified after creation. |
| Route table | Controls traffic routing within the VPC. The system automatically creates one system route table per VPC and associates all vSwitches with it. | Only the system route table is supported — custom route tables are not available. You can add custom route entries, but the next hop supports only ENS instances. The system route table is deleted when the VPC is deleted. |
Network isolation and connectivity
| Scenario | How it works |
|---|---|
| Isolation between VPCs | Each VPC is identified by a unique tunnel ID. Traffic cannot cross VPC boundaries. |
| Traffic control within a VPC | Use access control lists (ACLs) to filter traffic at the subnet level, and security group rules to control inbound and outbound traffic at the instance level. |
| Cross-VPC connectivity | Use Edge Network Acceleration (ENA) to interconnect computing instances across ENS VPCs. |
Access methods
| Method | Best for |
|---|---|
| ENS console | Creating, managing, and deleting VPCs through a web interface — no code required. |
| Alibaba Cloud SDKs | Integrating VPC management into applications. Available for Java, TypeScript, Go, Python, PHP, and other languages. |
| ENS OpenAPI | Calling API operations directly or generating SDK sample code dynamically. |
Billing
VPCs are free. Charges apply to ENS resources you deploy inside the VPC, such as computing instances and ELBs. See the billing documentation for each service.
该文章对您有帮助吗？