Connect VPCs

更新时间:
复制 MD 格式

By default, virtual private clouds (VPCs) are isolated from each other. To enable communication between instances in different VPCs, you can use either VPC Peering Connection or Cloud Enterprise Network (CEN) . Choose based on network scale, performance requirements, and cost.

Choose the right connection method

  • When choosing between VPC peering and CEN, consider:

    • Scale : Use VPC peering connection for small networks (2-3 VPCs) and CEN for large ones (>3 VPCs).

    • Features: To use multicast, service chaining, or cross-region QoS, or to automatically configure routes, use CEN.

    • Cost: For same-region VPCs, use VPC peering connection—intra-region connections are free.

    • Bandwidth: For high-bandwidth intra-region needs, use VPC peering connection—no bandwidth cap applies.

  • Key differences:

    Item

    VPC peering connection

    CEN

    Connection mode

    Full-mesh: direct connections between each pair of VPCs

    Hub-spoke: VPCs attach to a central Transit Router (TR)

    Number of VPCs

    • Up to 10 VPCs in the same region

    • Up to 20 across regions

    A single TR supports up to 1,000 VPCs

    Route configuration

    Manual configuration required for each VPC

    Routes can be automatically configured using route learning and route synchronization.

    Scalability

    Low

    Each new VPC requires manual setup and routing

    High

    Add a new VPC by attaching it to the TR, no manual routing needed

    Bandwidth

    Intra-region: unlimited

    Inter-region: default limit 1,024 Mbps

    Intra-region: see Maximum bandwidth supported by connections.

    Inter-region: pay-as-you-go ( quota -limited) or allocated from a bandwidth plan

    Billing

    Intra-region: free

    Inter-region: outbound traffic fees via Cloud Data Transfer (CDT).

    Intra-region: connection and processing fees

    Inter-region: connection, traffic, and bandwidth fees; see CEN billing

Use case examples

1. Connect two VPCs

To connect two Elastic Compute Service (ECS) instances in different VPCs, VPC peering connection is ideal.

Intra-region VPC peering is free.

image

2. Connect multiple VPCs

For more than two VPCs, peering requires:

  • A direct connection between every pair of VPCs (full mesh)

  • Manual route configuration for each connection

Complexity grows with VPC count.

CEN  simplifies this:

  • Attach all VPCs to a TR

  • Full-mesh connectivity is established automatically

  • Routes are synchronized without manual intervention

image

Reduce costs in complex network architectures

In complex multi-region deployments, combining VPC peering and CEN optimizes cost, performance, and control.

Example scenario

A company with multi-region VPCs wants to:

  • Connect VPCs across regions

  • Control routing policies

  • Minimize costs

Recommended solution

  • Inter-region connections:

    • Use inter-region VPC peering connection for cost sensitive links (such as between VPC A and VPC C) with no additional cost.

    • For high-bandwidth or dedicated connections, use CEN with bandwidth plans.

  • Centralized routing:

    • Connect transit VPCs to CEN to enable inter-region connectivity with granular routing control.

This hybrid approach balances cost and agility.

image