Docs

VPN Connet

Product introduction

Application scenarios

Scenarios with only IPsec-VPN

Connect two VPC

By default, Elastic Compute Service (ECS) instances in a Virtual Private Cloud (VPC A) cannot access ECS instances in VPC B. You can connect VPCs A and B by establishing an IPsec-VPN tunnel between them for secure communication.

VPC A and VPC B can be from different cloud vendors and in different regions, or under the same account or different accounts of the same cloud vendor.

Connect a single data center to a VPC

Use VPN gateway (single-line access)

In a hybrid cloud scenario, you can associate an IPsec-VPN connection to a VPN gateway when creating the IPsec-VPN connection, establishing a secure communication tunnel between the local data center and the VPC. This allows you to seamlessly migrate some business to the cloud to save on-premises space.

Use VPN gateway (multi-line access)

In a hybrid cloud scenario, you can establish two IPsec-VPN connections between the data center and the VPC. This ensures secure communication and business continuity even if one tunnel fails.

Use TR

In a hybrid cloud scenario, you can associate an IPsec-VPN connection to a Transit Router (TR) when creating the IPsec-VPN connection, and configure flexible routing policies on the TR. This allows you to connect or isolate data centers and VPCs.

Connect multiple data centers to a VPC

To allow cross-region data centers to access ECS instances in a VPC, establish multiple IPsec-VPN tunnels between them and the VPC. This ensures secure, encrypted communication.

High availability connection between data centers and VPCs

A TR can associate with multiple IPsec-VPN connections simultaneously. For a data center hosting critical business, you can establish multiple IPsec-VPN tunnels to balance loads and ensure business stability.

Scenarios with only SSL-VPN

Connection between client and VPC

The SSL-VPN enables network access between clients and the VPC, allowing different clients to securely and flexibly access the VPC anytime and anywhere over the internet.

Scenarios with both IPsec-VPN and SSL-VPN

Connection between client and site

You can use both IPsec-VPN and SSL-VPN to connect clients and the data center with the cloud Virtual Private Cloud, enabling access to the Virtual Private Cloud from both clients and office networks.

Last updated: 2026.07.17 11:00:33