VPC-Baidu AI Cloud

Virtual Private Cloud（VPC）

Based on the VPC, users can flexibly customize the network address space to realize the security isolation of the VPC. It supports the high speed and stable peering connection between multiple private networks (intra-city and inter-city). A flexible and scalable hybrid cloud is established between the Cloud and your private data center through the VPN/express tunnel.

Overview

VPC builds a secure and isolated network environment. You can customize the network address space. It can realize the high-speed peering connection between multiple VPCs (same city, cross-city). Through VPN/express tunnel, a secure, customized hybrid cloud network can be built with the user's data center. The original business can be migrated to the cloud easily and securely.

Features

	Instruction	Advantages
VPC	It is a custom network address space, and the addresses between multiple VPCs can be overlapped with each other.	The address space overlap is not allowed in the traditional data center, and multiple identical network environments (disaster recovery network and test environment consistent with production environment) cannot be created.
Subnet	Users can flexibly customize the IP address range.	It classifies the similar services into the same subnet to facilitate the unified management of user servers, and supports to bring the sub instance of BCC, DCC and BBC into the VPC.
Security Group	It sets the IP + port level access control for BCC in VPC.	It sets the bidirectional traffic access control for CVM server in VPC, greatly improving the business security.
ACL	It is the firewall component in VPC to implement the subnet-level security access control.	It flexibly sets the traffic of one or more subnets to meet the user's security requirements for different network deployments.
Routing Table	It flexibly schedules, manages and controls the traffic in the VPC.	It simply and easily manages and schedules the subnet level traffic through the global routing table.
Elastic Network Interface Card	It provides the CVM sever the network forwarding ability of multiple ENIs and IPs.	It helps users to route different types of traffic on the CVM server to different ENIs for the separate management, and realizes the fine management of network traffic.
Service Network Interface Card	It realizes the convenient and safe access to the public services in VPC.	It needs not provide the elastic IP, but supports the private network access and is flexible for use.
NAT Gateway	Multiple BCCs in the VPC share the same group of public network IPs for the external access, and SNAT and DNAT are supported.	It supports up to 5G bandwidth. It implements the automatic failover and recovery based on HA, achieving the high reliability.
VPN Gateway	It builds the VPN tunnel with multiple IDC environments of customers to implement the hybrid cloud through VPN.	It supports up to 1G bandwidth. Based on HA, it implements the automatic failover and recovery to achieve the high reliability.
Peering connection	It securely connects the private networks between multiple VPCs.	It flexibly realizes the high-speed network connection of multiple users business in the same region/different regions.
ET Gateway	It is the interface for the VPC to the physical ET.	It supports up to 10 G bandwidth, and realizes the stable, high-speed, safe and flexible interconnection from the VPC to the user IDC.

Application Scenarios

System Hierarchy and Group

Smooth Business Launch

Scalable Hybrid Cloud

System Hierarchy and Group

Users migrate the core businesses to Cloud, and put the similar business clusters into the same subnet under the VPC, as well as build their dedicated network. Users can uniformly control the access rules of subnet through the security group.

Customer Case

General Administration of Press and Publication
VPC meets the strict requirements for the security, stability and performance in the cloud environment of the digital composite publication system of the General Administration of Press and Publication, greatly improves the efficiency of publication system, and helps the government system realize the Internet +.
SINOIOV
Based on VPC and related products, SINOIOV builds an elastic and reliable intelligent transportation system. It perfectly supports the business requirements for high concurrency and auto scaling and quickly upgrades the IT infrastructure.
Du Xiaoman Financial
The Du Xiaoman Financial business system exists in the local data center and cloud data center. It builds different business modules based on VPC, and establishes the isolated cloud environment to conduct the business interaction between local data center and cloud data center through ET.