Hierarchical and Grouping Scenarios of System

The users migrate core business to Baidu AI Cloud, put the similar business clusters into the same subnet under the VPC, and construct their own exclusive networks. The users can uniformly control the access rules of the subnet by security groups, as shown in the figure below. One VPC is created to divide the Baidu Cloud Compute and Simple Cache Service, Relational Database Service into an independent subnet. The subnet where the Baidu Cloud Compute is located realizes the public network access by the NAT address conversion; the Simple Cache Service and Relational Database Service protects the database server security by the intranet access.

Business Smooth Online Scenarios

With the security isolation characteristics of VPC, the users can construct multiple independently-isolated VPC networks, and different VPC can still maintain the consistency of network address. As shown in the figure below, the enterprise should build a production environment and a testing environment with the same network address, respectively deploy the two environments in the completely-independent VPC, and realize the fast iteration and smooth online of business by the DevOps mode.

Extensible Hybrid Cloud Scenarios

The hybrid cloud plan is applicable to traditional enterprises, government systems, financial systems and large internet users. The express tunnel or VPN services are used to connect the production environment IDC (or office network) of users and the VPC network of Baidu AI Cloud, establish the hybrid cloud architecture, which makes it convenient to share cloud resources and realize the quick and secure access and backup of business data. The VPC supports a variety of computing products such as Baidu Cloud Compute, Dedicated Cloud Compute, and Baidu Baremetal Compute.