Configuration

Will EIP bandwidth upgrade interrupt the service?

Service operations will remain uninterrupted.

How to increase the quota for the number of EIPs?

EIP quota is not adjustable by default; IP convergence can be achieved via NAT gateway or load balancer. Specific rules are as follows. In case of any special circumstances, the account must be provided with corresponding cloud service resources, and the usage scenario must be reasonable. Users can submit a ticket to apply:

• Personal users are allocated 50 EIP quotas per region.
• Enterprise users: 130 EIP quotas per region. For details, refer to Usage Limits

How to increase the quota for EIP bandwidth?

Baidu AI Cloud imposes bandwidth peak limits on user-purchased EIP instances, subject to adjustment per product operation policies. If the services require guaranteed or higher bandwidth peaks, it is necessary use EIP with fixed-bandwidth billing. For larger bandwidth peaks, submit a ticket to apply. For details, refer to Usage Limits

Can the bandwidth of prepaid-by-bandwidth EIPs or EIPGROUP (bandwidth groups) be adjusted?

Yes.

For bandwidth-billed EIPs, click "Bandwidth Adjustment" on the EIP Instance List page and select the desired bandwidth in the pop-up window.

For bandwidth-billed EIPGROUP instances, click "Bandwidth Adjustment" on the EIPGROUP Instance List page and choose the desired bandwidth in the pop-up window.

Is it possible to unbind the EIP and then rebind it to a new server?

Yes, unbinding an EIP does not release it. Users can rebind the EIP after purchasing a new BCC.

Can a BCC be bound to multiple EIPs?

Currently, BCC allows binding multiple EIPs by adding secondary IP addresses.

How many Baidu Cloud Compute instances can an EIP be bound to simultaneously?

Each EIP can only be bound to one BCC at a time.

How to enable multiple servers to access the Internet via a single EIP?

This can be accomplished by configuring a NAT gateway.

To actively access the public network, users can use the SNAT function:

1. Create a NAT gateway and bind an EIP. 2) Set up SNAT rules. 3) Configure the VPC route to point the next hop to the NAT gateway.

For passive public access, use DNAT function:

1. Create a NAT gateway and bind an EIP. 2) Set up multiple DNAT rules. 3) Configure the VPC route to point the next hop to the NAT gateway.

Additionally, passive access can also be achieved by configuring BLB:

1. Create a BLB and bind it to an EIP; 2) Set up the listener and real server.

Can Baidu Cloud Compute bound to EIP still perform ingress/egress access via NAT gateway?

No. When a Baidu Cloud Compute instance binds to an EIP, the directly bound EIP takes precedence over the NAT Gateway's EIP.

The NAT Gateway provides SNAT and DNAT capabilities, allowing multiple Baidu Cloud Compute instances to share a single EIP.

Baidu Cloud Compute binds an EIP directly in exclusive IP mode.

SNAT: When both SNAT and EIP binding are configured on the same BCC, the BCC prioritizes the directly bound EIP for outbound public IP traffic.

DNAT: If a BCC has both DNAT configured and an EIP bound, inbound traffic via the DNAT EIP will fail. This occurs because the BCC prioritizes the directly bound EIP for outbound traffic, leading to a mismatch between the ingress and egress EIPs.

Why can't IPv6 access the public network?

1. Confirm whether an IPv6 gateway has been created
2. Verify whether the IPv6 gateway is in debt
3. Verify whether user routing is configured on the VPC page, with the next hop pointing to the IPv6 gateway
4. Verify whether the egress-only policy has been configured on the IPv6 gateway, which may affect normal traffic access

Why does limiting packet loss occur when EIP traffic bandwidth reaches only 80% of purchased bandwidth?

Possible reason 1: The EIP is experiencing burst traffic. Current EIP traffic monitoring has minute-level granularity. Second-level burst traffic is averaged over one minute, which may display traffic below the bandwidth limit, even though the burst traffic has exceeded the threshold, resulting in limited packet loss.

Possible reason 2: The EIP cluster bandwidth limiting adjustment is triggered. When overall traffic exceeds 80% of the bandwidth value, the EIP cluster bandwidth limiting policy adjustment will be triggered, which may cause bandwidth limiting packet loss

Why is a specific EIP port inaccessible?

1. EIP has default ports that cannot be accessed. Please confirm whether this port falls into that category;
2. Please verify whether the security group has enabled this port;
3. Verify whether any security ticket has blocked this port;
4. The carrier has blocked specific ports of this EIP

What should I do if my EIP is inaccessible?

There could be various reasons for being inaccessible, such as arrears, the EIP being subjected to DDoS attacks, security vulnerabilities in the cloud host associated with the EIP, or non-compliant activities on the instance. You can self-resolve the problem through the following link. https://console.bce.baidu.com/tools/#/safetyControl

How to detect EIP packet loss? How to promptly detect EIP packet loss?

To address EIP packet loss, select the EIP in Baidu Cloud Monitor (BCM), review the EIP instance monitoring details, and check the gateway packet loss rate metric for potential losses. For real-time detection, locate the corresponding EIP instance in BCM and set up an alarm strategy for gateway packet loss to resolve issues promptly.

What to do if a Windows server system cannot ping the public IP?

Since Windows servers block ping requests by default, enable the "File and Printer Sharing (Echo Request - ICMPv4-In)" rule in the ingress settings of the advanced security firewall.

• For the 2008 Firewall, navigate to: Server Manager - Configuration - Advanced Security Windows Firewall - Ingress Rules.
• For the 2012 Firewall, navigate to: Server Manager - Tools - Advanced Security Windows Firewall - Ingress Rules.

How to perform regular comprehensive checks on the status of EIP resources?

You can activate the "Cloud Advisor" service to regularly receive inspection reports on the security, availability, performance and cost of cloud resources. The report includes several EIP-related inspection items, such as EIP - Unbound EIP. Please visit Cloud Advisor Homepage to learn about or activate the Cloud Advisor service

Why can't TCP Port 25 be accessed?

TCP Port 25 is commonly used as the default port for the Simple Mail Transfer Protocol (SMTP), which manages email-sending functions. Baidu AI Cloud EIPs block TCP egress on Port 25 by default for the following key reasons:

1. Prevent spam transmission

• Issue: An open Port 25 can be abused by malicious actors to send large volumes of spam emails from the server.
• Impact: This not only disrupts email recipients but can also lead to the server's IP addresses being blacklisted globally. As a result, emails from legitimate users may also fail to reach their destination.

2. Reduce network attacks

• Issue: Port 25 is frequently targeted in network attacks, such as DDoS attacks and botnet activity.
• Impact: Such attacks may destabilize servers, cause service outages, and lead to potential data leaks or data corruption.

3. Ensure network quality

• Issue: Unrestricted email traffic might heavily consume network bandwidth.
• Impact: This can degrade overall server network performance, negatively affecting the service experience for other customers.