Related concepts

Virtual Private Cloud

A Virtual Private Cloud (VPC) is a customizable virtual network that allows users to design their own network environment. By defining configurations such as IP address ranges and subnets, users can quickly create a VPC. Each VPC is completely isolated, enabling users to create and manage BCC instances within it.

Subnet

A subnet is a user-defined IP address range within a VPC. Based on specific service requirements, users can configure different address spaces and IP segments using Classless Inter-Domain Routing (CIDR). Subnets can also be employed to define Internet access permissions, routing rules, and security policies.

Route table

The route table serves as the traffic controller within the VPC, allowing for global and subnet-level traffic regulation via a unified global route table. Users can customize route rules to determine the destinations of network traffic.

Elastic network interface

The elastic network interface (ENI) is a versatile network interface that can be attached to cloud hosts and seamlessly migrated across multiple hosts. By attaching multiple elastic network interfaces to a single cloud host, you can achieve a high-availability network architecture; alternatively, multiple internal IPs can be assigned to one elastic network interface, enabling multi-IP deployment on a single host.

Service network interface card

The service network interface card (SNIC) integrates external services like BOS into the VPC, allowing users to access these services conveniently and securely via the internet within the VPC or hybrid cloud environments.

Security group

A security group acts as a protective firewall within the VPC network, providing IP and port-based ingress and egress policies for BCC instances, DCC dedicated instances, load balancers, and cloud database instances.

• A default security group is automatically generated whenever a VPC is created.
• Users can create custom VPCs. When adding a BCC instance to a VPC, it is necessary to specify which security group it should join. If no group is specified, the instance will be assigned to the default security group of that VPC.

ACL

The Access Control List (ACL) acts as a firewall feature applied to subnets, enabling security access control at the subnet level.

NAT gateway

The network address translation (NAT) gateway offers internet connectivity services for virtual private clouds while supporting SNAT and DNAT functions. It allows multiple cloud server instances to share public IP resources for internet access and enables these servers to provide internet-facing services. The NAT gateway can bind to EIP instances and EIPGROUP, facilitating many-to-one or many-to-many IP address translation from intranet IPs to public IPs.

IPv6 gateway

The IPv6 Gateway serves as the main gateway for virtual private clouds to access the public internet using IPv6. Users can purchase IPv6 public network bandwidth as needed and can flexibly manage IPv6 egress and ingress bandwidth by configuring egress-only policies and IP rate limiting.

VPN gateway

Using the virtual private network (VPN) service, Baidu AI Cloud and customer data centers can quickly and flexibly establish secure VPN tunnels for hybrid cloud environments. Baidu AI Cloud's VPN gateway is built on a high-reliability architecture with active-standby mode and includes features like automatic health detection and fault auto-recovery.

Peering connections

Peering connections provide VPC-level interconnection services, allowing traffic exchange between different virtual networks for secure, high-speed network connectivity across the same or different regions or users.

Dedicated gateway

The dedicated gateway acts as the connection point between a VPC and a physical dedicated line.

Flow log

The flow log records network traffic sent and received by cloud server instances in a VPC, helping users analyze traffic, visualize data, diagnose faults, and optimize network architecture.

Traffic monitor

The traffic monitor collects traffic data, filters it on specified EIPs using quintuple conditions, and forwards or duplicates it to BCC clusters within the same VPC. It is ideal for use cases such as risk monitoring, fault diagnosis, and business analysis.

Network probe

The network probe monitors the quality of VPC network connections. It supports ping, TCP, and UDP probes for Baidu Cloud Compute, NAT gateway, VPN gateway, peering connections, dedicated gateway, and cloud smart networks. Metrics like latency and packet loss rates are tracked, enabling real-time monitoring and alerts for connection failures.