Virtual Private Cloud

The IP address range, subnet IP address range and routing strategies of VPC can be customized through the Tencent Cloud console or API. VPC can be further divided into multiple subnets for deployment of applications and services. The deployment and OPS of underlying network devices and optimization of network performance are maintained by Tencent Cloud's professional technical team, allowing you to focus on defining instantly available networks with software to build transparent, agile and intelligent networks with ease.

VPC provides you with flexible and high-performance Internet connectivity, including elastic IP (EIP) and NAT gateway.
EIP is a public IP address that can be independently applied for and used for Internet access. It supports dynamic binding and unbinding of instances (such as CVM and NAT gateway) for blocking instance faults.
NAT gateway (NG) is a method for VPC to access the Internet. It can translate the private IP address in VPC to a public IP address if the private and public networks are isolated from each other. A typical application scenario of NG is to achieve high-bandwidth and high-availability Internet access. NG supports up to 10 million concurrent connections, 10 Gbps bandwidth and 10 EIPs and features dual-server hot backup, automatic disaster recovery and 99.99% service availability, making it ideal for Internet access scenarios requiring high bandwidth and with large volumes of public IP addresses and multiple deployed services.

VPN Connections and Direct Connect can be used to establish stable and reliable connections between Tencent Cloud computing resources and local IDCs so as to create a hybrid cloud.
VPN Connections is a service that connects your IDC to VPC through an encrypted public IPsec tunnel, helping you to deploy a hybrid cloud quickly and securely.
Direct Connect is a service that connects your IDC to Tencent Cloud computing resources through physical direct connect lines and supports dual-server hot backup, satisfying the need for high-quality network connections in industries such as finance.

You can interconnect resources in VPC with other cloud resources through Peering Connection (PC) and Classiclink.
PC is a service that connects two VPCs and supports traffic interconnection of cross-account and cross-region VPCs, enabling resources such as CVMs and CDBs to access each other at both ends. With the aid of PC, you can easily deploy unified global servers and 2-region-3-DC disaster recovery schemes.
Classiclink is a service that is used to associate CVMs on a basic network to a specified VPC and enables network communication between the CVMs and the VPC, helping you seamlessly connect to Tencent Cloud resources.

Resource access control at the port and instance levels can be achieved through network ACLs and security groups, and minimum account permissions can be granted through CAM, helping achieve comprehensive network security enhancement.
Network ACL is a stateless virtual firewall that can filter selected packets and control the inbound and outbound data traffic on a subnet at the protocol and port levels.
Security group is a stateful packet-filtering virtual firewall that controls the inbound and outbound traffic of one or multiple CVMs at the protocol and port levels.