Create and manage a VBR-to-VPC connection for Express Connect - Express Connect

You can create a connection between a virtual border router (VBR) and a virtual private cloud (VPC). This topic describes how to create and manage a VBR-to-VPC connection.

Prerequisites

A VPC and a VBR are created. For more information, see Create and manage a VPC and Create and manage a VBR.

Create a VBR-to-VPC connection

Log on to the Express Connect console.
In the left-side navigation pane, choose VPC Peering Connections > VBR-to-VPC.
On the VBR-to-VPC page, click Create Peering Connection.

On the Establish VBR-VPC Interconnection page, configure the parameters.

You can create VBR-to-VPC connections of the following types: same-account and intra-region, same-account and inter-region, cross-account and intra-region, and cross-account and inter-region.

The following table describes the parameters that are required when you create different types of VBR-to-VPC connections.

Parameter	Description
Resource Group	Select the resource group to which the VBR belongs.
Initiator Region	Select the region where the initiator is deployed.
Initiator VBR	Select a VBR as the initiator from the drop-down list.
Acceptor Region Type	Specify whether the initiator and acceptor belong to the same region. Valid values: Intra-Region: The acceptor and initiator belong to the same region. Inter-Region: The acceptor and initiator belong to different regions. If you select Inter-Region, select the region where the acceptor is deployed from the Acceptor Region drop-down list.
Acceptor Account Type	Specify whether the initiator and acceptor belong to the same Alibaba Cloud account. Valid values: Current Account: The acceptor and initiator belong to the same Alibaba Cloud account. After you initiate a connection request from the initiator, the system automatically establishes a connection. You do not need to accept the request on the acceptor. Another Account: The acceptor and initiator belong to different Alibaba Cloud accounts. After you initiate a connection request from the initiator VBR, you can accept the request on the acceptor VPC to establish the VBR-to-VPC peering connection or reject the request to deny the connection. If you select Another Account, select the ID of the Alibaba Cloud account to which the VPC belongs from the Acceptor Account ID drop-down list. Note By default, you cannot connect VBRs to instances that belong to a different account due to security requirements. If you want to connect VBRs to Cloud Enterprise Network (CEN) instances or VPCs that belong to a different account, you must provide a Proof of Affiliation to prove that the two Alibaba Cloud accounts belong to the same enterprise or entity. Send the Proof of Affiliation to your account manager to apply for the permissions. The following figure shows the format of the Proof of Affiliation: If you select Another Account, you must grant the VBR permissions on the VPC that belongs to another account. After the permissions are granted to the VBR, you can select the UID of the Alibaba Cloud account to which the VPC belongs and the VPC. For more information, see Attach a VBR to a VPC that belongs to a different account.
Acceptor VPC	Select a VPC as the acceptor from the drop-down list.
Tags	Tag Key: the key of a tag. You can select or enter a key. The tag key can be up to 64 characters in length. It cannot contain `http://` or `https://` and cannot start with `acs:` or `aliyun`. Tag Value: the value of a tag. You can select or enter a value. The tag value can be up to 128 characters in length. It cannot contain `http://` or `https://` and cannot start with `acs:` or `aliyun`. You can also add tags to the VBR-to-VPC connection in the Tags column after you create the connection. After you add tags, you can modify, view, and delete the tags.
Billing Method	Select a billing method for the VBR-to-VPC connection. Only the Subscription, Pay-By-Bandwidth billing method is supported. Note This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Select Bandwidth	Specify the bandwidth of the VBR-to-VPC connection. You do not need to specify the bandwidth for the acceptor. The default bandwidth is used. Note This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Subscription Duration	Specify the subscription duration of the VBR-to-VPC connection. You can select Auto-renewal to allow the system to automatically renew the subscription of the VBR-to-VPC connection. Note This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Coupon	Select a coupon. You can also select Do Not Use Coupons. Note This parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Fee Details	The bandwidth fee is automatically displayed in the Bandwidth Fee field.

Read and select the Terms of Service and click OK.
Note
If the initiator or acceptor is deployed outside the Chinese mainland and the acceptor is deployed in the Chinese mainland or vice versa, the VBR-to-VPC connection is a cross-border connection. In this case, you must select the agreement for cross-border connections before you can create the VBR-to-VPC connection.
After the VBR-to-VPC connection is established, the status of the initiator and the acceptor changes to Activated.

Configure routes

After the VBR-to-VPC connection is established, you must configure routes for the VBR and VPC.

Log on to the Express Connect console.
In the top navigation bar, select a region and choose VPC Peering Connections > VBR-to-VPC in the left-side navigation pane.
On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and click Route Settings in the Route Settings column.
In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the acceptor VPC and click OK.
After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.
Return to the VBR-to-VPC page. In the Acceptor column, click Route Settings.
In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the initiator VBR and click OK.
After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.

Delete a VBR-to-VPC connection

You can delete a VBR-to-VPC connection that is no longer needed. After you delete a VBR-to-VPC connection, you cannot restore it and your service may be interrupted. Proceed with caution.

Log on to the Express Connect console.
In the top navigation bar, select a region. Choose VPC Peering Connections > VBR-to-VPC in the left-side navigation pane.
On the VBR-to-VPC page, find the pay-as-you-go VBR-to-VPC connection that you want to delete and choose > Delete or click Delete in the Actions column.
In the dialog box that appears, click OK.

What to do next

Disable the initiator or acceptor

You can disable the initiator or the acceptor of a peering connection to stop data transfer. If you want to re-use the connection, you can re-enable the initiator or acceptor to transfer data.

Operation	Procedure
Disable the initiator or acceptor	On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and choose > Suspend Initiator or > Suspend Acceptor in the Actions column. In the dialog box that appears, click OK.
Enable the initiator or acceptor	On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and choose > Activate Initiator or > Activate Acceptor in the Actions column. In the dialog box that appears, click OK.

Manage a pay-as-you-go VBR-to-VPC connection

Operation	Description	Procedure
Upgrade	Upgrade the bandwidth of a VBR-to-VPC connection	On the VBR-to-VPC page, find the pay-as-you-go VBR-to-VPC connection whose bandwidth you want to manage and click Upgrade in the Upgrade column. On the page that appears, modify Bandwidth, select the Terms of Service, and then click OK.

References

Related API operations

CreateRouterInterface: creates a router interface.
ConnectRouterInterface: initiates a connection from the router interface of an initiator to the router interface of an acceptor.
ActivateRouterInterface: enables a router interface that is in the Inactive state.
DeactivateRouterInterface: disables a router interface.
ModifyRouterInterfaceSpec: modifies the specifications of a router interface.
ModifyRouterInterfaceAttribute: modifies the configuration of a router interface.
DeleteRouterInterface: deletes a router interface.