Modify VPN gateway specifications - VPN Gateway - Alibaba Cloud Documentation Center

To modify the bandwidth or features of a VPN gateway instance, you can upgrade or downgrade the instance.

Upgrade

Item	Description
Scenarios	Upgrade a VPN gateway instance immediately to increase its specifications.
Upgrade features	Increase the bandwidth specification of a VPN gateway instance. Note To enable IPsec-VPN or SSL-VPN, or to increase the SSL connection limit, see: Enable the IPsec-VPN feature Enable the SSL-VPN feature Modify the SSL connection limit
Upgrade limits	Bandwidth limits: VPN gateway instances in dual-tunnel mode have no bandwidth upgrade restrictions. For VPN gateway instances in single-tunnel mode: if the bandwidth is 200 Mbps or less, you cannot upgrade to 500 Mbps or 1000 Mbps. If the bandwidth is 500 Mbps, you can only upgrade to 1000 Mbps. The upgrade process does not affect your services.
Effective period	After upgrading a VPN gateway instance, the new specifications take effect immediately and remain valid until the instance expires. Due to network conditions, the change may take a few minutes to apply. Wait a few minutes.
Billing impact	After submitting a specification change order, the system bills based on the new configuration. For more information, see Billing.

Log on to the VPN Gateway console.
In the top navigation bar, select the region where the VPN gateway instance resides.
On the VPN Gateways page, find the target VPN gateway instance and click Upgrade in the Bandwidth column.
On the VPN Gateway | Upgrade/Downgrade page, adjust the Maximum Bandwidth of the VPN gateway instance.
In the Terms of Service section, read and select the terms of service. Then, click Buy Now and complete the payment.

Downgrade

Item	Description
Scenarios	Downgrade a VPN gateway instance immediately to decrease its specifications.
Downgrade features	Decrease the bandwidth specification of a VPN gateway instance. Disable IPsec-VPN and SSL-VPN features for a VPN gateway instance. Decrease the SSL connection limit of a VPN gateway instance.
Downgrade limits	To disable IPsec-VPN during a downgrade, ensure no IPsec-VPN connections exist under the instance. To delete an IPsec connection, see IPsec connections (attached to a VPN gateway). To disable SSL-VPN during a downgrade, ensure no SSL servers or IPsec servers exist for the instance. To delete SSL and IPsec servers, see Delete an SSL server and Delete an IPsec server. Bandwidth limits: VPN gateway instances in dual-tunnel mode have no bandwidth downgrade restrictions. For VPN gateway instances in single-tunnel mode: if the bandwidth is 1000 Mbps, you can only downgrade to 500 Mbps. If the bandwidth is 500 Mbps, you cannot downgrade it. During a bandwidth downgrade, if traffic exceeds the new bandwidth limit, connections may break. Ensure your backend applications support reconnection. When decreasing the SSL connection limit, if connected clients exceed the new limit, connections may break. Ensure your backend applications support reconnection.
Effective time	After downgrading a VPN gateway instance, the new specifications take effect immediately and remain valid until the instance expires. Due to network conditions, the change may take a few minutes to apply. Wait a few minutes.
Billing impact	After submitting a downgrade order, the system bills based on the new configuration. For more information, see Billing.

Log on to the VPN Gateway console.
In the top navigation bar, select the region where the VPN gateway instance resides.
On the VPN Gateways page, find the target VPN gateway instance and click Downgrade in the Bandwidth column.
On the VPN Gateway | Downgrade page, adjust the configuration of the VPN gateway instance.
You can decrease the maximum bandwidth, disable IPsec-VPN or SSL-VPN, or decrease the SSL connection limit as needed.
In the Terms of Service section, read and select the terms of service. Then, click Buy Now and complete the payment.