You can create a connection between a virtual border router (VBR) and a virtual private cloud (VPC). This topic describes how to create and manage a VBR-to-VPC connection.
Prerequisites
A VPC and a VBR are created. For more information, see Create and manage a VPC and Create and manage a VBR.
Create a VBR-to-VPC connection
Log on to the Express Connect console.
In the left-side navigation pane, choose .
On the VBR-to-VPC page, click Create Peering Connection.
On the Establish VBR-VPC Interconnection page, configure the parameters.
You can create VBR-to-VPC connections of the following types: same-account and intra-region, same-account and inter-region, cross-account and intra-region, and cross-account and inter-region.
The following table describes the parameters that are required when you create different types of VBR-to-VPC connections.
Parameter
Description
Resource Group
Select the resource group to which the VBR belongs.
Initiator Region
Select the region where the initiator is deployed.
Initiator VBR
Select a VBR as the initiator from the drop-down list.
Acceptor Region Type
Specify whether the initiator and acceptor belong to the same region. Valid values:
Intra-Region: The acceptor and initiator belong to the same region.
Inter-Region: The acceptor and initiator belong to different regions.
If you select Inter-Region, select the region where the acceptor is deployed from the Acceptor Region drop-down list.
Acceptor Account Type
Specify whether the initiator and acceptor belong to the same Alibaba Cloud account. Valid values:
Current Account: The acceptor and initiator belong to the same Alibaba Cloud account.
After you initiate a connection request from the initiator, the system automatically establishes a connection. You do not need to accept the request on the acceptor.
Another Account: The acceptor and initiator belong to different Alibaba Cloud accounts.
After you initiate a connection request from the initiator VBR, you can accept the request on the acceptor VPC to establish the VBR-to-VPC peering connection or reject the request to deny the connection.
If you select Another Account, select the ID of the Alibaba Cloud account to which the VPC belongs from the Acceptor Account ID drop-down list.
NoteBy default, you cannot connect VBRs to instances that belong to a different account due to security requirements. If you want to connect VBRs to Cloud Enterprise Network (CEN) instances or VPCs that belong to a different account, you must provide a Proof of Affiliation to prove that the two Alibaba Cloud accounts belong to the same enterprise or entity. Send the Proof of Affiliation to your account manager to apply for the permissions.
The following figure shows the format of the Proof of Affiliation:
If you select Another Account, you must grant the VBR permissions on the VPC that belongs to another account. After the permissions are granted to the VBR, you can select the UID of the Alibaba Cloud account to which the VPC belongs and the VPC. For more information, see Attach a VBR to a VPC that belongs to a different account.
Acceptor VPC
Select a VPC as the acceptor from the drop-down list.
Tags
Tag Key: the key of a tag. You can select or enter a key. The tag key can be up to 64 characters in length. It cannot contain
http://
orhttps://
and cannot start withacs:
oraliyun
.Tag Value: the value of a tag. You can select or enter a value. The tag value can be up to 128 characters in length. It cannot contain
http://
orhttps://
and cannot start withacs:
oraliyun
.
You can also add tags to the VBR-to-VPC connection in the Tags column after you create the connection. After you add tags, you can modify, view, and delete the tags.
Billing Method
Select a billing method for the VBR-to-VPC connection. Only the Subscription, Pay-By-Bandwidth billing method is supported.
NoteThis parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Select Bandwidth
Specify the bandwidth of the VBR-to-VPC connection.
You do not need to specify the bandwidth for the acceptor. The default bandwidth is used.
NoteThis parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Subscription Duration
Specify the subscription duration of the VBR-to-VPC connection.
You can select Auto-renewal to allow the system to automatically renew the subscription of the VBR-to-VPC connection.
NoteThis parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Coupon
Select a coupon. You can also select Do Not Use Coupons.
NoteThis parameter is required if you set the Acceptor Region Type parameter to Inter-Region.
Fee Details
The bandwidth fee is automatically displayed in the Bandwidth Fee field.
Read and select the Terms of Service and click OK.
NoteIf the initiator or acceptor is deployed outside the Chinese mainland and the acceptor is deployed in the Chinese mainland or vice versa, the VBR-to-VPC connection is a cross-border connection. In this case, you must select the agreement for cross-border connections before you can create the VBR-to-VPC connection.
After the VBR-to-VPC connection is established, the status of the initiator and the acceptor changes to Activated.
Configure routes
After the VBR-to-VPC connection is established, you must configure routes for the VBR and VPC.
Log on to the Express Connect console.
In the top navigation bar, select a region and choose in the left-side navigation pane.
On the VBR-to-VPC page, find the VBR-to-VPC connection that you want to manage and click Route Settings in the Route Settings column.
In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the acceptor VPC and click OK.
After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.
Return to the VBR-to-VPC page. In the Acceptor column, click Route Settings.
In the Basic Information panel, click Add Route. In the dialog box that appears, enter the CIDR block of the initiator VBR and click OK.
After the configuration takes effect, you can view the information about the route that you added in the Basic Information panel.
Delete a VBR-to-VPC connection
You can delete a VBR-to-VPC connection that is no longer needed. After you delete a VBR-to-VPC connection, you cannot restore it and your service may be interrupted. Proceed with caution.
Log on to the Express Connect console.
In the top navigation bar, select a region. Choose in the left-side navigation pane.
On the VBR-to-VPC page, find the pay-as-you-go VBR-to-VPC connection that you want to delete and choose or click Delete in the Actions column.
In the dialog box that appears, click OK.
What to do next
Disable the initiator or acceptor
You can disable the initiator or the acceptor of a peering connection to stop data transfer. If you want to re-use the connection, you can re-enable the initiator or acceptor to transfer data.
Operation | Procedure |
Disable the initiator or acceptor |
|
Enable the initiator or acceptor |
|
Manage a pay-as-you-go VBR-to-VPC connection
Operation | Description | Procedure |
Upgrade | Upgrade the bandwidth of a VBR-to-VPC connection |
|
References
Related API operations
CreateRouterInterface: creates a router interface.
ConnectRouterInterface: initiates a connection from the router interface of an initiator to the router interface of an acceptor.
ActivateRouterInterface: enables a router interface that is in the Inactive state.
DeactivateRouterInterface: disables a router interface.
ModifyRouterInterfaceSpec: modifies the specifications of a router interface.
ModifyRouterInterfaceAttribute: modifies the configuration of a router interface.
DeleteRouterInterface: deletes a router interface.
Related topics