Tenant Cloud Network Direct Connect Product Introduction

Limits

Last Updated At: 2025-11-11 17:51:13

Resource limitations

Resources Restrictions can request for high quota
Connection/User 10 Yes
DC Tunnel/Connection 5 Yes
DC Gateway/VPC 1 No
Local IP Translation/DC Gateway 100 entries Yes
Peer IP Translation/DC Gateway 100 entries Yes
Quantity of IPs Translated at Local Source IP Port/DC Gateway 20 Yes
Local Destination IP Port Translation/DC Gateway 100 entries Yes
quantity of DC tunnel static route entries 20 entries No
quantity of DC tunnel BGP routing entries 100 entries No

Connection Restrictions


Direct Connect

  • When you create a new DC gateway, the IP translation and IP port translation contents are empty by default, and both IP translation and IP port translation are ineffective.
  • The DC tunnel supports two routing methods: BGP routing and static routing.
  • Pay attention to the following restrictions when you publish routes:
    To improve the fine-grained scheduling capabilities of your network, avoid publishing the following routes:

10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/10.
You can split the above large segments into the following for publishing:

  • 10.0.0.0/8 Split into: 10.0.0.0/9+10.128.0.0/9`.
  • 172.16.0.0/12 Split into: 172.16.0.0/13+172.24.0.0/13`.
  • 192.168.0.0/16 Split into: 192.168.0.0/17+192.168.128.0/17`.
  • 100.64.0.0/10 Split into: 100.64.0.0/11+100.96.0.0/11`.

IP Translation

  • The original IP must be within the CIDR range of the VPC.
  • The mapped IP cannot be within the CIDR range of the VPC where the DC gateway is located.
  • The original IP cannot be repeated, that is, one IP in a VPC can only be mapped to one IP.
  • The mapped IP must be unique and cannot be repeated. That is, multiple VPC IP addresses cannot be mapped to the same IP.
  • The original IP and mapped IP do not support broadcast address 255.255.255.255, Class D address 224.0.0.0 - 239.255.255.255, Class E address 240.0.0.0 - 255.255.255.254.
  • The local IP translation of the DC gateway supports mapping of a maximum of 100 IP addresses, and each IP mapping supports a maximum of 20 ACL rules (if you need to increase the quota, please submit a ticket application).

IP Port Translation

  • The mapped IP pool cannot be within the CIDR range of the VPC where the DC gateway is located.
  • ACL rules of multiple mapped IP pools cannot overlap, otherwise it causes network address translation conflicts.
  • IP addresses in multiple mapped IP pools cannot overlap.
  • The mapped IP pool only supports single IP or continuous IP, and the IP range of continuous IPs /24 must be consistent, that is, 192.168.0.1 - 192.168.0.6 is supported but 192.168.0.1 - 192.168.1.2 is not.
  • The mapped IP address pool does not support the broadcast address 255.255.255.255, Class D address 224.0.0.0 - 239.255.255.255 or Class E address 240.0.0.0 - 255.255.255.254.
  • The local source IP port translation supports a maximum of 100 IP pools, and each address pool supports a maximum of 20 ACL rules (if required, you can submit a ticket to request for a quota increase).
  • The original IP addresses and the mapped IP addresses cannot be the broadcast address (255.255.255.255), class D addresses (224.0.0.0-239.255.255.255), and class E addresses (240.0.0.0-255.255.255.254).
  • The original IP port is unique, that is, the same IP port in a VPC can only be mapped to one IP port.
  • The mapped IP port cannot be within the CIDR range of the VPC.
  • The mapped IP ports cannot be repeated, that is, one IP port cannot be mapped to multiple VPC IP ports.
  • The local destination IP port translation supports up to 100 IP port mappings (if you have any needs, you can submit a ticket to request for a quota increase).
  • When you configure IP translation and IP port translation at the same time, if both are matched, IP translation is matched first.
  • When you need to switch from IP translation to IP port translation, clear the original IP translation rules and refresh the page to edit the IP port translation rules.