This document helps users maximize the secure and reliable use of Cloud Virtual Machine.
Security and Network
- Restrict access: Restrict access by using a firewall (Security Group) to allow trusted address access instances, configuring the strictest rules in the security group. For example, restrict port access, IP address access, etc.
- Security level: Create different security group rules and apply them to instance groups with different security levels to ensure that instances running important businesses cannot be easily accessed from outside.
- Network logical isolation: Select the Virtual Private Cloud for logical partitioning.
- Account permission management: When multiple different accounts are required to control the same set of cloud resources, users can use the Policy Mechanism to control their access permission to cloud resources.
- Secure login: Try to use SSH Token to log in to the user's Linux instance. If you use the Password Log-in to log in to the instance, you need to change the password periodically.
Storage
- Hardware storage: For data with extremely high reliability requirements, please use Converge Cloud Cloud Block Storage to ensure the persistent storage reliability of data. Try not to select Local Disk. For more information, please see Cloud Block Storage Product Documentation.
Backup and Restoration
- Backup instance in the same region: You can use Custom Image and Cloud Block Storage Snapshot to back up your instance and business data. For details, see Cloud Block Storage Snapshot and Create Custom Image.
- Cross-region backup instance: You can use Copy Image to copy and back up instances across regions.
- Mask instance failure: You can use Elastic IP to perform domain name mapping to ensure that the service IP can be quickly redirected to another Cloud Virtual Machine instance when the server is unavailable, thereby masking instance failures.
Monitoring and Alarms
- Monitor and Event Response: Check monitoring data regularly and set appropriate alarms. For more information, please see Cloud Monitor Product Documentation.
- Burst request processing: Use Auto Scaling to ensure the stability of Cloud Virtual Machine during service peaks and automatically replace unhealthy instances.