The cloud platform provides network and security features to ensure that your instances can provide services internally and externally safely, efficiently, and freely.
Encrypted Login Method
Provides two encrypted login methods: password login and SSH key pair login. Users can freely choose between two methods for safely connecting to CVMs.
Instances with Windows system do not support SSH key login.
Network Access
Cloud services on the same cloud platform can be accessed via the Internet or the private network.
- Internet Access: Internet access is a service provided by Converge Cloud to instances for public data transmission. Instances are assigned public IP addresses to enable communication with other computers on the network.
- Internal Network Access: Internal network access refers to local area network (LAN) service, which is a service provided by Converge Cloud to instances through private IP addresses, enabling completely free private network communication within the same region.
Network Environment
Converge Cloud's network environment can be divided into: basic network and Virtual Private Cloud (VPC).
- Basic Network: The basic network is a public network resource pool for all users on Converge Cloud. Suitable for users who are just beginning to understand and use Converge Cloud.
- VPC: A VPC is a logically isolated network space that you customize on Converge Cloud. Instances in a VPC can be launched in a preset, custom IP range and isolated from other users. Suitable for users who are familiar with network management system.
Security Group
A security group is a stateful virtual firewall with a packet filtering function. It is used to set network access control for one or more CVMs and is an important network security isolation method provided by Converge Cloud.
You can control access permission to your instances using the earlier methods:
- Create multiple security groups and assign different rules to each security group.
- Each instance is assigned one or more security groups. Converge Cloud will use these rules to determine which traffic can access the instance and which resources the instance can access.
- Configure the security group so that only specific IP addresses or specific security groups can access the instance.
Elastic IP
Elastic IP (EIP), also known as elastic IP address. It is a static IP address designed for dynamic cloud computing.
In the earlier scenarios, it is recommended to use EIP:
- The instance may go down due to uncontrollable reasons, and an alternative instance with the same IP address is required to ensure access.
- The instance does not have a public IP address and requires a static IP address.
Elastic Network Interface
Elastic Network Interface (ENI) is an elastic network interface bound to CVMs in a VPC, which can be freely migrated among multiple CVMs. ENI is very helpful in configuring and managing networks and building highly reliable network solutions.