Security Group
A Security Group is a virtual firewall with state-based packet filtering, used to control network access for one or more CVMs.
You can group CVMs with the same network security requirements into a security group and filter inbound and outbound traffic based on security policies.
- Security Groups act as virtual firewalls, ensuring CVMs in the same VPC follow consistent network policies.
Peering Connections
A Peering Connection allows communication between different VPCs, including cross-account and cross-region scenarios.
Public Network Gateway
A Public Network Gateway is a CVM that forwards traffic between the internet and VPCs.
CVMs without a public IP can access the internet via a public gateway.
Route Table
A Route Table is a collection of routing policies that define the traffic flow for subnets within a VPC.
- A subnet can associate with only one route table, but a table can serve multiple subnets in the same VPC.
Routing Policy
A Routing Policy specifies the path network traffic takes. It includes three parameters:
- Destination: The target IP range (cannot be the VPC's own range)
- Next hop type: e.g., public gateway, VPN gateway
- Next hop: The specific gateway to which traffic is directed
Private IP
A Private IP is assigned to a CVM in a VPC or basic network.
- Not accessible from the internet
- Used for communication between instances in the same VPC
NAT Gateway
A NAT Gateway translates private IPs in a VPC to public IPs, enabling internet access when networks are isolated.
- Supports up to 5 Gbps traffic surge
- Supports 10,000,000 concurrent connections
- High availability with master/slave hot backup for automatic failover
- NAT Gateways allow private CVMs without public IPs to securely access the internet and provide automatic failover.
Virtual Private Cloud (VPC)
A Virtual Private Cloud (VPC) is a logically isolated network within Converge Cloud.
- Similar to a traditional on-premises network
- Supports services such as CVMs, Load Balancers, and databases
- Flexible IP ranges, routing policies, and subnets
- Can use EIPs, NAT Gateways, and public gateways for internet access or hybrid connectivity
EIP (Elastic IP)
An Elastic IP (EIP) is a static public IP that can be dynamically bound or unbound to CVMs or NAT Gateways.
Main functions:
- Retain an IP for DNS or licensing purposes
- Enable failover by remapping to another instance without downtime
Public IP
A Public IP is an internet-accessible IP used for communication between CVMs and the internet or other Converge Cloud resources.
Subnet
A Subnet segments a VPC into different IP ranges.
- Supports secure deployment of multi-layer applications
- Allows elastic hosting of services within the VPC