What is peering connection?
VPC peering connection is a cross-VPC network interconnection service used for synchronizing office data. For details, see Product Overview.
Is the connectivity of a peering connection transitive?
A peering connection enables connectivity between two VPCs, but the connectivity cannot be transited.For example, as shown in the following figure, peering connections are created between VPC 1 and VPC 2, and between VPC 1 and VPC 3. However, due to the non-transitivity of peering connections, traffic cannot flow between VPC 2 and VPC 3.
Note:
Even if a peering connection is created, both ends of the connection cannot communicate with each other if routes for sending and returning packets are not configured at both ends.
What is the difference between intra-region and cross-region peering connections?
- Intra-region peering connections are mainly used to connect applications located in different VPCs within the same region.
- Cross-regional peering connections are mainly used to implement connectivity between VPCs in different regions.
What are the restrictions on using peering connection?
When using the peering connection, you need to be aware of the restrictions on resources and connections. For details, see Usage Limitations.
If a peering connection is deleted at one end, is the VPC at the other end still accessible from the peer end?
No. The peering connection can be disconnected at either end at any time. The connection is ineffective immediately upon disconnection. The VPC at either end is accessible only after the connection is created again.
Can I connect VPC peering connection to the VPC of other cloud accounts?
Yes. This is possible as long as the owner of the other VPC accepts your peering connection request.
Can I create a peering connection between two VPCs with overlapped IP ranges?
No. The IP ranges of VPCs at the two ends of a peering connection cannot overlap.
Is traffic encrypted?
No. After a peering connection is created, access between two VPCs is similar to that between two CVMs in the same VPC, without additional encryption. Network traffic within a VPC is always isolated from other networks.
Is a single point of failure possible?
Single points of failure or bandwidth bottlenecks cannot occur because a peering connection between VPCs is not a gateway or a VPN connection and it does not depend on separate hardware.