Network Planning Best Practices
CFW supports two types of firewalls: NAT Firewall (NAT_CFW) and Inter-VPC Firewall (VPC_CFW). The network planning shown in the following figure is for your reference.
NAT CFW Network Planning Best Practices
NAT CFW is used between the Internet and a VPC.
VPC_CFW Network Planning Best Practices
The VPC firewall is used to protect traffic between VPCs, whether they belong to the same tenant or different tenants.