Network Planning Best Practices
CFW supports two types of firewalls: NAT Firewall (NAT CFW) and Inter-VPC Firewall (VPC CFW). The network planning shown in the following figure is for your reference.
NAT CFW Network Planning Best Practices
NAT CFW is used between the Internet and a VPC.
VPC CFW Network Planning Best Practices
The VPC firewall is used to protect traffic between VPCs, whether they belong to the same tenant or different tenants.