Hybrid Cloud Deployment

Last updated: 2021-08-02 10:05:31

    In hybrid cloud deployment scenarios, you can directly bind CLB instances to IPs in the local IDC off the cloud so as to bind them to real servers across VPCs and IDCs.
    This feature is currently in beta. If you want to use it, for cross-region binding outside the Chinese mainland, please contact your Tencent Cloud rep.

    Solution Advantages

    • A hybrid cloud can be built quickly to seamlessly connect the environments in and off the cloud. CLB can forward requests to CVM instances in the in-cloud VPC and the off-cloud IDC at the same time.
    • The high-quality public network access capabilities of Tencent Cloud can be reused.
    • The rich features of CLB such as layer-4/7 access, health check, and session persistence can be reused.
    • The private networks can be interconnected with each other through CCN, fine-grained routing is supported to guarantee the quality, and diversified tiered pricing is supported to reduce the costs.

    Limits

    • Cross-network CVM instance binding is currently not supported for classic CLB instances.
    • This feature is available only to bill-by-IP accounts. To check your account type, please see Checking Account Type.
    • Cross-region binding 2.0 and hybrid cloud deployment do not support Allow Traffic by Default in security groups, for which you need to allow the client IP and service port on the real server.
    • This feature is currently supported only in Guangzhou, Shenzhen, Shanghai, Jinan, Hangzhou, Beijing, Tianjin, Chengdu, Chongqing, Hong Kong (China), Singapore, and Silicon Vally.
    • TCP and TCP SSL listeners need to use TOA on the real server to get the source IP. For more information, please see TOA Module Loading Method.
    • HTTP and HTTPS listeners need to use X-Forwarded-For (XFF) to get the source IP.
    • UDP listeners cannot get the source IP.

    Prerequisites

    1. Submit an application for beta test eligibility. For cross-region binding in the Chinese mainland, please submit a ticket for application. For cross-region binding outside the Chinese mainland, please contact your Tencent Cloud rep.
    2. Create a CLB instance. For more information, please see Creating CLB Instances.
    3. Create a CCN instance. For more information, please see Creating a CCN Instance.
    4. Associate the Direct Connect gateway associated with the IDC and the target VPC with the created CCN instance. For more information, please see Associating Network Instances.

    Operation Directions

    1. Log in to the CLB console.

    2. On the Instance Management page, click the ID of the target CLB instance.

    3. In the Real Server section on the Basic Info tab, click Configure to bind a private IP of another VPC.

    4. Click Submit in the pop-up box.

    5. In the Real Server section on the Basic Info tab, click Add SNAT IP.

    6. In the pop-up box, select Subnet, click Add to assign an IP, and click Save.

    7. On the instance details page, open the Listener Management tab, and bind a real server to the CLB instance in the listener configuration section. For more information, please see Managing Real Servers.

    8. In the pop-up box, select Other Private IP, click Add a private IP, enter the target IDC private IP, port, and weight, and click Confirm. For more information on ports, please see Server Common Port.

    9. Now you can view the bound IDC private IP in the Bound Real Servers section.