Creating an Internet Tunnel

Last updated: 2021-01-15 18:54:07

    An Internet tunnel allows your local IDC to access the public network with a dedicated line in the BGP or static mode. With a simple configuration on the network device, your IDC can access the public network.


    • The Internet tunnel is currently in beta, and its use will incur public network bandwidth fees and public IP fees. To try it out or learn about the billing details, please submit a ticket.
    • The Internet tunnel is available in Beijing, Shanghai, Guangzhou, Shenzhen, Chengdu, Chongqing, Nanjing, and Tianjin.
    • If the bandwidth of the accessed connection is less than 10 Gbps (accessing to the Tencent Cloud connection port of 10 GbE), the base bandwidth is fixed to 300 Mbps.
    • If the bandwidth of the accessed connection is 10 Gbps or above (accessing to the Tencent Cloud connection port of 100 GbE), the base bandwidth will be 10% of the Internet tunnel bandwidth.
    • The Internet tunnel cannot be used in IDC and ISP operations, and the users who have an ISP license issued by the MIIT are ineligible.
    • The Internet tunnel cannot be resold for profit; otherwise you will be prohibited from use.


    You have applied for a connection as instructed in Applying for Connection.


    Step 1: apply for an Internet tunnel

    1. Log in to the Direct Connect console and click Internet Tunnels in the left sidebar.
    2. Click +New at the top of the Internet Tunnels page.
    3. Complete the following configurations in the Basic tab, and check I have read and agreed that the monthly billable base bandwidth is 300 Mbps.
      Field Description
      Name Enter a name for the Internet tunnel to be created.
      Connection Select an existing connection.
      Access Region The region where the access point for your Tencent Cloud connection resides
      Tunnel Automatically set to 1.0 or 2.0 according to the connection you have selected.
      Access Network Select either BGP or Static. You also need to select the provider from China Telecom, China Unicom and China Mobile for Static.
      Bandwidth Set a bandwidth value of at least 300 Mbps. If the monthly bandwidth usage is less than 300 Mbps, you will still be charged based on 300 Mbps.
    4. Click Next.

    Step 2: complete the advanced configurations

    1. Configure the following parameters in the Advanced tab.
      Field Description
      VLAN ID A VLAN represents a tunnel. Enter a value in the range of 0-3000. Entering “0” means one dedicated tunnel can be created. MSTP connection passthrough to multiple VLANs requires the carrier's line to enable the Trunk mode.
      Interconnection Method
      • By default, Automatically assigned is selected for 2.0 tunnels.
      • Both Manually specified and Automatically assigned are supported for 1.0 tunnels. If Automatically assigned is selected, there is no need to configure Tencent Cloud Primary Edge IP and CPE Peer IP
      Tencent Cloud Primary Edge IP Enter the connection IP address on the Tencent Cloud side.
      CPE Peer IP Configure the connection IP address on the user (or carrier) side.
      BGP ASN Enter the BGP neighbor AS number on the CPE side. Note that 45090 is Tencent Cloud ASN. If this field is left empty, a random ASN will be assigned.
      BGP Key It defaults to `tencent`.
    2. Click OK.

    Connection Status

    After the Internet dedicated tunnel is created, it will be displayed on the Internet Tunnels page in the Applying connection status.

    • Applying
      The system has received your application for a new dedicated tunnel and is ready to start the creation.
    • Configuring
      The system is delivering the configuration. If this status lasts for a long time, there may be an exception. In this case, contact your architect or submit a ticket for assistance.
    • Configured
      The system has completed the configuration based on the specified parameters, but has not been able to ping through the IP address of your IDC. A dedicated tunnel in this status can be deleted.
    • Connected
      The system pings to your IDC device successfully.
    • Modifying
      If you modify an Internet tunnel, its status will become Modifying.
    • Deleting
      If you delete your dedicated tunnel in the console, the connection status of the dedicated tunnel becomes Deleting. If this status lasts for a long time, there may be an exception. In this case, contact your architect or submit a ticket for assistance.


    After an Internet tunnel is created, you can modify or delete it, edit tags, and perform other operations on the console. For detailed directions, see Managing Internet Tunnels.

    Was this page helpful?

    Was this page helpful?

    • Not at all
    • Not very helpful
    • Somewhat helpful
    • Very helpful
    • Extremely helpful
    Send Feedback