Virtual Private Cloud:Virtual private cloud and vSwitch

Create a VPC and a vSwitch

1. Go to the Create VPC page in the VPC console.

2. Configure the VPC:

   1. Region: Select the region where you want to create cloud resources.

   2. IPv4 CIDR block: Select a recommended CIDR block from the console or enter a custom CIDR block. In scenarios such as VPC peering, we recommend that you configure a CIDR block that does not overlap with existing VPCs to avoid CIDR block conflicts during VPC peering. To avoid CIDR block conflicts and ensure network extensibility, we recommend that you create a VPC with IPAM.

      1. We recommend that you use a private IPv4 address specified in RFC1918 as the CIDR block of your VPC, with a subnet mask of 16 to 28 bits. Examples: 10.0.0.0/16, 172.16.0.0/16, and 192.168.0.0/16.

      2. You cannot use 100.64.0.0/10, 224.0.0.0/4, 127.0.0.0/8, or 169.254.0.0/16 as the IPv4 CIDR block of your VPC.

3. Configure the vSwitch:

   1. Zone: Select the zone where you want to create cloud resources. You should select a zone based on the support status and inventory (whether it is sold out) of the resources you need in that zone.

   2. IPv4 CIDR block: Select the default CIDR block from the console or adjust the CIDR block range as needed.

   3. Add more vSwitches: To prevent your applications from being affected by failures in a single zone, you can create multiple vSwitches across different zones. You can create vSwitches during the VPC creation process or add more vSwitches later in the VPC console - vSwitch.

Delete a VPC and a vSwitch

Click Delete in the Actions column or on the details page of the target VPC or vSwitch. The system will check whether there are any cloud resources or linked resources that have not been deleted. If there are dependent resources, you must release all resources before you can delete the VPC and vSwitch.

Enable IPv6

• When you create a VPC and a vSwitch, you can select Assign BGP (Multi-ISP) from the IPv6 option drop-down list to enable IPv6.

• For an existing VPC, you can click Enable IPv6 in the IPv6 CIDR Block column of the target VPC, and select Assign BGP (Multi-ISP) as the IPv6 CIDR block type. You can select Automatically Enable IPv6 For All VSwitches In The VPC, or click Enable IPv6 in the IPv6 CIDR Block column of the target vSwitch to enable IPv6 for a specific vSwitch.

Disable IPv6

You can click Disable IPv6 in the IPv6 CIDR Block column of the target VPC or vSwitch. However, to disable IPv6 for a VPC, you must first disable IPv6 for all vSwitches in the VPC and delete the IPv6 gateway of the VPC.

# Specify the region where the VPC will be created
provider "alicloud" {
  region = "cn-hangzhou"
}

# Automatically obtain a list of available zones where vSwitches can be created
data "alicloud_zones" "available_zones" {
  available_resource_creation = "VSwitch" # Query zones where vSwitches can be created in the VPC
  # available_instance_type = "ecs.g7.large"  # Query zones where ECS instances can be created in the VPC
  # available_resource_creation = "slb"  # Query zones where SLB instances can be created in the VPC
}

# Create a dual-stack VPC 
resource "alicloud_vpc" "example_vpc" {
  vpc_name    = "example_vpc_name"
  cidr_block  = "10.0.0.0/16"
  enable_ipv6 = true  # Enable IPv6, set to false to disable IPv6
  ipv6_isp    = "BGP" # Specify the IPv6 CIDR block type
}

# Create a dual-stack vSwitch 
resource "alicloud_vswitch" "example_vswitch" {
  vswitch_name         = "example_vswitch_name"
  cidr_block           = "10.0.0.0/24"
  vpc_id               = alicloud_vpc.example_vpc.id
  zone_id              = data.alicloud_zones.available_zones.zones.0.id
  enable_ipv6          = true # Enable IPv6, set to false to disable IPv6
  ipv6_cidr_block_mask = 1    # Specify the last 8 bits of the vSwitch IPv6 CIDR block 
} 

Add a secondary CIDR block

1. On the Basic Information page of the target VPC, click the CIDR Block Management tab. You can add IPv4 or IPv6 secondary CIDR blocks.

2. For IPv4 secondary CIDR blocks, you can add them in three ways:

   • Recommended CIDR Block: Quickly add a CIDR block by selecting one from 10.0.0.0/16, 172.16.0.0/16, or 192.168.0.0/16.

   • Advanced CIDR Block Configuration: Customize the secondary CIDR block.

   • IPv4 CIDR Block Assigned By IPAM: Use IPAM to avoid CIDR block conflicts. If you have an IPAM address pool with preset CIDR blocks, we recommend that you select this option. To configure, first select an address pool, and then configure the Subnet Mask.

3. For IPv6 secondary CIDR blocks:

   • If IPv6 is not enabled for the VPC, click Enable IPv6 and select Assign BGP (Multi-ISP) as the IPv6 CIDR block type. You can select Automatically Enable IPv6 For All VSwitches In The VPC, or click Enable IPv6 in the IPv6 CIDR Block column of the target vSwitch to enable IPv6 for a specific vSwitch.

   • For a VPC with IPv6 enabled, click Add IPv6 CIDR Block and select Assign BGP (Multi-ISP) as the IPv6 CIDR Block Type.

Delete a secondary CIDR block

On the Basic Information page of the target VPC, click the CIDR Block Management >IPv4 CIDR Block tab or IPv6 CIDR Block tab, find the secondary CIDR block that you want to delete, and click Delete in the Actions column.

Create a reserved CIDR block

1. On the Basic Information page of the target vSwitch, click the Reserved CIDR Block tab. You can add IPv4 or IPv6 reserved CIDR blocks in two ways:

   • Specify CIDR Block: Precisely control the CIDR block to be reserved.

   • Specify Subnet Mask: The system automatically allocates a reserved CIDR block from available CIDR blocks.

2. For IPv6 CIDR blocks, if IPv6 is not enabled for the vSwitch, click Enable IPv6. In the Enable IPv6 dialog box that appears, set the IPv6 CIDR block for the vSwitch.

   If IPv6 is not enabled for your VPC, in the Enable IPv6 dialog box that appears, first set IPv6 CIDR Block Type to the default Assign BGP (Multi-ISP), and then set the IPv6 CIDR block for the vSwitch.

View occupied IP segments

On the Basic Information page of the target vSwitch, click the Reserved CIDR Block >IPv4 CIDR Block tab or IPv6 CIDR Block tab, find the target reserved CIDR block, and click View Occupied IP Addresses in the Actions column. You can view the occupied IP segments and the corresponding ENIs.

Delete a reserved CIDR block

Before you delete a reserved CIDR block, make sure that no IP segments in the CIDR block are occupied.

On the Basic Information page of the target vSwitch, click the Reserved CIDR Block >IPv4 CIDR Block tab or IPv6 CIDR Block tab, find the reserved CIDR block that you want to delete, and click Delete in the Actions column.