Tencent Cloud

Recent Pages

Overview

Last updated: 2023-11-28 20:23:18

When an inter-VPC firewall is set to Custom route, a custom route can be created to suit your needs.
Important:
Before using this mode, make sure that CFW has been connected to the classic network through peering connections or CCN instances.
Concepts
Firewall instance
Similar to CVM, it is a virtualized instance that can perform all features of a firewall. View more details in the CFW console.
Firewall VPC (CCN mode)
A VPC that is created by CFW in CCN can direct user network traffic to firewall instances, so as to enable protection. Such VPC is named "Firewall VPC_DO NOT MODIFY". Go to the CCN instance details page and view more details.
Notes
A firewall VPC will be created in each region to handle traffic. Please do not modify it.
﻿
Firewall route table (CCN mode)
A route table that is automatically created by CFW can distribute traffic. Such route table is named "Firewall VPC route table_DO NOT MODIFY".
Important
A firewall route table will be created in each region. Please do not modify it.
﻿
Firewall VPC
A VPC that is created by CFW in CCN can direct user network traffic to firewall instances, so as to enable protection. Such VPC is named "Firewall VPC_DO NOT MODIFY". Go to the CCN instance details page and view more details.
Notes
A firewall VPC will be created in each region to handle traffic. Please do not modify it.
﻿
Working Mode
VPC mode
﻿
CCN mode
In this mode where the inter-VPC firewall and all service VPCs are connected to the same CCN instances, service traffic is directed via a firewall VPC subnet.
﻿