<p><strong>Background Information</strong></p> <p>The VPC and Internet are connected by the combination of IGW and classic ELB in East China region. Traffic in the inbound and outbound direction between VPC and the Internet are blocked by default. It requires to configure security group in both inbound and outbound direction for VPC and Internet connection.</p> <p>The following example illustrates how to connect VPC-1 and the Internet in East China region.</p> <p><strong>Prerequisites</strong></p> <p>ECS instances are deployed in a subnet of DMZ network of VPC-1.</p> <p><strong>Procedure</strong></p> <p><strong>Method 1: Connect single ECS instance of VPC-1 to Internet via IGW gateway</strong></p> <p><strong>Note:</strong> The following is a brief description of the procedure. For more information, see th<strong>e</strong> Internet IGW Operation Manual.</p> <p>1.&nbsp;&nbsp;&nbsp;Create an IGW for VPC-1.</p> <p>2.&nbsp;&nbsp;&nbsp;Create Internet connection (ECS) and select an ISP, bandwidth and one ECS of VPC-1.</p> <p>3.&nbsp;&nbsp;&nbsp;Manage the security policies for the Internet connection (ECS) and create security policies in both inbound and outbound directions.&nbsp;</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704180950-1d1e63a89666.png" style="height:232px; width:830px" /></p> <p><strong>Method 2: Internet users access to multiple ECS instances of VPC-1 via IGW DNAT and classic ELB.</strong></p> <p><strong>Note:</strong> The following is a brief description of the procedure. For more information, see ELB Operation Guide and IGW Operation Guide.</p> <p>1.&nbsp;&nbsp;&nbsp;Create a classic ELB instance in VPC-1 in East China region.</p> <p>2.&nbsp;&nbsp;&nbsp;Create a server resources pool for the ELB instance and add the ECS instances to the pool.</p> <p>3.&nbsp;&nbsp;&nbsp;Create a listener for the ELB instance and bind it to the pool.</p> <p>4.&nbsp;&nbsp;&nbsp;Create an IGW for VPC-1.</p> <p>5.&nbsp;&nbsp;&nbsp;Apply for an Internet IP address via the DNAT service of IGW.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704181044-1b4e11c49165.png" style="height:300px; width:830px" /></p> <p>6.&nbsp;&nbsp;Use the Internet IP and the Intranet IP of the classic ELB instance to create a DNAT rule.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704181255-179c3ddc9dd4.png" style="height:522px; width:830px" /></p>