Cloud Virtual Desktop (CVD) instances cannot access the Internet by default. If you need to access the Internet while using a CVD instance, you can enable Internet access in the Network Management module of the CVD console.
Enabling Internet Access
Note:
Enabling Internet access incurs additional fees, which are calculated separately from CVD fees. For pricing details, see NAT Gateway Billing Overview.
When Internet access is enabled, the system creates a pay-as-you-go NAT gateway and an elastic IP address (EIP). The default outbound bandwidth is 100 Mbps. If you need higher bandwidth, modify the value in the NAT Gateway console.
2. If service authorization has not been performed, a pop-up window will automatically appear for authorization. Click Grant to proceed.
Note:
Enabling Internet access for CVD instances involves using other Tencent Cloud services, including Virtual Private Cloud (VPC), subnet, NAT Gateway, public IP address, and route table. You need to authorize CVD to call the APIs of these cloud services for related operations (creating, modifying, querying, and deleting).
Step 2: Enabling Internet Access
1. On the Network Management page of the CVD console, view the VPC network and subnet information of your CVD instances, and click Enable Internet Access in the operation column.
2. In the Enable Internet Access pop-up window, enter the gateway name, confirm the fees, and click Activate Now.
Note:
If the auto-disabling feature is enabled, when the CVD backend detects that all CVD instances in the current VPC network have been deleted, and the NAT gateway is created in the CVD console and is not associated with any other route tables, the CVD service will automatically delete the NAT gateway and EIP, remove the default route from the current route table, and disable Internet access. This saves NAT gateway costs.
3. Confirm the prompt information. If there are no concerns, click I understand and confirm to activate. to enable Internet access for your CVD instances.
Warning:
After Internet access is enabled for CVD instances, all traffic in the route table of the subnet where the CVD instances reside will be pointed to the NAT gateway by default. Check whether the route table is associated with other subnets or whether other business servers exist in the subnet, as this will affect the network traffic for other businesses.
4. After Internet access is enabled, the status in the list on the Network Management page changes to Available and the operation column shows Disable Internet Access. This indicates successful enabling, and you can now access the Internet from within your CVD instances.
2. In the list on the Network Management page, find the subnet for which you want to disable Internet access and click Disable Internet Access.
3. Disabling Internet access will delete the NAT gateway and EIP. Ensure that this NAT gateway is not used by other services, and click OK.
4. Reconfirm to disable Internet access. Click OK. Confirm to disable it. to disable Internet access for CVD instances in the current subnet.
5. After Internet access is disabled, the status in the list on the Network Management page changes to "-" and the operation column shows Enable Internet Access. This indicates successful disabling, and you can no longer access the Internet from within your CVD instances.
Other Scenario 1: The VPC Network or Subnet Having a NAT Gateway
In this scenario, the VPC network or subnet where your CVD instance resides already has a NAT gateway. If a default route already exists pointing all traffic to this NAT gateway, the CVD instance can access the Internet directly. If the CVD instance cannot access the Internet, configure the route table of the subnet to point all traffic to the NAT gateway or create a NAT gateway specifically for the CVD instance. You can refer to the following steps to configure the route table of the subnet.
Enabling Internet Access
1. On the Network Management page of the CVD console, you can see that the current VPC network or subnet already has a NAT gateway. The status column shows Available and the operation column shows Configure Route Table.
2. Click Configure Route Table. Confirm the information and click Confirm to enable Internet access for CVD instances in the current subnet.
Warning:
After the route table is configured, all traffic from subnets associated with this route table will be pointed to the NAT gateway by default. Check whether the route table is associated with other subnets or whether other business servers exist in the subnet of the CVD instance, as this will affect the network traffic for other businesses.
3. Reconfirm the information. Click OK. Configure now. to enable Internet access for CVD instances in the current subnet.
4. After the configuration is completed, the status in the list on the Network Management page changes to Available and the operation column shows Disable Internet Access. This indicates successful enabling, and you can now access the Internet from within your CVD instances.
Disabling Internet Access
1. The auto-disabling feature does not apply to scenarios where a NAT gateway already exists in the VPC network or subnet. NAT gateways and EIPs created outside the CVD console do not support auto-disabling.
2. When you click Disable Internet Access, a pop-up window will prompt that this NAT gateway is not created in the CVD console. You need to disable Internet access for CVD instances on the Route Table page in the VPC console.
3. Go to the Route Table page in the VPC console and find the route table used by the subnet of CVD instances, or click the route table ID on the Network Management page of the CVD console to redirect to the Route Table page.
4. Disable or delete the default route to disable Internet access for the CVD instances.
Warning:
Disabling or deleting the default route in a route table affects the network traffic of all subnets associated with it. To avoid impacting other businesses, check whether the route table is associated with other business subnets before you proceed.
5. If you need to delete the NAT gateway and EIP, manually perform the deletion in the NAT Gateway and Public IP Addresses modules of the VPC console based on your business requirements. Confirm that no other businesses are using the NAT gateway and EIP before you delete them.
Other Scenario 2: The NAT Gateway Associated with Multiple Route Tables
In this scenario, after Internet access is enabled in the CVD console, the NAT gateway used by CVD instances is associated with multiple route tables. The auto-disabling feature is no longer applicable, and you cannot disable Internet access for CVD instances in the CVD console. To disable Internet access for CVD instances, you need to find the route table used by the subnet of CVD instances on the Route Table page in the VPC console and disable or delete the default route.
1. When you attempt to disable Internet access in the CVD console, the system will detect whether the NAT gateway is associated with multiple route tables. If the NAT gateway is associated with multiple route tables, you need to perform the operation on the Route Table page in the VPC console.
2. Go to the Route Table page in the VPC console and find the route table used by the subnet of CVD instances, or click the route table ID on the Network Management page of the CVD console to redirect to the Route Table page.
3. Disable or delete the default route to disable Internet access for the CVD instances.
Warning:
Disabling or deleting the default route in a route table affects the network traffic of all subnets associated with it. To avoid impacting other businesses, check whether the route table is associated with other business subnets before you proceed.
4. If you need to delete the NAT gateway and EIP, manually perform the deletion in the NAT Gateway and Public IP Addresses modules of the VPC console based on your business requirements. Confirm that no other businesses are using the NAT gateway and EIP before you delete them.
Assigning a Dedicated Route Table to the Subnet of CVD Instances
If the route table used by the subnet where the CVD instances reside is associated with multiple business subnets, and you need to enable Internet access for the CVD instances without affecting the network traffic of servers in other subnets, it is recommended to assign a dedicated route table to the subnet of CVD instances.
1. Log in to the VPC console. On the Route Table page, click Create.
2. In the Create Route Table dialog box, enter the route table name, select the associated network (the VPC network where the CVD instances reside), delete the default route policy, and click Create.
3. After the route table is created, associate it with the subnet where the CVD instances reside.
4. Select the subnet where the CVD instances reside. If multiple subnets exist, proceed with caution to avoid impacting routing for other subnets. Click OK to complete assigning a dedicated route table to the subnet of CVD instances.
5. If you still need to enable Internet access for CVD instances, see Enabling Internet Access or manually create a NAT gateway.
