tencent cloud

Direct Connect

Release Notes and Announcements
Release Notes
Announcements
Product Introduction
Overview
Features
Application Scenarios
Use Limits
Connection Access Point
Relevant Products
Network Planning
Purchase Guide
Billing Overview
Purchasing in the Console
Renewing Connections
Getting Started
Operation Guide
Connections
Direct Connect Gateways
Dedicated Tunnels
Monitoring and Alarming
MACsec Encryption
Cloud Exchange
Cloud Access Management
Overview
Access Policy Types
Access Policy Syntax
Practical Tutorial
Connecting a Local IDC to CVM by Using a VPC NAT Gateway and Direct Connect
Hybrid Cloud Primary/Secondary Communication (DC and VPN)
Best Practices on Direct Connect High Availability and Hybrid Cloud Network
Migrating Cross-Region Dedicated Tunnel to CCN
Migrating IDC to the Cloud Through CCN
Accelerating Routing Convergence Through BGP+BFD (Layer 3)
IDC Local Configuration
Establishing Direct Connect Between Tencent Cloud and Various Cloud Vendors Through Equinix
API Documentation
History
Introduction
API Category
Making API Requests
Direct Connect APIs
Data Types
Error Codes
FAQ
Basic FAQs
Billing Issues
Function Issues
Troubleshooting
General Troubleshooting Solutions
Access Failure and Packet Loss
Agreements
Tencent Cloud Direct Connect Service Level Agreement
Tencent Cloud Direct Connect Service Agreement
Tencent Cloud Direct Connect Review Standards
Contact Us
Glossary
DocumentationDirect Connect

Applying for Internet Tunnels

Focus Mode
Font Size
Last updated: 2025-04-02 18:20:14
An Internet tunnel allows your local IDC to access the public network with a dedicated line in the BGP single line or static single line mode. With a simple configuration on the network device, your IDC can access the public network.
Dear Tencent Cloud users,
To further enhance service elasticity and stability, the Tencent Cloud Direct Connect (DC) - Internet dedicated tunnel has undergone an architecture adjustment and product capability enhancement at 00:00 on August 1, 2022. The updated Internet tunnel will have the following changes:
1. Provides a clear Service Level Agreement for the Internet Dedicated Tunnel to ensure your service quality.
2. Optimizes the minimum bandwidth of the Internet tunnel:
If the tunnel bandwidth is greater than 1,500 Mbps, the minimum bandwidth of each Internet tunnel is 300 Mbps.
If the tunnel bandwidth is not greater than 1,500 Mbps, the minimum bandwidth of each Internet tunnel is 20% of the current bandwidth.
3. Optimizes the bandwidth billing algorithm for the Internet tunnel: The monthly 95th percentile billing mode is optimized to the enhanced 95th percentile billing mode, which calculates the bandwidth peak using multiple peak shaving.
The public network bandwidth fees for the Internet tunnel are calculated as: MAX (enhanced 95th percentile bandwidth value, minimum bandwidth) x Effective day ratio x Product unit price.
Term explanation:
Daily bandwidth peak: The system collects the larger value of the inbound and outbound bandwidth peaks within 5 minutes as a statistical point every 5 minutes, sorts them by day, removes the top 4 peaks, and takes the fifth peak as the daily peak.
Effective day
A day is considered an effective day if there is a 5-minute bandwidth value greater than 500 Kbps on that day.
Effective day ratio
Effective day ratio = Effective days in the month/Number of days in the calendar month
Enhanced monthly 95th percentile bandwidth peak
In a calendar month, the system collects the daily bandwidth peaks of all effective days, sorts them in descending order, and averages the top 5 daily peaks to obtain the enhanced 95th percentile bandwidth peak.
Minimum bandwidth
Minimum bandwidth = Average of the daily minimum bandwidth of effective days
If the tunnel bandwidth is greater than 1,500 Mbps, the daily minimum bandwidth is 300 Mbps.
If the tunnel bandwidth is not greater than 1,500 Mbps, the daily minimum bandwidth is 20% of the current bandwidth.
Note:
For Internet tunnels created before 00:00 on August 1, 2022, the original monthly 95th percentile billing algorithm will continue to be used from August 1, 2022 to January 1, 2023, and will be switched to the enhanced 95th percentile billing mode at 00:00 on January 1, 2023. For relevant adjustments, consult the business manager.
For Internet tunnels created on or after 00:00 on August 1, 2022, the enhanced 95th percentile billing algorithm will be used.
If you decide not to use this resource anymore, delete the resource and relevant data before 00:00 on August 1, 2022 to avoid additional charges.
For contract-related questions, consult the business manager.
Thank you for your continued support.
Sincerely, Tencent Cloud Team

Use Limits

The Internet tunnel feature is under the beta test. Fees are divided into two parts: public network bandwidth fees and public IP fees. If you need to apply for the beta test or learn the billing details, submit a ticket.
Supported regions are shown as follows:
Area
Region
China
East China
Hangzhou, Shanghai, Nanjing, Jinan, Hefei, and Fuzhou
North China
Beijing, Tianjin, and Shijiazhuang
South China
Guangzhou and Shenzhen
Central China
Wuhan, Changsha, Zhengzhou, and Xi'an
Southwest China
Chongqing and Chengdu
Special Administrative Region
Hong Kong (China)
Asia Pacific
Singapore
Singapore
Japan
Tokyo
Korea
Seoul
America
United States
Silicon Valley and Virginia
Tunnel minimum bandwidth:
If the tunnel bandwidth is greater than 1,500 Mbps, the minimum bandwidth of each Internet tunnel is 300 Mbps.
If the tunnel bandwidth is not greater than 1,500 Mbps, the minimum bandwidth of each Internet tunnel is 20% of the tunnel bandwidth.
The Internet tunnel must not be used for operating IDC, Internet Service Provider (ISP), etc., and the user must not possess an ISP business operation qualification license issued by the Ministry of Industry and Information Technology. If they do, their application will not be approved.
Tencent Cloud's Internet tunnel products cannot be resold to other third-party organizations for the purpose of profit-oriented operations. If such behavior is discovered, Tencent Cloud has the right to terminate your use of the Internet tunnel service.

Prerequisites

You have applied for access to the physical Direct Connect. For specific operations, see Applying for Access to Physical Direct Connect.

Directions

Step 1: Applying for Internet Tunnels

1. Log in to the DC console and select Internet Tunnel > Internet Dedicated Tunnel on the left navigation bar.
2. At the top of the Internet Dedicated Tunnel page, click New.
3. Refer to the table below to configure tunnel parameters in the Basic Configuration tab.
Field
Meaning
Name
Name of the Internet tunnel.
Direct Connect
Select the created Direct Connect.
Access region
Region where the Tencent Cloud access point of the Direct Connect is located.
Tunnel type
The system will determine the dedicated line type as V1/V2 or V3 based on the Direct Connect you select.
Access network
You can select the BGP public network or static single line. If you select the static single line, you also need to select the single line type: CTCC, CUCC, or CMCC.
Bandwidth
Configure the bandwidth according to the actual needs. For details, see Use Limits.
4. Click Next.

Step 2: Configuring Advanced Options

1. Configure the following parameters in the Advanced Configuration tab:
Field
Meaning
VLAN ID
One VLAN corresponds to one tunnel, with the value range of [0, 3000):
If the value is 0, it means that only one dedicated tunnel can be created. Use the Layer 3 physical interface for the connection.
If the value is between 1 and 2999, it means that multiple tunnels can be created. Use the Layer 3 sub-interface for the connection. When only the Layer 2 connection is supported under special circumstances, it is recommended to disable the STP protocol on the interface at the IDC side. In the case of multiple dedicated tunnels, when the MSTP dedicated line transparently transmits multiple VLANs, the operator line needs to enable the Trunk mode.
Tencent Cloud primary IP
Interconnection IP on the Tencent Cloud side of the Direct Connect. Do not use the following network segments or network addresses: 169.254.0.0/16, 127.0.0.0/8, 255.255.255.255, 224.0.0.0 - 239.255.255.255, 240.0.0.0 - 255.255.255.254.
Tencent Cloud secondary IP
Secondary interconnection IP on the Tencent Cloud side of the Direct Connect. The secondary IP will be automatically enabled to ensure the normal operation of your business when the primary IP fails and becomes unavailable. Configuring the Tencent Cloud secondary IP is not supported when the mask of the Tencent Cloud IP is 30 or 31.
User boundary IP
Interconnection IP on the user (or the operator) side of the Direct Connect, which needs to be configured by the user.
Routing mode
Supports BGP routing and static routing:
BGP routing: Applicable to the exchange of routing information and network accessibility information between different autonomous systems (AS).
Static routing: Applicable to a simper network environment.
BGP ASN
Enter the AS number of the BGP neighbor on the CPE side. Note that the Tencent Cloud ASN is 45090. If this field is left empty, a random ASN will be assigned.
BGP key
Enter the MD5 value of the BGP neighbor, which is "tencent" by default. If it is left empty, it means that no BGP key is required. The BGP key cannot contain 6 special characters including ?, &, space, ", \\, and +.
IPv6
If you create an Internet dedicated tunnel without enabling IPv6, the system will automatically assign two IPv4 addresses to the tunnel.
If you create an Internet dedicated tunnel with enabling IPv6, the system will automatically assign two IPv4 addresses and two IPv6 addresses to the tunnel.
The IPv6 feature cannot be disabled once it is enabled. If the IPv6 address is not needed, delete the tunnel and recreate one tunnel without enabling IPv6.
2. Click OK.

Connection Status Description

After successful creation, the Internet dedicated tunnel will appear in the Internet dedicated tunnel list, and the connection status will be "in application".
In application The system has received the user's application for a new tunnel and is ready to initiate the creation task.
In configuration The system is distributing parameter configurations. If the connection status remains "in the configuration" for a long time, it indicates there is an issue with the configuration distribution. Contact the architect or submit a ticket for consultation.
Configuration completed The system has completed the configuration based on the parameters you entered, but has not yet pinged your IDC interconnection address. This status supports deletion operations.
Connected The system has successfully pinged your IDC device interconnection address.
In modification If you operate a tunnel change, the tunnel status will change to "in modification".
In deletion If you delete a dedicated tunnel in the console, the connection status will change to "in deletion". If the connection status remains "in deletion" for a long time, it indicates that there is an issue with the system's configuration deletion process. Contact the architect or submit a ticket for consultation.

Documentation

After creating an Internet dedicated tunnel, you can change the tunnel, edit tags, and perform deletion operations in the console. For details, see Managing Internet Tunnels.
When the public IP addresses automatically assigned by the system cannot meet your business needs, you can apply for Internet tunnel public IPs in the console. For details, see Managing Public IPs.


Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback