Skip to main content
Supported Regions:上海

Intranet Connectivity

This page describes how the CloudRun service accesses other resources in your Tencent Cloud account, such as cvm, mysql, redis, etc.

tip
  • Currently, the Intranet Connectivity feature is only supported in Standard Edition and above plans. The Personal Edition does not currently support this feature.
  • If you are using the Personal Edition and need this feature, please go to the Package Management page to upgrade your plan.

By default, the CloudRun service and other resources under your Tencent Cloud account (such as cvm, mysql, redis, etc.) cannot communicate over the internal network. If you need to access other resources, you must enable the Intranet Connectivity feature for the service.

Use Cases​

By enabling the Intranet Connectivity feature, you can meet the following typical internal network access requirements:

  • Access Lighthouse services via the internal network.
  • Access services in another account's VPC via the internal network. The VPCs of the local account and the peer account are connected through CCN or Peering Connection.
tip

Both of the above scenarios require the following linked operations in Service Details -> Service Settings -> Network Settings:

  1. First, turn on "Private Network" and bind a VPC;
  2. Then, turn off the "Public Network Access" switch.

The two are linked: without first turning on "Private Network", you cannot turn off "Public Network Access". After turning off "Public Network Access", the platform's default public egress is closed, and all outbound traffic (including traffic to peer VPC resources) will go through your VPC internal network.

"Turn off Public Network Access" controls the service instance's outbound traffic path. It does not affect access to the service from the outside via the public domain.

Enabling Intranet Connectivity​

Prerequisites:

  • You need to create a VPC network segment in Tencent Cloud Virtual Private Cloud.
  • The region must be set to Shanghai region.
  • Use a subnet mask of >= 22 for the VPC network segment whenever possible.
  • The subnet mask should be <= 28. This subnet will be occupied by the CloudRun service. Please avoid creating other resources in this subnet to prevent any impact on the CloudRun service.

Enable:

    1. Log in to Tencent CloudRun.
    1. Select the service for which you want to enable the intranet connectivity function, and click Service Details.
    1. Click Service Settings.
    1. In Access Configuration, click the edit button.
    1. Enable the Private Network switch.
    1. Select the VPC you created and its subnet.
    1. Click Save and wait for the service update to complete.
    1. After the service update is complete, the CloudRun service can access resources within the VPC. When creating resources such as mysql and redis, select this VPC.

Usage Notes​

  • Ensure that the VPC network has allocatable IP addresses; otherwise, the CloudRun service instance may fail to start due to the inability to allocate an IP.
  • If the service accessing the VPC needs to connect to the public network, ensure that the VPC has a NAT gateway and the route configuration is correct. For more information, see NAT Gateway Description.