Background Information

IDCs and VPCs are different network environments, which may increase the O&M workload and cause higher risks for data consistency management. By correctly configuring DNS resolution and establishing VPN connections, you can easily connect your on-premises IDC to network resources in the cloud.

Solutions

Resource Preparation

Environment	VPC	Public IP	Intranet IP	Record Set Type
On-premises	--	121.229..	10.0.0.33	A
Cloud	vpc-newDNS	117.89..	192.168.0.6	A

Solution Description

Connect VPCs to traditional data centers through private lines or VPNs. This practice uses the IPsec-VPN tunnel method. It uses an intranet DNS to synchronize the DNS records of the offline self-managed DNS server to the cloud for domain resolution.

Step 1: Create a VPN gateway

Step 2: Create a user gateway

Step 3: Create an IPsec connection

Step 4: Load the VPN configuration on the on-premises gateway device

Step 5: Configure and use the intranet DNS

Procedure

Step 1: Create a VPN gateway

Log in to the console.
Click at the top of the page, and select a region. In this case, select Huadong1 .
In the left-side navigation bar of the Network Console, click VPN Connection to open the VPN Connection page.
On the VPN Gateway page, click Create VPN Gateway . On the buy page that appears, configure the parameters as prompted. For more information, see Creating and Managing a VPN Gateway Instance.
Click Next .
On the order confirmation page, select the service agreement, and click Confirm Order .
On the order page, click Confirm Order . After the payment is successful, the VPN gateway is created.
Step 2: Create a user gateway
In the left-side navigation bar of the Network Console, click VPN Connection to open the VPN Connection page.
In the left-side navigation bar of the Network Console, click IPsec VPN . The user gateway list page appears.
Click Create User Gateway . For more information, see Creating a User Gateway.
Set the user gateway parameters as prompted, and click OK . The user gateway is created.

Step 3: Create an IPsec connection

In the left-side navigation bar of the Network Console, click IPsec VPN to open the IPsec VPN page.
Click IPsec Connection . The IPsec Connection tab appears.
Click Create IPsec Connection .
Configure the parameters as prompted. For more information, see Creating and Managing IPsec Connections .

Step 4: Load the VPN configuration on the on-premises gateway device

Configure the IPSec connection corresponding to the VPN gateway. You can contact the network engineers of the company to complete the configuration based on the firewall gateway used. For more information, see Configuring an On-premises Gateway.

Step 5: Configure and use the intranet DNS

Navigate to the Intranet DNS page, create an intranet DNS, and associate it with VPC-newDNS .
Find the target intranet domain name, and click Manage Record Sets > Add Record Sets . In the dialog box that appears, add a host record for VPC-newDNS .
After the host records are added, you can view the DNS records on the Parse Records page.
In the left-side navigation bar of the Network Console, click Terminal Node , and click Create terminal node .
Select the service and its VPC, and click Next . On the page that appears, select I have read, and click Confirm Order . The DNS terminal node is created.
Set the DNS service address of the IDC server to the private network address of the terminal node created in the previous step.
Run the nslookup command to view the resolution result. If the resolution succeeds, on-premise devices can access cloud resources.

Intranet DNS