Alibaba Cloud

Alibaba Cloud

Elastic
Elastic IP Address
IP Address
Best practices
Best practices

Document Version: 20200905

Document Version: 20200905

Elast ic IP Address Best pract ices · Legal disclaimer

Legal disclaimer
Alibaba Cloud reminds you t o carefully read and fully underst and t he t erms and condit ions of t his legal
disclaimer before you read or use t his document . If you have read or used t his document , it shall be
deemed as your t ot al accept ance of t his legal disclaimer.

1. You shall download and obt ain t his document from t he Alibaba Cloud websit e or ot her Alibaba
Cloud-aut horized channels, and use t his document for your own legal business act ivit ies only. T he
cont ent of t his document is considered confident ial informat ion of Alibaba Cloud. You shall
st rict ly abide by t he confident ialit y obligat ions. No part of t his document shall be disclosed or
provided t o any t hird part y for use wit hout t he prior writ t en consent of Alibaba Cloud.

2. No part of t his document shall be excerpt ed, t ranslat ed, reproduced, t ransmit t ed, or
disseminat ed by any organizat ion, company or individual in any form or by any means wit hout t he
prior writ t en consent of Alibaba Cloud.

3. T he cont ent of t his document may be changed because of product version upgrade, adjust ment ,
or ot her reasons. Alibaba Cloud reserves t he right t o modify t he cont ent of t his document
wit hout not ice and an updat ed version of t his document will be released t hrough Alibaba Cloud-
aut horized channels from t ime t o t ime. You should pay at t ent ion t o t he version changes of t his
document as t hey occur and download and obt ain t he most up-t o-dat e version of t his document
from Alibaba Cloud-aut horized channels.

4. T his document serves only as a reference guide for your use of Alibaba Cloud product s and
services. Alibaba Cloud provides t his document based on t he "st at us quo", "being defect ive", and
"exist ing funct ions" of it s product s and services. Alibaba Cloud makes every effort t o provide
relevant operat ional guidance based on exist ing t echnologies. However, Alibaba Cloud hereby
makes a clear st at ement t hat it in no way guarant ees t he accuracy, int egrit y, applicabilit y, and
reliabilit y of t he cont ent of t his document , eit her explicit ly or implicit ly. Alibaba Cloud shall not
t ake legal responsibilit y for any errors or lost profit s incurred by any organizat ion, company, or
individual arising from download, use, or t rust in t his document . Alibaba Cloud shall not , under
any circumst ances, t ake responsibilit y for any indirect , consequent ial, punit ive, cont ingent ,
special, or punit ive damages, including lost profit s arising from t he use or t rust in t his document
(even if Alibaba Cloud has been not ified of t he possibilit y of such a loss).

5. By law, all t he cont ent s in Alibaba Cloud document s, including but not limit ed t o pict ures,
archit ect ure design, page layout , and t ext descript ion, are int ellect ual propert y of Alibaba Cloud
and/or it s affiliat es. T his int ellect ual propert y includes, but is not limit ed t o, t rademark right s,
pat ent right s, copyright s, and t rade secret s. No part of t his document shall be used, modified,
reproduced, publicly t ransmit t ed, changed, disseminat ed, dist ribut ed, or published wit hout t he
prior writ t en consent of Alibaba Cloud and/or it s affiliat es. T he names owned by Alibaba Cloud
shall not be used, published, or reproduced for market ing, advert ising, promot ion, or ot her
purposes wit hout t he prior writ t en consent of Alibaba Cloud. T he names owned by Alibaba Cloud
include, but are not limit ed t o, "Alibaba Cloud", "Aliyun", "HiChina", and ot her brands of Alibaba
Cloud and/or it s affiliat es, which appear separat ely or in combinat ion, as well as t he auxiliary
signs and pat t erns of t he preceding brands, or anyt hing similar t o t he company names, t rade
names, t rademarks, product or service names, domain names, pat t erns, logos, marks, signs, or
special descript ions t hat t hird part ies ident ify as Alibaba Cloud and/or it s affiliat es.

6. Please direct ly cont act Alibaba Cloud for any errors of t his document .

> Document Version:20200905 I

Elast ic IP Address Best pract ices · Document convent ions

Document conventions
Style Description Example

A danger notice indicates a situation Danger:

Danger that will cause major system changes,
Resetting will result in the loss of
faults, physical injuries, and other
user configuration data.
adverse results.

Warning:
A warning notice indicates a situation
Warning that may cause major system changes, Restarting will cause business
faults, physical injuries, and other interruption. About 10 minutes are
adverse results. required to restart an instance.

A caution notice indicates warning Notice:

Notice information, supplementary
If the weight is set to 0, the server
instructions, and other content that
no longer receives new requests.
the user must understand.

Note:
A note indicates supplemental
Note instructions, best practices, tips, and You can use Ctrl + A to select all
other content. files.

Closing angle brackets are used to Click Settings> Network> Set network
>
indicate a multi-level menu cascade. type.

Bold formatting is used for buttons ,

Bold menus, page names, and other UI Click OK.
elements.

Run the cd /d C:/window command to

Courier font Courier font is used for commands
enter the Windows system folder.

bae log list --instanceid

Italic formatting is used for
Italic
parameters and variables. Instance_ID

T his format is used for an optional

[] or [a|b] value, where only one item can be ipconfig [-all|-t]
selected.

T his format is used for a required

{} or {a|b} value, where only one item can be switch {active|stand}
selected.

> Document Version:20200905 I

Elast ic IP Address Best pract ices · T able of Cont ent s

Table of Contents
1.Bring your public IP address range to Alibaba Cloud 05

2.Associate multiple EIPs with a secondary ENI in NAT mode 08

3.Use an elastic IP address of BGP (Multi-ISP) Pro to access a …website 15

application

4.Deploy an FTP server by using an EIP 19

> Document Version:20200905 I

Elast ic IP Address Best pract ices · Bring your public IP address range t o Alibaba Cloud

1.Bring your public IP address range

to Alibaba Cloud
This topic describes how to bring your public IP address range from your on-premises network to
Alibaba Cloud.

Context
Before you bring your public IP address range from your on-premises network to Alibaba Cloud,
note the following limits:
You can bring only IP addresses in regions of North America, Asia Pacific, Europe, and Australia
to Alibaba Cloud. Regions in mainland China are not supported. The following table lists the
regions where you can bring the public IP address range of your on-premises network to
Alibaba Cloud.

Area Region

North America US (Silicon Valley) and US (Virginia)

China (Hong Kong), Singapore (Singapore), Malaysia (Kuala Lumpur), Japan

Asia Pacific
(T okyo), Indonesia (Jakarta), and India (Mumbai)

Europe Germany (Frankfurt) and UK (London)

Australia Australia (Sydney)

You can bring only public IPv4 addresses to Alibaba Cloud.

The public IP address range must be registered with a Regional Internet Registry (RIR).
The minimum prefix length of the IP address range is /23.
The waiting time of bringing a public IP address range to the cloud:

You can bring a public IP address range to Alibaba Cloud after you authorize Alibaba Cloud to
advertise the IP address range on the Internet. It may take up to 30 days.

The waiting time of withdrawing a public IP address range:

You can withdraw a public IP address range after you request Alibaba Cloud to stop
advertising the IP address range on the Internet. It may take up to 30 days.

If you want your public IP address range to use EIP bandwidth plans, note the following limits:
The minimum bandwidth of an EIP bandwidth plan is 1,000 Mbit/s. You can add a maximum
of 100 elastic IP addresses (EIPs) to each EIP bandwidth plan. If your workload requires
bandwidth lower than 1,000 Mbit/s, we recommend that you directly use your public IP
address range. Do not add the public IP address range to an EIP bandwidth plan.

> Document Version:20200905 5

Best pract ices · Bring your public IP address range t o Alibaba Cloud Elast ic IP Address

Before you can add your public IP address range to an EIP bandwidth plan, the system
checks where the maximum bandwidth of the plan meets the following requirements.
Otherwise, you cannot add your public IP address range to the EIP bandwidth plan.
If a total of 1,000 public IP addresses are advertised to the Internet by Alibaba Cloud, the
maximum bandwidth of the pay-by-bandwidth plan must be at least 1,000 Mbit/s. For
every 1,000 additional pubic IP addresses, you must increase the maximum bandwidth by
1,000 Mbit/s.
If a total of 1,000 public IP addresses are advertised to the Internet by Alibaba Cloud, the
maximum bandwidth of the pay-by-95th-percentile plan must be at least 1,000 Mbit/s. For
every 1,000 additional pubic IP addresses, you must increase the maximum bandwidth by
1,000 Mbit/s.

Step 1: Update the routing information

You must go to the corresponding Regional Internet Registry (RIR) platform to update the
routing information of the public IP address range by changing the autonomous system number
(ASN) of the IP address to AS45102.

The following example shows how to modify the ASN of an IP address range registered with
Network Coordination Center (RIPE NCC).

1. Log on to RIPE NCC Webupdates.

2. Select route from the Object type drop-down list and click Create.

3. On the Create "route" object page, select a role and maintainer pair from the drop-down
list.
4. In the Password authentication field, enter the password and click Submit.
5. Configure the route reflector (RR) based on the following information, and then click Submit.

Parameter Description

route Enter the public IP address range.

Enter the ASN. AS45102 is used in this

origin
example.

After you configure the route reflector, you can go to RADB to check whether the
configuration takes effect.

6 > Document Version:20200905

Elast ic IP Address Best pract ices · Bring your public IP address range t o Alibaba Cloud

Step 2: Apply for bringing the public IP address range to Alibaba Cloud
After you update the routing information, you must submit a ticket to apply for bringing the
public IP address range to Alibaba Cloud. Make sure that the following information is included in
the ticket:

The public IP address range.

The region where the public IP address range is to be used.
The updated routing information of the IP address range.

Step 3: Apply for an elastic IP address (EIP)

After you complete the preceding task, Alibaba Cloud will advertise the public IP address range
from the specified region, and assign you a dedicated Service Provider Identification Number
(SPIN). You will receive the SPIN within 20 business days. After you obtain the SPIN, you can go to
the buy page to apply for an EIP. For more information, see Purchase a new Elastic IP address .

Step 4: Associate the EIP with a cloud resource

After you apply for an EIP, you can associate the EIP with an Alibaba Cloud resource, such as an
Elastic Compute Service (ECS) instance, NAT gateway, internal Server Load Balancer (SLB)
instance, or elastic network interface (ENI). For more information, see the following topics:
Associate an EIP with an ECS instance
Associate an EIP with a NAT gateway
Associate an EIP with an SLB instance
Associate an EIP with an ENI

> Document Version:20200905 7

Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode Elast ic IP Address

2.Associate multiple EIPs with a

secondary ENI in NAT mode
This topic describes how to associate multiple elastic IP addresses (EIPs) with a secondary
Elastic Network Interface (ENI) in NAT mode to make full use of Elastic Compute Services (ECS)
instances.

Context
ECS instances can communicate with the Internet only after they are associated with static
public IP addresses or EIPs. Each ECS instance can be associated with only one static public IP
address or EIP.

Scenario
This topic takes the following scenario as an example. A company creates an ECS instance on
Alibaba Cloud and associates the ECS instance with an EIP. To meet business requirements, the
company needs to associate the ECS instance with three EIPs to make full use of the ECS
instance.

If you want to associate multiple EIPs with an ECS instance in NAT mode, you must assign the
same number of secondary private IP addresses to the secondary ENI of the ECS instance. Then,
map the EIPs to the secondary private IP addresses, respectively. This way, you can make full
use of the ECS instance.

Prerequisites
An ECS instance is created. For more information, see Create an instance by using the provided
wizard.
A secondary ENI is created and meets the following requirements:
The secondary ENI and the ECS instance to be associated with the secondary ENI are
deployed in the same Virtual Private Cloud (VPC) network.
The VSwitch of the secondary ENI and the VSwitch of the ECS instance to be associated with
the secondary ENI are deployed in the same region.

8 > Document Version:20200905

Elast ic IP Address Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode

For more information, see Create an ENI.

Three EIPs are created in the same region as the ENI. For more information, see Purchase a
new Elastic IP address.

Procedure

Step 1: Assign multiple secondary private IP addresses

You can assign multiple secondary private IP addresses to each secondary ENI. This helps make
full use of the ECS instance and mask the failure of the ECS instance by rapidly remapping the
EIP.

Take the following steps to assign multiple secondary private IP addresses to a secondary ENI.

1. Log on to the ECS console.

2. In the left-side navigation pane, choose Network & Security > ENIs.
3. In the upper-left corner, select the region where the secondary ENI is deployed.
4. On the Network Interfaces page, find the target ENI, and click Manage Secondary Private IP
Address in the Actions column.
5. In the Manage Secondary Private IP Address dialog box, click Assign New IP one or more
times. Then, one or more secondary private IP addresses are automatically assigned to the
secondary ENI.Click Assign New IP two times in this example. Then, two secondary private IP
addresses are automatically assigned to the secondary ENI.

Note You can manually enter a secondary private IP address. The private IP
addresses must be within the range of IPv4 private CIDR blocks. If you do not manually
enter a secondary private IP address, the system assigns an idle IP address from the IPv4
private CIDR blocks.

> Document Version:20200905 9

Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode Elast ic IP Address

6. Click OK.
7. On the Network Interfaces page, find the target secondary ENI, and click Manage Secondary
Private IP Address in the Actions column to view the assigned secondary private IP
addresses.

10 > Document Version:20200905

Elast ic IP Address Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode

Step 2: Map EIPs to the secondary private IP addresses

Take the following steps to map an EIP to a secondary private IP address of the secondary ENI.

1.
2. In the upper-left corner, select the region where the EIP is deployed.
3. On the Elastic IP Addresses page, find the target EIP and click Bind Resource in the Actions
column.
4. In the Bind Elastic IP Address to Resources dialog box, set the following parameters and
click OK.
Instance Type: Select Secondary ENI.
Mode: Select NAT Mode.

In NAT mode:

The number of EIPs that can be associated with a secondary ENI depends on the number
of private IP addresses assigned to this secondary ENI.
The secondary private addresses and public IP addresses of the secondary ENI are
available at the same time.

> Document Version:20200905 11

Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode Elast ic IP Address

In the operating system of the ECS instance, the EIP is not displayed. You must call the
DescribeInstances operation to display the EIP that is associated with the ECS instance.
For more information, see DescribeEipAddresses.
EIPs do not support NAT application layer gateway (ALG), protocols such as H.323,
Session Initiation Protocol (SIP), Domain Name System (DNS), Real Time Streaming
Protocol (RTSP), and Trivial File Transfer Protocol (TFTP).

Secondary ENI: Select the target secondary private IP address that you want to map to
the EIP. You can also map the EIP to the primary private IP address of the secondary ENI.

In this example, the primary private IP address of the secondary ENI is selected.

5. Repeat the preceding steps to map the remaining EIPs to the secondary private IP addresses
of the secondary ENI. Make sure that each EIP is mapped to a separate secondary private IP
address.

Step 3: Associate the secondary ENI with an ECS instance

Take the following steps to associate the secondary ENI with an ECS instance

1. Log on to the ECS console.

2. In the left-side navigation pane, choose Instances & Images > Instances.
3. In the top navigation bar, select the region where the target ECS instance is deployed.
4. On the Instancespage, find the target ECS instance, and choose More > Network and
Security Group > Bind Secondary ENI in the Actions column.
5. In the Bind Secondary ENI dialog box, select the secondary ENI to be associated and click OK.

Step 4: Configure the secondary private IP addresses

After you associate the secondary ENI with the ECS instance, you must configure the secondary
private IP addresses for the ECS instance.

An ECS instance that runs CentOS 7 is used in the following example to describe how to
configure the secondary private IP addresses for the ECS instance. For more information about
how to configure ECS instances that run other operating systems, see 分配辅助私网IP地址 and 分配辅
助私网IP地址.

1. Log on to the ECS instance.

2. Run the following command to query the MAC address of the secondary ENI: ip address

3. Configure the secondary private IP addresses for the secondary ENI.

12 > Document Version:20200905

Elast ic IP Address Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode

i. Run the following command to open the configuration file of the secondary ENI: vi /etc/s
ysconfig/network-scripts/ifcfg-eth1

ii. Run the following command to enter the Edit mode: i

iii. Run the following command to copy configurations to the configuration file of the
secondary ENI:

DEVICE=eth1 # T his indicates the newly configured ENI.

BOOT PROT O=no
ONBOOT =yes
T YPE=Ethernet

USERCT L=yes
PEERDNS=no
IPV6INIT =no
PERSIST ENT _DHCLIENT =yes

HWADDR=00:16:**:**:cc:8d # Configure the MAC address of the secondary ENI.

IPADDR0=172.xx.xx.163 # Configure the primary private IP address of the secondary ENI.
IPADDR1=172.xx.xx.164 # Configure the secondary private IP address 1 of the secondary ENI.
IPADDR2=172.xx.xx.165 # Configure the secondary private IP address 2 of the secondary ENI.

DEFROUT E=no # T his indicates that the ENI is not the default route. T o avoid changing the act
ive default route of the ECS instance while bring up the secondary ENI of the ECS instance, do
not specify the eth1 as the default route.

4. Run the following command to restart the network connection service: service network resta
rt

After you configure the secondary private IP addresses, you can run the ip address command to
view the configured secondary private IP addresses.

> Document Version:20200905 13

Best pract ices · Associat e mult iple EIPs wit h a secondary ENI in NAT mode Elast ic IP Address

Step 5: Test the network connectivity

An ECS instance that runs Linux is used in the following example to describe how to test the
network connectivity.

1. Log on to the ECS instance.

2. Run the following command to configure a static route in which the source IP address is set
to one of the secondary private IP addresses: ip route add <destination network>/<prefix lengt
h of the subnet> via <NAT gateway of the secondary private IP addresses> src <secondary private IP
address>

3. Run the following command to verify the connectivity between the secondary private IP
addresses and the destination network: ping <destination network> -I <secondary private IP ad
dresses>

The test result shows that packets sent from the secondary private IP addresses can reach
the destination network. This means that the association between the secondary private IP
addresses and EIP takes effect.

14 > Document Version:20200905

Elast ic IP Best pract ices · Use an elast ic IP address of BGP (Mult i-ISP) Pro t o access a websit e
Address applicat ion wit h lower lat ency

3.Use an elastic IP address of BGP

(Multi-ISP) Pro to access a website
application with lower latency
This topic describes how to use an elastic IP address of BGP (Multi-ISP) Pro to provide services for
users in mainland China through a direct connection. This reduces the network latency because
no international Internet Service Provider (ISP) service is used. You can associate an elastic IP
address of BGP (Multi-ISP) Pro with an Elastic Compute Service (ECS) instance. Then, users in
mainland China can access your website application deployed in the China (Hong Kong) region.

Prerequisites
Before you start, make sure that the following requirements are met:
An Alibaba Cloud account is created. If you do not have an Alibaba Cloud account, click Create
an Alibaba Cloud account to create an Alibaba Cloud account.
A website application is deployed on an ECS instance that is created in the China (Hong Kong)
region. For more information, see Create an instance by using the provided wizard.

Context
The following figure shows how an elastic IP address of BGP (Multi-ISP) Pro helps reduce the
network latency. A website application is deployed on an ECS instance that is created in the
China (Hong Kong) region. The ECS instance is associated with an elastic IP address of BGP
(Multi-ISP). High network latency may exist when users in mainland China access the website
application deployed in the China (Hong Kong) region. This downgrades the user experience.

You can associate an elastic IP address of BGP (Multi-ISP) Pro with the ECS instance. Then, users
in mainland China can access the website application deployed in the China (Hong Kong) region
with lower network latency because no international ISP service is used.

Procedure

> Document Version:20200905 15

Best pract ices · Use an elast ic IP address of BGP (Mult i-ISP) Pro t o access a websit e Elast ic IP
applicat ion wit h lower lat ency Address

Step 1: Purchase an elastic IP address of BGP (Multi-ISP) Pro

You can use elastic IP addresses of BGP (Multi-ISP) Pro to deliver services to users in mainland
China through a direct connection. In this case, no international Internet Service Provider (ISP)
service is used. This reduces the network latency.

The following example shows how to purchase an elastic IP address of BGP (Multi-ISP) Pro that is
billed on a subscription basis.

1.
2. On the Elastic IP Addresses page, click Create EIP.
3. On the buy page, select Subscription, and set the following parameters for the elastic IP
address.
Region: Select a region for the elastic IP address. China (Hong Kong) is selected in this
example.
Connection Type: Select BGP (Multi-ISP) or BGP (Multi-ISP) Pro.
BGP (Multi-ISP): Up to 89 high-quality BGP lines are available on a global scale. Direct
connections can be established from all regions in mainland China through a variety of
ISPs. The following ISPs can provide the direct connections: China Telecom, China
Unicom, China Mobile, China Railcom, China Netcom, CERNET, China Broadcast Network,
Dr. Peng, and Founder.
BGP (Multi-ISP) Pro: BGP (Multi-ISP) Pro is provided to improve the efficiency of data
transmission between mainland China and regions outside mainland China. Compared
with BGP (Multi-ISP), BGP (Multi-ISP) Pro can be used to establish direct connections
without the use of international ISP services. This reduces the network latency.

BGP (Multi-ISP) Pro is selected in this example.

Network Type: Select a network type. Public is selected in this example.

Bandwidth Value: Specify the bandwidth of the elastic IP address that meets your
requirements. 10 Mbit/s is selected in this example.
Name: Enter a name for the elastic IP address.

The name must be 2 to 128 characters in length, and start with a letter or Chinese
character. It can contain letters, Chinese characters, digits, periods (.), underscores (_),
and hyphens (-).

Quantity: Select the number of elastic IP addresses that meets your requirements.
Service Time: Select a subscription duration.
4. Click Buy Now and complete the payment.
5. Click Console and go to the Elastic IP Addresses page.

16 > Document Version:20200905

Elast ic IP Best pract ices · Use an elast ic IP address of BGP (Mult i-ISP) Pro t o access a websit e
Address applicat ion wit h lower lat ency

On the Elastic IP Addresses page, the Connection Type of the purchased elastic IP address
displays BGP (Multi-ISP) Pro.

Step 2: Associate an elastic IP address with an ECS instance

You can associate an elastic IP address with a VPC-connected ECS instance. ECS instances can
communicate with the Internet after they are associated with elastic IP addresses.

Take the following steps to associate the elastic IP address with an ECS instance:

1. On the Elastic IP Addresses page, find the elastic IP address created in Step 1, and click Bind
Resource in the Actions column.
2. In the Bind Elastic IP Address to Resources dialog box, set the following parameters to
associate the elastic IP address with an ECS instance:
Instance Type: Select the type of the instance to be associated with the elastic IP
address. Select ECS Instance in this example.
Binding Mode: Select a binding mode.

Only Normal is supported. In the Normal mode:

Both elastic IP address and private IP address of the ECS instance are available.
In the operating system of the ECS instance, the elastic IP address is not displayed. You
must call the DescribeInstances operation to query the elastic IP address that is
associated with the ECS instance. For more information, see DescribeInstances.
When an elastic IP address (EIP) is deployed as an NAT application layer gateway (ALG),
some protocols are not supported. For example, H.323, Session Initiation Protocol (SIP),
Domain Name System (DNS), Real Time Streaming Protocol (RTSP), and Trivial File
Transfer Protocol (TFTP).

Select an Instance to Bind: Select an ECS instance to be associated with the elastic IP
address.
3. Click OK.

Step 3: Test the network latency

After you associate the elastic IP address with the ECS instance, you can test the network
latency in the networking between mainland China and the website application that is
deployed in China (Hong Kong).

1. Open Command Prompt on a computer in mainland China.

2. Run the ping command to ping the elastic IP address that is associated with the ECS
instance.The test result shows that the network latency is reduced when users in mainland
China use the elastic IP address of BGP (Multi-ISP) Pro to access the ECS instance.

Network latency of accessing an ECS instance that is associated with an elastic IP

address of BGP (Multi-ISP) Pro

> Document Version:20200905 17

Best pract ices · Use an elast ic IP address of BGP (Mult i-ISP) Pro t o access a websit e Elast ic IP
applicat ion wit h lower lat ency Address

Network latency of accessing an ECS instance that is

associated with an elastic IP address of BGP (Multi-ISP)

Note The actual network latency in the communication supported by the elastic IP
address of BGP (Multi-ISP) Pro varies based on the quality of the ISP network.

18 > Document Version:20200905

Elast ic IP Address Best pract ices · Deploy an FT P server by using an EIP

4.Deploy an FTP server by using an EIP

You can use the EIP cut-through mode to associate an Elastic IP Address (EIP) with an FTP server
to provide FTP services. This topic takes an FTP server deployed with a Windows system as an
example.

Procedure
1. Purchase a new Elastic IP address .
2. Associate the EIP with a secondary Elastic Network Interface (ENI) and select the EIP cut-
through mode.

Note Make sure that the selected secondary ENI is not associated with any ECS
instance.

For more information, see Associate an EIP with a secondary ENI in cut-through mode.

3. Purchase an ECS instance of the Windows Server 2016 system and deploy an FTP service.

> Document Version:20200905 19

Best pract ices · Deploy an FT P server by using an EIP Elast ic IP Address

4. On the page of EIP list, click the link of the associated ENI.

5. On the Network Interfaces page, find the ENI associated with the EIP and click Bind to
Instance to associate the ENI with the ECS instance deployed with the FTP service.

Result
Use the EIP address associated with the ENI to access the FTP service.

Note Make sure that the security group rules of the ECS instance allow access from the
Internet.

20 > Document Version:20200905