Express Connect combined with Cloud Enterprise Network Transit Routers provides the appropriate enterprise hybrid-network architecture. Express Connect establishes a dedicated private circuit from the on-premises data center to Alibaba Cloud, providing lower latency, predictable performance, high bandwidth, and reduced exposure compared with Internet-based VPN connectivity.
The Express Connect circuit terminates through a Virtual Border Router. That VBR can be attached to CEN, where Transit Routers provide hub-and-spoke connectivity to multiple VPCs instead of requiring separate point-to-point connections for every VPC. Transit Routers can connect VPCs, VBRs, VPN attachments, and inter-region Transit Routers, enabling centralized routing across a geographically distributed enterprise network.
Alibaba Cloud also supports connecting an on-premises VBR and multiple VPCs to a Transit Router so that all attached networks communicate over private connectivity. Cross-region CEN connections then extend the architecture to VPCs in additional regions.
VPN Gateway relies on Internet-based encrypted tunnels and would require more tunnel management at scale. NAT Gateway performs address translation and does not provide private hybrid interconnection. Apsara Stack is an on-premises cloud platform rather than the required connectivity service.
Study Guide reference: Building Enterprise-grade Networks on Alibaba Cloud — Express Connect, CEN, Transit Router, hybrid networking, and cross-region connectivity.
==================================================
