A tiered global private network platform. Connect via tunnels, cloud platforms, or physical cross-connects for standard global networking. Upgrade to Regional or Global Premium for priority routing. Optionally enable BGP sessions (VNETansit) to announce your own IPs and control broadcast direction. Plus CDN, DNS, DDoS scrubbing, and port forwarding.
VNET is a tiered global private network platform: default Standard networking, on-demand Premium routing upgrades, and optional BGP sessions to announce your own IPs.
Four flexible access methods to fit different infrastructure environments
Connect directly to the nearest VNET edge node using standard tunneling protocols. No proprietary client needed -- any router, server, or endpoint supporting standard protocols can connect. An internal VNET IP is automatically assigned on connection for immediate global communication.
Access VNET through virtual machines at Areapac partner hosting providers. Get VNET connectivity directly within partner data centers without additional tunneling. Ideal for users already deployed on partner platforms -- quickly join the global private network without changing existing architecture.
Access VNET through major public cloud platforms like AWS, Tencent Cloud, and Huawei Cloud. Establish tunnels on cloud VMs or use cloud interconnect interfaces to seamlessly connect cloud workloads to the global private network. Ideal for cloud-native enterprises unifying multi-cloud environments on VNET.
Direct physical cable interconnection within the same data center or campus. Provides the lowest latency and highest bandwidth access method, ideal for high-throughput, ultra-low-latency scenarios. Supports both standard Cross Connect and Campus Connect modes.
Three tiers for different needs: from basic connectivity to global priority routing and BGP announcements
| Feature | Standard | Regional Premium | Global Premium |
|---|---|---|---|
| Routing Quality | Standard routing | Regional priority routing | Global priority routing |
| Latency Optimization | Basic | Intra-region optimized | Global end-to-end optimized |
| Dedicated Capacity | Shared | Regional dedicated | Global dedicated |
| BGP Session | Not available | Optional (VNETansit) | Optional (VNETansit) |
| Anycast Support | Not available | Regional Anycast | Global Anycast |
| Pricing Model | Per access point · bandwidth | Per region · access point · bandwidth | Unified global billing |
| Typical Use Case | Basic networking · device interconnect | Regional acceleration · precise cost control | Global Anycast · CDN · gaming |
For enterprise users requiring China Mainland connectivity. Uses cross-border dedicated lines, can announce IP prefixes from mainland -- traffic routes to overseas private network, NOT domestic ISP peering. Must meet the following compliance requirements:
VNETansit is an optional BGP session service on the VNET platform -- it is not required. Once enabled, you can announce your own IP prefixes, control broadcast direction, and support Anycast (same prefix announced from multiple nodes). Billing is based on VNET service tier (region/access point/bandwidth), not traditional transit billing.
Announce an IP prefix routed only to specific regions (e.g., Europe, Japan/Korea, Americas). Only target-region VNET nodes receive your routes, and only that direction's bandwidth is billed. For businesses targeting specific markets -- no need to pay for unused regions. Directional billing means you pay only for the paths you actually need, with precise bandwidth cost control.
The same IP prefix announced simultaneously from all global nodes. Users worldwide auto-connect to the nearest VNET node, then route to your origin via private backbone. All directions take optimal paths with unified global billing. This is one of VNET's most powerful capabilities -- enabling true Anycast deployment for your services worldwide. Ideal for CDN, game acceleration, and global SaaS platforms.
If your business requires traffic through or originating from Mainland China, apply for China-direction BGP announcements. Traffic enters/exits via self-operated nodes in Beijing and Shanghai, traveling through cross-border dedicated lines to the overseas private network -- not via domestic ISP peering. Requires ICP filing and mainland entity compliance. For global services targeting Chinese users, Chinese enterprises with overseas deployments, and cross-border e-commerce.
VNET nodes span 20+ cities across Asia-Pacific, Europe, and North America. Intra-region traffic connects to the nearest node directly; inter-region traffic takes the optimal backbone link. Connect to any node to reach the entire global network.
APAC: Shanghai · Beijing · Tokyo · Osaka · Hong Kong · Singapore · Seoul · KL · Perth
EU: Frankfurt · London · Amsterdam · Edinburgh · Marseille
Americas: Seattle · Portland · LA · New Jersey · Mexico City · Ottawa
VNET rides on AS204921, operated by YunZheng LAB: an autonomous system spanning Asia, Europe and North America over an OSPF and iBGP backbone, running an open peering policy with every route validated against both RPKI and IRR.
Ten nodes across three continents. Shanghai and Hong Kong carry the core and route-reflector roles; Tokyo serves both Anycast and upstream transit.
Network details, peering policy and looking glass:yunzheng.space/network
Additional capabilities available on the VNET platform to further enhance network performance and security
Distribute static and dynamic content via VNET's Anycast nodes. Users fetch content from the nearest node while origin-pull travels over the private network instead of public internet, significantly reducing time-to-first-byte. An extra layer of acceleration over traditional CDN -- especially valuable for China-direction content, solving slow cross-border origin-pull and high packet loss.
Anycast DNS resolution service across VNET's global nodes. DNS queries auto-route to the nearest node for significantly lower resolution latency. Supports DNSSEC for resolution security, custom record types, and intelligent geo-resolution -- returning optimal results based on user location. Works best combined with Anycast IP deployment.
L3/L4/L7 traffic scrubbing for IPs announced on VNET. Attack traffic is scrubbed at the nearest edge node while clean traffic returns to origin via private network, with no impact on legitimate traffic. Auto-detection of anomalous traffic patterns triggers instant mitigation without manual intervention. The Anycast architecture naturally distributes attack traffic, improving overall DDoS resilience.
Map VNET internal service ports to public IP addresses, allowing external users to access your VNET-internal services. Supports TCP/UDP port forwarding and 1:1 NAT. Quickly expose services externally without managing your own public IPs -- ideal for dev/test environments, remote device management, and making internal tools externally accessible.
Orbit is a set of edge services running on the AS204921 anycast platform across six points of presence, operated by a non-profit: free for non-commercial use, paid for commercial use.
Anycast authoritative DNS on ns1 / ns2.yunzheng.space. Forward and reverse (PTR) zones with DNSSEC signed online; records support geo answers, weighted answers with health checks, apex ALIAS, HTTPS/SVCB and secondary DNS (AXFR, NOTIFY, TSIG). Changes reach every point of presence in about 30 seconds. Free tier is 5 zones at 50 records each.
Unmetered public recursive DNS. IPv4 177.177.83.83, IPv6 2602:f3ff:83::83; DoH at dns.yunzheng.space/dns-query, DoT at dns.yunzheng.space:853. Resolves iteratively from the root and caches per point of presence. Filtered instances with block/allow lists and rewrites are also available.
An anycast edge in front of your hostname: WAF, cache with purge, automatic TLS, hidden origin and compression. Rules match on country, ASN, IP or ISP, with browser check, Bot Fight Mode, rate limiting and a waiting room. Enabled by a proxied record in a hosted zone, or by CNAME onboarding.
Route origin validation. The RTR service follows RFC 8210 on TCP 323 and 8282, carries roughly one million validated ROAs, refreshes every ten minutes and is publicly reachable. A hosted CA issues ROAs for your own resources through a console and REST API, published over RRDP and rsync.
Human verification for forms. Invisible by default, falling back to a single click only when the browser looks automated. Server-side checks use one-time, short-lived tokens bound to a hostname allow-list. No cookies, iframes or third-party requests.
Product details and console:orbit.yunzheng.space Live service counters:orbit.yunzheng.space/status
Four common deployment architectures covering global acceleration, enterprise networking, gaming/streaming, and cross-border compliance
Announce Anycast IPs -- global users auto-connect to the nearest VNET node, then route to your origin via private backbone. Faster than public-only CDN, especially for China-direction traffic. Ideal for global SaaS platforms, API services, and game servers.
Privately interconnect your Shanghai office, Tokyo branch, and Frankfurt data center. Each site connects to the nearest VNET node, communicating via internal IPs. Replaces traditional MPLS or site-to-site VPN -- lower cost, faster deployment.
Private network infrastructure for game acceleration platforms or streaming services. Player/viewer clients connect to the nearest VNET node, traffic routes to game servers or streaming origins via private network. Shanghai-Tokyo 26ms, Hong Kong-Singapore 31ms -- near physical-limit latency performance.
Provide compliant cross-border acceleration for Mainland China users. After completing ICP filing, CN entity contract, and compliance document review, announce IPs from Beijing/Shanghai nodes with traffic routed via cross-border dedicated lines to overseas private network. For overseas services targeting Chinese users, Chinese enterprises accessing overseas systems, and cross-border e-commerce platforms.
| Comparison | VNET | SD-WAN | Public VPN |
|---|---|---|---|
| Network Type | Global Anycast Private Net | Software-Defined Overlay | Public Internet Tunnel |
| BGP Announcements | ✓ | ✗ | ✗ |
| Anycast Support | ✓ | ✗ | ✗ |
| Directional Billing | ✓ | ✗ | ✗ |
| Private Routing | ✓ | ✓ | ✗ |
| China Mainland Link | ✓ Compliant cross-border | Some providers | ✗ |
| CDN / DNS / DDoS | ✓ Platform built-in | ✗ | ✗ |
| Deployment Complexity | Low (standard protocols) | Medium (proprietary HW/SW) | Low |
VNET offers four access methods: (1) Tunnel -- connect to the nearest edge node via GRE, IPsec, WireGuard, or L2TP; (2) Partner VM -- access directly through partner hosting provider VMs; (3) Public Cloud -- establish tunnels on AWS, Tencent Cloud, Huawei Cloud, etc.; (4) Physical XC -- direct connection via Cross Connect or Campus Connect within the same facility. An internal VNET IP is automatically assigned on connection for immediate global communication.
Standard is the default tier -- join VNET and get standard global routing, suitable for basic networking and device interconnection. Premium is an upgrade service, available as Regional Premium (regional priority routing, regional dedicated capacity) or Global Premium (global priority routing, global dedicated capacity). Premium provides higher-quality routing, lower latency, and dedicated bandwidth capacity for scenarios demanding better network performance.
No, it is not required. VNETansit is an optional add-on service. If you only need private device interconnection or global networking through VNET, Standard or Premium service is sufficient without enabling a BGP session. You only need to enable VNETansit when you want to announce your own IP prefixes, deploy Anycast, or control broadcast direction.
China Mainland Premium requires the following compliance: (1) ICP Filing -- relevant domains must have completed ICP registration; (2) CN Entity Contract -- the contract must be signed by a legal entity registered in Mainland China; (3) Compliance Documents -- submit relevant compliance materials for review. Once approved, access is via cross-border dedicated lines. IPs can be announced from mainland, but traffic routes to overseas private network, not domestic ISP peering.
VNET supports four access methods: (1) Tunnel -- GRE, IPsec, WireGuard, L2TP for direct connection from devices with public IPs; (2) Partner VM -- direct VNET connectivity within partner hosting facilities; (3) Public Cloud -- tunnel access via VMs on AWS, Tencent Cloud, Huawei Cloud, etc.; (4) Physical XC -- Cross Connect (same-facility) or Campus Connect (same-campus), providing the lowest latency and highest bandwidth.
VNET billing is based on service tier (region/access point/bandwidth), not traditional transit billing. For example, if you announce IPs from China routed only to Europe, only European-direction bandwidth is billed -- Asia-Pacific and Americas won't receive your routes and incur no charges. If you choose Global Premium, all directions are billed uniformly. Contact us for specific rate quotes.
Yes. If you already use Areapac's IPLC/IEPL leased lines, VNET can overlay them with BGP announcement and Anycast capabilities. VNET also integrates with our managed services (fully managed network operations), IoT connectivity (remote device management), and dedicated device solutions to build a complete enterprise networking solution.
Whether you need global Anycast deployment, cross-border private interconnection, BGP route announcements, directional bandwidth, or China Mainland compliant connectivity -- contact our team to discuss.
Contact Our Team