Alibaba Cloud Fundamentals: ECS, OSS and Regions Explained
How Alibaba Cloud fits together: choosing a region, reading ECS instance type names, picking a billing method, building a VPC and storing data in OSS.
Alibaba Cloud ECS (Elastic Compute Service) is the virtual machine service at the center of Alibaba Group’s cloud platform, and it is usually paired with OSS (Object Storage Service) for files and backups. This guide explains how regions, ECS instances, networking and OSS relate to each other, with particular attention to the details that differ from AWS, Azure and Google Cloud.
Start with the account and the region map #
Two decisions shape everything else on Alibaba Cloud: which website you sign up on, and which region your resources live in. Getting these right early avoids painful migrations later.
International site versus the China site
Alibaba Cloud operates an international website at alibabacloud.com and a separate China site (Aliyun) for customers in mainland China. They have separate account systems, and the China site requires real-name verification under Chinese regulations. Most readers outside China should use the international site, which can still deploy into mainland China regions, subject to the provider’s verification requirements and local rules.
Regions and zones
Like other large providers, Alibaba Cloud divides its infrastructure into regions (geographic areas such as a city or country) and zones (isolated data centers within a region). Region IDs follow a readable pattern: cn-hangzhou, cn-shanghai, ap-southeast-1 (Singapore), eu-central-1 (Frankfurt) or us-west-1 (Silicon Valley). Zones append a letter, for example cn-hangzhou-h.
The platform has a particularly deep presence in mainland China and Asia-Pacific, alongside regions in Europe, the Middle East and North America. Choose a region based on where your users are, where your data must legally reside and which instance types are available there, since newer instance generations do not reach every region at once. The current list is on the Alibaba Cloud documentation site.
ECS: how Alibaba Cloud compute is organized #
An ECS instance is a virtual machine made up of an instance type (vCPU and memory), an image (the operating system), one or more cloud disks, and a network placement inside a VPC. Understanding the naming scheme makes the long instance catalogue much easier to navigate.
Reading instance type names
Instance types follow the pattern ecs.<family><generation>.<size>. For example, ecs.g7.large is a general-purpose, seventh-generation instance in the “large” size. The family letter tells you the CPU to memory ratio:
| Family letter | Type | Typical vCPU to memory ratio | Common workloads |
|---|---|---|---|
| g | General purpose | 1:4 | Web and application servers, mid-sized databases |
| c | Compute optimized | 1:2 | Batch jobs, game servers, high-traffic frontends |
| r | Memory optimized | 1:8 | Caches, in-memory analytics, large databases |
| t | Burstable | Varies | Low, spiky workloads such as dev and test servers |
A higher generation number usually means newer processors and better price-performance, so prefer the latest generation available in your chosen zone. Burstable instances earn CPU credits while idle and spend them under load, which suits light workloads but can throttle a busy production service.
Images and cloud disks
ECS offers public images for major Linux distributions and Windows Server, plus Alibaba Cloud Linux, the provider’s own distribution tuned for its platform. You can also create custom images from your instances, or use the marketplace for preconfigured software.
Storage for ECS comes from cloud disks (block storage). The ESSD family is the main option for performance-sensitive workloads and comes in performance levels, where higher levels provide more IOPS and throughput. Disks are tied to a zone, so an instance and its data disks must sit in the same zone. Snapshots back up disks and can be scheduled with automatic snapshot policies.
Billing methods for ECS
Alibaba Cloud offers several billing methods, and choosing the right one is one of the main levers on cost:
- Pay-as-you-go: billed for the time the instance exists, with no commitment. Best for experiments and variable workloads.
- Subscription: you prepay for a month or a year for a specific instance, usually at a lower effective rate. Best for steady, long-running servers.
- Preemptible (spot) instances: discounted capacity that the platform can reclaim, suitable for fault-tolerant batch work.
- Savings plans and reserved instances: commitment-based discounts that apply to matching pay-as-you-go usage.
For pay-as-you-go instances in a VPC, Alibaba Cloud has offered an economical stop mode in which compute is not billed while the instance is stopped, although disks and some other resources still are. Check the current behavior in the ECS billing documentation before relying on it.
Networking: VPCs, vSwitches and security groups #
Every modern ECS deployment lives inside a VPC, a private network you define with a CIDR block such as 10.0.0.0/16. Alibaba Cloud calls its subnets vSwitches. Each vSwitch belongs to a single zone, so spreading instances across two vSwitches in different zones is how you build zone redundancy.
Access control is handled by security groups, stateful virtual firewalls attached to instances. Rules specify protocol, port range and source, and return traffic for allowed connections is permitted automatically. Keep management ports such as SSH (22) and RDP (3389) restricted to specific addresses rather than open to the internet.
For outbound internet access from private instances, use a NAT Gateway; for inbound public traffic, use an Elastic IP (EIP) or a Server Load Balancer. If these terms are unfamiliar, our guide to cloud networking basics explains VPCs, subnets and load balancers in general terms that map directly onto Alibaba Cloud.
OSS: object storage on Alibaba Cloud #
OSS stores data as objects inside buckets. Each bucket lives in one region, has a globally unique name and is accessed over HTTP through a region-specific endpoint such as oss-cn-hangzhou.aliyuncs.com. It is the natural home for user uploads, static website assets, logs, backups and data lake files.
Storage classes
- Standard: frequently accessed data such as images served to users.
- Infrequent Access: data read occasionally, with a lower storage rate but retrieval charges and a minimum storage duration.
- Archive, Cold Archive and Deep Cold Archive: long-term retention at progressively lower storage cost, with objects that must be restored before they can be read.
Lifecycle rules can move objects between classes automatically based on age, which is the easiest way to keep storage costs in check without manual housekeeping. Buckets can also use zone-redundant storage in supported regions for higher durability against a zone outage.
Internal endpoints save money
When an ECS instance and an OSS bucket are in the same region, access them through the internal (intranet) endpoint rather than the public one. Traffic over the internal endpoint avoids public outbound traffic charges and stays on the provider’s network. This single detail often makes a visible difference on the monthly bill for backup and media workloads. For more on when object storage is the right choice at all, read our comparison of object, block and file storage.
Identity and access with RAM #
Resource Access Management (RAM) is Alibaba Cloud’s identity service. The account you sign up with is the root account, and it should be protected with multi-factor authentication and then used as little as possible. Create RAM users or roles for daily work, grant them only the permissions they need, and use roles for applications running on ECS rather than embedding long-lived AccessKey pairs in code. ActionTrail records API activity for auditing.
A sensible first setup checklist #
- Sign up on the official international site and complete the identity and payment verification it requests.
- Enable MFA on the root account and create a RAM user for yourself.
- Pick a primary region and confirm your preferred instance types are available in it.
- Create a VPC with at least two vSwitches in different zones.
- Create a security group that allows only the ports your application needs.
- Launch a pay-as-you-go ECS instance on a current-generation type, with an ESSD system disk and an automatic snapshot policy.
- Create an OSS bucket in the same region, keep it private by default and add a lifecycle rule.
- Set a budget alert in the billing console before usage grows.
Our Alibaba Cloud platform overview summarizes the wider product range, and the official product pages for ECS and OSS list current features and pricing.
Alibaba Cloud ECS: frequently asked questions #
What does a name like ecs.g7.large mean?
It describes an ECS instance type: “g” is the general-purpose family, “7” is the seventh generation, and “large” is the size, which sets the number of vCPUs and amount of memory. Compute (“c”) and memory (“r”) families follow the same pattern.
Do I need an ICP filing to use Alibaba Cloud?
Only in specific cases. Websites served from servers in mainland China regions generally require an ICP filing. Regions outside mainland China, including Hong Kong and Singapore, do not require one.
Is OSS compatible with Amazon S3 tools?
OSS has its own API and SDKs, and it also documents a degree of compatibility with the S3 API for common operations. Test the specific tool and operations you rely on, and prefer the official OSS SDKs or the ossutil command-line tool for full feature coverage.
Should I choose subscription or pay-as-you-go for ECS?
Use pay-as-you-go while you are testing and sizing. Once a server has run steadily for a while and its size is settled, a subscription or a savings plan usually lowers the effective cost.
