# TiDB Cloud Uses These Networking Services
+ VPC (Virtual Private Network) services
  + AWS: VPC, Security Group, Network Access List, VPC Peering, PrivateLink
  + GCP: VPC, Firewall Rule, VPC Networking Peering, Private Service Connect Endpoint
+ Anti DDoS services
  + AWS: AWS Shield, AWS WAF
  + GCP: Google Cloud Armor
------------------------------------------------------------------------------
VPC services are utilized for network isolation.

Anti DDoS services (such as, AWS Shield and WAF) are utilized to protect against common web exploits and bots respectively.

With Cloud Infrastructure Vendor's VPC, TiDB Cloud can launch resources in a logically isolated virtual network. 

TiDB Cloud leverages the Web Application Firewall services provided by the Cloud Infrastructure Vendors to protect the TiDB Cloud console.

TiDB Cloud utilizes anti DDoS services provided by the Cloud Infrastructure Vendors to protect against distributed denial of service (DDoS) attacks for resources, at the network and transport layers (layer 3 and 4) for load balancer services and the application layer (layer 7) for TiDB Cloud console. 

More information can be found at `https://aws.amazon.com/security/` and `https://cloud.google.com/security/`. 