How to Run Alibaba Instances in China from Another Country

Alibaba Cloud is growing at an amazing rate, recently claiming to have overtaken both Google and IBM as the #3 public cloud provider globally, and certainly the #1 provider in China. Many sites and services hosted outside China are accessible from within China, but can suffer high latency and potentially lost functionality if their web interface requires interaction with blocked social media systems. As such, it is no surprise that a number of our (non-Chinese) customers have expressed interest in actually running virtual machine Alibaba instances in China. In this blog we are going to outline the process…and give an alternate plan.

General Process to Run Alibaba Instances in China

The steps to roll-out a deployment on Alibaba in mainland China are relatively clear:

  1. Establish a “legal commercial entity” in Mainland China.
  2. Select what services you want to run on Alibaba Cloud
  3. Apply for Internet Content Provider (ICP) certification
  4. Launch

The first three steps are described in more detail below.

Establish a Legal Commercial Entity

Or putting it another way – you need to have an office in China. This can range from an actual office with your own employees, to a Joint Venture, which is a legal LLC between your organization and an established Chinese company. If your service is more informational in nature and is not actually selling anything via the service, then this can be relatively easy, taking only a couple weeks (at least for the legal side), though you will still need to find a Joint Venture partner and make the deal worth their while financially. For commerce or trade-related services, the complexity, time requirements, and costs start going up significantly.

What to run on Alibaba Cloud

There is a decision-point here, as there is one set of rules for Alibaba-hosted web/app servers, and additional rules for everything else. Base virtual machines, databases and other such core IT building blocks require the ICP registration described below, plus “real-name registration”, where a passport is needed to actually confirm the identity of whomever is purchasing the resource. If all you need is a web server, then you can skip this step. In either case, some of the filing requirements involve having a server and/or DNS record prepared in order to complete the later steps. A web site does not need to be completely finished until launch, but a placeholder may be needed.

Internet Content Provider (ICP) certification

There are two flavors of ICP certification:

  • A “simple” ICP Filing – which is the bare minimum needed for informational websites that are not directly generating revenue.
  • ICP Commercial Filing – This starts with getting an approved ICP Filing, and then also includes a Commercial License that must be obtained a province/municipality in China. In some cases, this appears to be related to which Alibaba region you are using, and even the physical location of your public IP address.

Many references recommend finding an experienced consultant to guide you through these processes, and it is easy to see why!

OK…WAY too much work. What is Plan B?

The other way to run Alibaba instances in China is to host your site or services in Hong Kong. All of the rules described above apply to “Mainland China”, which does not include Hong Kong. Taiwan is also not included in Mainland China, but Hong Kong has the advantage of being better connected to the rest of China. If the main problem you are trying to solve is to reduce latency to your site for China-based customers, Hong Kong is the closest you can get without actually being there, and Alibaba appears to do a pretty good job optimizing the Hong Kong experience. No local office or legal filings required!

Once you are all set up: Optimize your Costs!

After your instances are set up, make sure you’re optimizing Alibaba costs. Our Mainland China-based customers using Alibaba have confirmed that ParkMyCloud is able to access the Alibaba APIs from our US-based servers – so you can go ahead and try it out.


About Bill Supernor

Bill Supernor is the CTO at ParkMyCloud. Bill is a software and network engineering professional with 20 years of engineering and management experience in enterprise-grade software products, security, and networking. Prior to joining ParkMyCloud in 2017, Bill served as the CTO at KoolSpan, where he led the development of a globally deployed secure voice communication system for smartphones. He joined KoolSpan from Trust Digital, a leading provider of mobile device management products. Prior to Trust Digital, Bill served in senior-level positions at Cognio, Symantec, and McAfee/Network Associates. He also was an officer in the United States Navy. Bill holds the CISSP and CSSLP certifications from ISC2 and is an AWS Certified Solutions Architect - Associate.

Leave a Reply

Your email address will not be published. Required fields are marked *

Copyright © ParkMyCloud 2016-2018. All rights reserved|Privacy Policy