The control plane computes and manages VPC logical data, translating it into corresponding data flow rules and distributing them to the data plane. The control plane consists of multiple nodes, primarily including the controller cluster and agents. It is highly available and scalable, supporting flexible on-demand scaling to provide stable management of VPC networking.

The controller cluster is deployed centrally to provide High Availability (HA) disaster recovery. It primarily provides the following functions:
Provides RESTful APIs through VPC-proxy.
Provides declarative APIs through apiserver.
Validates synchronous API parameters and processes asynchronous API tasks through VPC-controller and gateway-controller, managing the logical data for VPC and gateway services.
Monitors changes to virtual machine labels in AOC through VPC-controller to manage dynamic members of VPC security groups.
Implements asynchronous message passing for resource change events through etcd.
Agents include VPC-agent and gateway-agent:
VPC-agent is deployed on compute nodes in ACOS (AVE) clusters. It primarily provides the following functions:
Monitors changes to logical data in the VPC, translates them into data plane rules, and distributes them to the VPC data plane.
Monitors VM network change events in the data plane and distributes the corresponding network rules.
Provides DHCP address management for virtual machines in ACOS (AVE) clusters.
gateway-agent is deployed on edge gateway virtual machines. It monitors changes to logical data in the gateway, translates them into data plane rules, and distributes them to the gateway data plane.