Help Center/ VPC Endpoint/ Best Practices/ Using VPC Endpoint and Direct Connect to Enable On-premises Data Centers to Access Cloud Services/ Procedure (Configuring an ECS as a VPC Endpoint Service)
Updated on 2025-08-22 GMT+08:00
View PDF

Procedure (Configuring an ECS as a VPC Endpoint Service)

  1. Create a Direct Connect connection.

    1. Create a connection.
      1. Go to the Connections page.
      2. In the upper left corner of the page, click and select a region and project.
      3. In the upper right corner, click Create Connection.
      4. On the Create Connection page, enter the equipment room details and select the Direct Connect location and port based on Table 1.
        Figure 1 Creating a connection
        Table 1 Parameters for creating a connection

        Parameter

        Example Value

        Description

        Billing Mode

        Yearly/Monthly

        Specifies how you will be billed for the connection. Currently, only Yearly/Monthly is supported.

        Region

        EU-Dublin

        Specifies the region where the connection resides. You can also change the region in the upper left corner of the console.

        Connection Name

        dc-123

        Specifies the name of the connection.

        Location

        Dublin

        Specifies the Direct Connect location where your leased line can be connected to.

        Carrier

        Other

        Specifies the carrier that provides the leased line.

        Port Type

        1GE single-mode optical port

        Specifies the type of the port: 1GE single-mode optical port, 10GE single-mode optical port, 40GE single-mode optical port, or 100GE single-mode optical port.

        Leased Line Bandwidth (Mbit/s)

        100

        Specifies the bandwidth of the line you need to lease from the carrier.

        Equipment Room Address

        Room xx, xx building, xx road, xx district, xx city

        Specifies the address of your equipment room. The address must be specific to the floor your equipment room is on.

        Tag

        example_key1

        example_value1

        Adds tags to help you identify your connection. You can change them after the connection is created.

        Description

        -

        Provides supplementary information about the connection.

        Required Duration

        3 months

        Specifies how long the connection will be used for.

        Auto-renew

        3 months

        Specifies whether to automatically renew the subscription to ensure service continuity.

        For example, if you select this option and the required duration is three months, the system automatically renews the subscription for another three months.

        Enterprise Project

        default

        Specifies the enterprise project by which connections are centrally managed. Select an existing enterprise project.
      5. Click Confirm Configuration.
      6. Confirm the configuration and click Pay Now.
      7. Confirm the order, select a payment method, and click Confirm.
      8. After you have paid for the order, a connection ID is allocated to you automatically, and the connection information is displayed on the management console. You will be contacted to confirm the construction plan and relevant information (including your company name, constructor, expected construction time, and construction workers).
      9. After having confirmed the construction plan, you can arrange the carrier to deploy the dedicated line and connect it to your equipment room based on your construction plan.
      10. In normal cases, Huawei onsite engineers will connect the dedicated line to the Huawei Cloud gateway port within two working days.
      11. Verify that the connection is in the Normal state, which means that the connection is ready, and the billing starts.
    2. Create a virtual gateway.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Gateways.
      2. Click Create Virtual Gateway.
      3. Configure the virtual gateway parameters.
      4. Click OK.
    3. Create a virtual interface.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Interfaces.
      2. Click Create Virtual Interface.
      3. Configure the virtual interface parameters.
      4. Click Create Now.

  2. Create a VPC endpoint service.

    1. Hover on to display Service List and choose Networking > VPC Endpoint.
    2. On the displayed page, click Create VPC Endpoint Service.
    3. Configure the parameters.
    4. Click Create Now.

      In this practice, Connection Approval is enabled when you create a VPC endpoint service. You need to accept the connection from your purchased VPC endpoint.

  3. Buy a VPC endpoint.

    1. On the displayed page, click Buy VPC Endpoint.
    2. Configure the parameters.
    3. Click Next.
    4. Confirm the order details and click Submit.
    5. Approve the connection.
      Connection Approval is enabled in 2. If the VPC endpoint status is Pending acceptance, perform the following operations to approve the connection to the VPC endpoint service:
      1. Locate the VPC endpoint service and click its name.
      2. On the displayed page, select the Connection Management tab.
      3. In the Operation column, click Accept.

  4. (Optional) Verify the connectivity.

    • ECS1 in VPC1 can access the on-premises data center.

    • The VPC endpoint can access ECS2 in VPC2.