VPC Endpoint Overview

VPC endpoints are secure and private channels for connecting VPCs to VPC endpoint services.

You can buy a VPC endpoint to connect a resource in your VPC to a VPC endpoint service in another VPC of the same region.

VPC endpoints are classified into interface VPC endpoints and gateway VPC endpoints based on the types of VPC endpoint services they access.
- Interface VPC endpoints: They access interface VPC endpoint services and are elastic network interfaces that have private IP addresses.
- Gateway VPC endpoints: They access gateway VPC endpoint services and serve as gateways with routes configured to distribute traffic to the associated gateway VPC endpoint services.
There are professional and basic VPC endpoints. Different editions have different features.
- Professional VPC endpoints were newly released and have been in OBT in the CN East2 region. A VPC endpoint supports up to 10 Gbit/s of bandwidth, IPv4 and IPv6 dual stack, and organization-level policy authorization.
- Basic VPC endpoints are the original VPC endpoints.

This section describes how to buy and manage a VPC endpoint.

**Table 1** Management of VPC endpoints
Operation	Description	Constraint
Buying a VPC Endpoint	Describes how to buy a VPC endpoint.	VPC endpoints are region-level resources. Select a region and project when you buy such a VPC endpoint. Each tenant can buy a maximum of 50 VPC endpoints. When you buy a VPC endpoint, ensure that the associated VPC endpoint service is deployed in the same region as the VPC endpoint. VPC endpoints are billed based on the subscription duration.
Querying and Accessing a VPC Endpoint	Describes how to query the summary of a VPC endpoint.	The maximum number of concurrent connections supported by a VPC endpoint Basic: 3,000 Professional: 1,000,000
Deleting a VPC Endpoint	Describes how to delete a VPC endpoint.	Deleted VPC endpoints cannot be recovered. Exercise caution when performing this operation.
Configuring Access Control for a VPC Endpoint	Describes how to enable access control for a VPC endpoint and configure a whitelist of IP addresses or CIDR blocks that are allowed to access the VPC endpoint.	Access Control is only available for VPC endpoints for connecting to interface VPC endpoint services. If Access Control is disabled, any IP address can access the VPC endpoint. A maximum of 20 whitelist records can be added.
Managing Tags of a VPC Endpoint	Describes how to query, add, edit, and delete VPC endpoint tags.	You can add up to 10 tags to each VPC endpoint.