Help Center/ VPC Endpoint/ Best Practices/ Using VPC Endpoint and Direct Connect to Enable On-premises Data Centers to Access Cloud Services/ Procedure
Updated on 2024-11-06 GMT+08:00
View PDF
Share

Procedure

  1. Create a Direct Connect connection.

    1. Create a connection.
      1. Log in to the management console.
      2. On the console homepage, click in the upper left corner and select the required region and project.
      3. Hover on to display Service List and choose Networking > Direct Connect.

        The Connections page is displayed.

      4. Click Create Connection.
      5. On the Create Connection page, enter the equipment room details and select the Direct Connect location and port based on Table 1.
        Table 1 Parameters required for creating a connection

        Parameter

        Description

        Billing Mode

        Specifies how you are charged for the connection. Only Yearly/Monthly is supported.

        Region

        Specifies the region where the connection is deployed. You can change the region in the upper left corner of the console.

        Connection Name

        Specifies the name of your connection.

        Location

        Specifies the location where your leased line can connect to.

        Carrier

        Specifies the carrier that provides the leased line.

        Port Type

        Specifies the type of the port that the leased line is connected to. There are four types of ports: 1GE, 10GE, 40GE, and 100GE.

        Leased Line Bandwidth

        Specifies the bandwidth of the leased line in the unit of Mbit/s. This is the bandwidth of the leased line you bought from the carrier.

        Your Equipment Room Address

        Specifies the address of your equipment room. The address must be specific to the floor your equipment room is on.

        Tag

        Identifies the connection. A tag consists of a key and a value. You can add 10 tags to a connection.

        Tag keys and values must meet requirements listed in Table 2.

        NOTE:

        If a predefined tag has been created on TMS, you can directly select the corresponding tag key and value.

        For details about predefined tags, see Predefined Tag Overview.

        Description

        Provides supplementary information about the connection.

        Contact Person/Phone Number/Email

        Specifies who is responsible for your connection.

        Required Duration

        Specifies how long the connection will be used for.

        Auto-renew

        Specifies whether to automatically renew the subscription to ensure service continuity.

        For example, if the required duration is three months and you have selected Auto-renew, the system automatically renews the subscription for another three months.

        Enterprise Project

        Centrally manages cloud resources and members by project.
        Table 2 Tag key and value requirements

        Parameter

        Requirement

        Key
        • Cannot be left blank.
        • Must be unique for each resource.
        • Can contain a maximum of 36 characters.
        • Can contain only letters, digits, hyphens (-), and underscores (_).

        Value
        • Can be left blank.
        • Can contain a maximum of 43 characters.
        • Can contain only letters, digits, period, hyphens (-), and underscores (_).
      6. Click Confirm Configuration.
      7. Confirm the connection information and click Pay Now.
      8. Confirm the order, select a payment method, and click Confirm.
    2. Connect your on-premises data center to the cloud.
      1. After you have paid for the order, the system automatically allocates a connection ID for you, and the connection information is displayed on the management console. The connection status is Creating, when you will be contacted to confirm the construction plan and relevant information (including your company name, constructor, expected construction time, and construction workers).
      2. After having confirmed the construction plan, you can arrange the carrier to deploy the dedicated line and connect it to your equipment room based on your construction plan.
      3. In normal cases, Huawei resident engineers will connect the dedicated line to the Huawei Cloud gateway port within two working days.
      4. After the construction is complete, the connection status becomes Normal, indicating that the connection is ready.
    3. Create a virtual gateway.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Gateways.
      2. Click Create Virtual Gateway.
      3. Configure the virtual gateway parameters.
      4. Click OK.
    4. Create a virtual interface.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Interfaces.
      2. Click Create Virtual Interface.
      3. Configure the virtual interface parameters.
      4. Click Create Now.

  2. Create a VPC endpoint service.

    1. Hover on to display Service List and choose Networking > VPC Endpoint.
    2. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
    3. On the displayed page, click Create VPC Endpoint Service.
    4. Configure the parameters.
    5. Click Create Now.

      In this practice, Connection Approval is enabled when you create a VPC endpoint service. You need to accept the connection from your purchased VPC endpoint.

  3. Buy a VPC endpoint.

    1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoints.
    2. On the displayed page, click Buy VPC Endpoint.
    3. Configure the parameters.
    4. Click Next.
    5. Confirm the order details and click Submit.
    6. Approve the connection.
      Connection Approval is enabled in 2. If the VPC endpoint status is Pending acceptance, perform the following operations to approve the connection to the VPC endpoint service:
      1. In the navigation pane on the left, choose VPC Endpoint > VPC Endpoint Services.
      2. Locate the VPC endpoint service and click its name.
      3. On the displayed page, select the Connection Management tab.
      4. In the Operation column, click Accept.

  4. (Optional) Verify the connectivity.

    • ECS1 in VPC1 can access the on-premises data center (10.1.123.1).

    • The VPC endpoint can access ECS2 in VPC2.