Help Center/ VPC Endpoint/ Best Practices/ Using VPC Endpoint and Direct Connect to Enable On-premises Data Centers to Access Cloud Services/ Procedure (Configuring an ECS as a VPC Endpoint Service)
Updated on 2025-08-22 GMT+08:00
View PDF
Share

Procedure (Configuring an ECS as a VPC Endpoint Service)

  1. Create a Direct Connect connection.

    1. Create a connection.
      1. Go to the Connections page.
      2. In the upper left corner of the page, click and select a region and project.
      3. In the upper right corner, click Create Connection.
      4. On the Create Connection page, enter the equipment room details and select the Direct Connect location and port based on Table 1.
        Figure 1 Creating a self-service connection
        Table 1 Parameters for creating a connection

        Parameter

        Example Value

        Description

        Billing Mode

        Yearly/Monthly

        Specifies how you will be billed for the connection. Currently, only Yearly/Monthly is supported.

        Region

        CN-Hong Kong

        Specifies the region where the connection resides. You can also change the region in the upper left corner of the console.

        Connection Name

        dc-123

        Specifies the name of the connection.

        Location

        HK-Sai Kung-Mobile

        Specifies the Direct Connect location where your leased line can be connected to.

        Carrier

        Other

        Specifies the carrier that provides the leased line.

        Port Type

        1GE single-mode optical port

        Specifies the type of the port: 1GE single-mode optical port, 10GE single-mode optical port, 40GE single-mode optical port, or 100GE single-mode optical port.

        Leased Line Bandwidth (Mbit/s)

        100

        Specifies the bandwidth of the line you need to lease from the carrier.

        Equipment Room Address

        Room xx, xx building, xx road, xx district, xx city

        Specifies the address of your equipment room. The address must be specific to the floor your equipment room is on.

        Tag

        example_key1

        example_value1

        Adds tags to help you identify your connection. You can change them after the connection is created.

        Description

        -

        Provides supplementary information about the connection.

        Required Duration

        3 months

        Specifies how long the connection will be used for.

        Auto-renew

        3 months

        Specifies whether to automatically renew the subscription to ensure service continuity.

        For example, if you select this option and the required duration is three months, the system automatically renews the subscription for another three months.

        Enterprise Project

        default

        Specifies the enterprise project by which connections are centrally managed. Select an existing enterprise project.
      5. Click Confirm Configuration.
      6. Confirm the configuration and click Request Connection.

        Then confirm the requirements with the Direct Connect manager.

        If the request is not approved, repeat 1.a.iii to 1.a.vi based on the review comments and submit the request again.

      7. After the request is approved, contact the carrier for cabling.
        After the cabling is complete, locate the connection in the connection list and click Confirm Cabling in the Operation column.
        Figure 2 Confirm Cabling
      8. In the displayed dialog box, click OK.
      9. In the connection list, locate the connection and click Confirm Configuration in the Operation column.
      10. Confirm the configuration and click Pay Now.
      11. Confirm the order, select a payment method, and click Confirm.
      12. Wait for Huawei Cloud to complete the construction.

        Huawei onsite engineers will connect the leased line to the port on the Huawei Cloud gateway based on the customer's information within two working days.

      13. Verify that the connection is in the Normal state, which means that the connection is ready, and the billing starts.
    2. Create a virtual gateway.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Gateways.
      2. Click Create Virtual Gateway.
      3. Configure the virtual gateway parameters.
      4. Click OK.
    3. Create a virtual interface.
      1. In the navigation pane on the left, choose Direct Connect > Virtual Interfaces.
      2. Click Create Virtual Interface.
      3. Configure the virtual interface parameters.
      4. Click Create Now.

  2. Create a VPC endpoint service.

    1. Hover on to display Service List and choose Networking > VPC Endpoint.
    2. On the displayed page, click Create VPC Endpoint Service.
    3. Configure the parameters.
    4. Click Create Now.

      In this practice, Connection Approval is enabled when you create a VPC endpoint service. You need to accept the connection from your purchased VPC endpoint.

  3. Buy a VPC endpoint.

    1. On the displayed page, click Buy VPC Endpoint.
    2. Configure the parameters.
    3. Click Next.
    4. Confirm the order details and click Submit.
    5. Approve the connection.
      Connection Approval is enabled in 2. If the VPC endpoint status is Pending acceptance, perform the following operations to approve the connection to the VPC endpoint service:
      1. Locate the VPC endpoint service and click its name.
      2. On the displayed page, select the Connection Management tab.
      3. In the Operation column, click Accept.

  4. (Optional) Verify the connectivity.

    • ECS1 in VPC1 can access the on-premises data center.

    • The VPC endpoint can access ECS2 in VPC2.