Querying and Accessing a VPC Endpoint

Scenarios

After a VPC endpoint is created, you can query its details and access it.

Constraints

A VPC endpoint supports a maximum of 3,000 concurrent requests.

Querying a VPC Endpoint

Perform the following operations to query details about a VPC endpoint, including its ID, associated VPC endpoint service name, VPC, and status.

1. Log in to the management console.
2. Click in the upper left corner and select the required region and project.

3. Click Service List and choose Networking > VPC Endpoint.

   On the displayed page, locate the target VPC endpoint by entering a keyword in the search box in the upper right corner:

   • Search by VPC endpoint service name or VPC endpoint ID.
     1. Select ID or VPC Endpoint Service Name in the filter box.
     2. Enter a keyword in the search box.
     3. Click to start the search.

        VPC endpoints containing the keyword are displayed in the VPC endpoint list.

   • Search by tag.
     1. Click to the right of Search by Tag.
     2. Enter a tag and a value.

        You can also select a key or value from the drop-down list.

        You can use a maximum of 10 tags to search for a VPC endpoint.

     3. Click Search.

        VPC endpoints containing the specified tag are displayed in the VPC endpoint list.

        If you set multiple tags, VPC endpoints containing all the specified tags will be displayed.

4. In the VPC endpoint list, click the ID of the target VPC endpoint to view its details.

   After an interface VPC endpoint is created, a private IP address is assigned together with a private domain name if you select Create a Private Domain Name.

   Table 1 Parameters contained in the details of a VPC endpoint

   Tab	Parameter	Description
   Summary	ID	Specifies the ID of the VPC endpoint.
   	VPC	Specifies the VPC where the VPC endpoint is deployed.
   	VPC Endpoint Service Name	Specifies the name of the VPC endpoint service that the VPC endpoint is used to access.
   	Private IP Address	Specifies the IP address for accessing the VPC endpoint.
   	Private Domain Name	Specifies the private domain name for accessing the VPC endpoint.
   	Status	Specifies the status of the VPC endpoint.
   	Type	Specifies the type of the VPC endpoint service that the VPC endpoint is used to access.
   	Created	Specifies the creation time of the VPC endpoint.
   	Access Control	Specifies whether the whitelist is enabled for IP addresses to access this VPC endpoint. If Access Control is enabled, only IP addresses or CIDR blocks in the whitelist are allowed to access the VPC endpoint. If Access Control is disabled, any IP address or CIDR block can access the VPC endpoint. NOTE: Access control can be enabled only for VPC endpoints for connecting to an interface VPC endpoint service.
   Access Control	IP Address or CIDR Block	It controls IP addresses and CIDR blocks that are allowed to access the VPC endpoint. NOTE: The Access Control tab is displayed only for VPC endpoints for connecting to interface VPC endpoint services.
   	Operation	Specifies the operation to be performed on whitelist records of the VPC endpoint. Only deletion is supported.
   Route Table	Name	Specifies the name of the route table. NOTE: The Route Tables tab is displayed only for the VPC endpoint for connecting to a gateway VPC endpoint service in some specific regions.
   	VPC	Specifies the VPC that the route table belongs to.
   	Type	Specifies the type of the route table, which can be Default and Custom.
   	Associated Subnets	Specifies the number of subnets associated with the route table.
   	Operation	Specifies the operation to be performed on the route table. The operation can be Disassociate or Associate. NOTE: If a VPC endpoint is associated with only one route table, disassociation is not supported.
   Tags	Key	Specifies the tag key of the VPC endpoint.
   	Value	Specifies the tag value of the VPC endpoint.
   	Operation	Specifies the operation to be performed on the VPC endpoint tag. You can click Edit or Delete.

Accessing a VPC Endpoint via Its Private IP Address

Perform the following operations to access a VPC endpoint via its private IP address:

1. In the VPC where the VPC endpoint is deployed, log in to the backend resource, for example, an ECS.
2. Select a command based on the backend resource type and run the command to access the VPC endpoint. The command format is as follows:

   Command Private IP address:Port number

   The following is a command example:

   curl Private IP address:Port number

Accessing a VPC Endpoint (via Its Private Domain Name)

You can access a VPC endpoint via its private domain name if you select Create a Private Domain Name when creating the VPC endpoint.

The system automatically creates a private zone for the generated domain name and adds an A record set for the private zone to resolve the domain name into the private IP address of the VPC endpoint.

You can view the corresponding private zone and its resolution records on the DNS console.

Viewing the record set of the private domain name

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane, choose Private Zones.

   The Private Zones page is displayed.

4. In the private zone list, click the name of the target private zone.

   The Record Sets page is displayed.

5. In the record set list, locate the target A record set and view its information.

   When Status changes to Normal, the resolution takes effect.

Accessing a VPC endpoint via its private domain name

1. In the VPC where the VPC endpoint is deployed, log in to the backend resource, for example, an ECS.
2. Select a command based on the backend resource type and run the command to access the VPC endpoint. The command format is as follows:

   Command Private domain name:Port number

   The following is a command example:

   curl Private domain name:Port number