Docs

Direct Connect

On-premises to Cloud migration

Accessing cloud services from an on-premises data center

This topic describes how to use Direct Connect (DC) to enable an on-premises data center accessing VolcanoEngine cloud services.

Background

Generally, a data center cannot directly access the internal cloud services of VolcanoEngine (such as Torch Object Storage (TOS)). However, in certain business scenarios where access is needed, you can use DC and Cloud Enterprise Network (CEN) products to enable an on-premises data center accessing VolcanoEngine cloud services.

Prerequisites

One available DC Connection exists.

You have obtained the address and region of the cloud services to be accessed. This example demonstrates accessing a cloud service at 100.XX.XX.105/32 in China (Beijing).

You have created a Virtual Private Cloud (named VPC-01) to facilitate network communication between the DC-connected data center and cloud services. For procedure, see Creating a VPC.

Limits

Ensure that the cloud gateway peer IP configured on the Virtual Interface is not within 100.64.0.0/10. Otherwise, network connectivity between the on-premises data center and the cloud service cannot be established.

The on-premises data center connected through DC can only access cloud services in the same region as the DC Gateway. For example, if your on-premises data center network accesses VolcanoEngine through a DC Gateway in China (Beijing), the data center can only configure and access cloud services in China (Beijing).

In a CEN, routes with the same destination CIDR block cannot be configured in the same region, but can be configured in separate regions.

Procedure

Step 1: Create a DC Connection

Activate one DC Connections. For procedure, see Creating a Direct Connect Connection. In this example, the DC Connection used is DAS708_port102_conn in China (Beijing).

Step 2: Create a DC Gateway

Click "Create DC Gateway" to create a DC Gateway with the following configuration.

Parameter	Description	Value
Regions	Select the region where the DC Gateway is deployed. It must match the region of the DC Connection.	China (Beijing)
Name	Set a name for the DC Gateway.	Dcgw-01
ASN	Set an ASN for the DC Gateway. This example does not require a custom ASN and directly uses the Volcano Engine ASN.	137718
IPv6	Enable IPv6 as needed.	Disable
Project	Select the project to which the new DC Gateway belongs.	Project-test
Agreement	Follow the console guidance to review and accept Legal.	Check

Click "Create" to complete the action.

Click "Go to console" to back to the Direct Connect Gateway console. You can view the new DC gateway (Dcg-01) in the DC Gateway list.

Step 3: Create a Virtual Interface

Click "Create DC Virtual Interface".

Configure the Virtual Interface based on the table below.

Parameter	Description	Sample value
Basic information
Resource ownership	Select the account to which the Virtual Interface belongs. tip The feature of creating a Shared Virtual Interface for another account is currently in the beta stage. If you need a trial, please contact your account manager.	My account
Regions	Select the region where the Virtual Interface is deployed. It must be the same as the region of the DC Connection and the DC Gateway.	China (Beijing)
Name	Set a name for the Ethernet Virtual Interface.	VIF-udar
DC Connection	Filter the DC Connection by project to associate with the Virtual Interface.	Project-test\|DAS708_port102_conn
DC Gateway	Filter the DC Gateway by project to associate with the Virtual Interface.	Project-test\|Dcg-01
Bandwidth limit	Enable bandwidth limit as needed.	Disable
Interconnection information
IPv4 interconnect IP	Set the IPv4 IP for interconnection. Cloud gateway peer IP: Set an IPv4 address and mask for the cloud DC gateway. You may customize the interconnect IP according to network planning, but confirm that the cloud gateway peer IP and your gateway peer IP are in the same CIDR block without duplication. Use a private IP address that does not conflict with cloud or on-premises IP addresses. Your gateway peer IP: Set an IPv4 address and mask for the gateway on your on-premises data center. You may customize the interconnect IP according to network planning, but confirm that the cloud gateway peer IP and your gateway peer IP are in the same CIDR block without duplication. Use a private IP address that does not conflict with cloud or on-premises IP addresses.	Cloud gateway IP: 10.0.0.1/30 Your gateway IP: 10.0.0.2/30
IPv6 interconnect IP	Enable IPv6 IP for interconnection as needed.	Disabled
VLAN ID	Set a VLAN ID for connecting to the data center. Confirm that this VLAN ID is unoccupied.	10
Routing information
Route type	Support two route types: BGP and Static. This example uses BGP routes.	BGP route
Peer ASN	Set the ASN for the IPv4 BGP Peer. The valid range for ASN is 1 to 4294960000. The ASN of the BGP Peer can neither be the same as that of the DC Gateway, nor be the VolcanoEngine ASN (137718).	42950
BGP key	Type the key for the IPv4 BGP Peer.	00***10
Detection method	Select a detection method to check the line health.	Disable

warning

In this example, a BGP Peer is established along with the creation of the Virtual Interface. Once established, the BGP information (Peer ASN and BGP key) cannot be modified.

Click "Create" to complete the action.

Step 4: Create a CEN and configure a cloud service

Click "Create CEN".

Configure the CEN based on the table below and load "VPC-01".

Parameter	Value
Basic information
Name	Cen-01
Network Instances
Attach Network Instance	Enable
Regions	China (Beijing)
Instance type	VPC
Network Instances	Project-test\|VPC-01
More information
Project	Project-test

Click "Create" to complete the action.

In the CEN instances list, click the name of target instance (Cen-01).

In the "Network Instances" tab, click "Attach Network Instance".

The Attach Network Instance window pops up. Configure the information of the DC Gateway instance to be loaded.

Parameter
Value
Account
My account
Regions
China (Beijing)
Instance type
Direct Connect Gateway
Network Instances
Dcgw-01

In the CEN instances list, click "Cen-01" to enter the details page.

In the "Cloud Services" tab, click "Configure Cloud Service Access".

In the Configure Cloud Service Access window on the right, configure the information of the cloud service to be accessed.

Parameter	Value
Cloud Services info
Service region	China (Beijing)
Service VPC	VPC-01
Service address	100.XX.XX.105/32
Publish information
Publish scope	Default service scope
Posting instances	China (Beijing)

Click "Add" to complete the configuration.

Results

After completing all configurations, you can view all configured cloud service routes under the "Routing information" tab of the CEN details page. In this example, the DC uses BGP routing. Therefore, cloud service routes in the CEN will be automatically propagated into the route table of the DC Gateway, enabling the on-premises data center accessing cloud services via the CEN associated with the DC Gateway.

Last updated: 2026.08.24 11:30:49

Parameter	Value
Account	My account
Regions	China (Beijing)
Instance type	Direct Connect Gateway
Network Instances	Dcgw-01