Docs

Torch Log Service

Data collection

Configure network connections for cross-region log collection

If log service is deployed in different regions, you can securely and efficiently transfer log data between regions through VPC private network connections.

This topic introduces detailed cross-region log collection network configuration by using an example. This example employs Cloud Enterprise Network (CEN) for network connectivity and uses private network connections. In this example, the ECS server in China 2 (Shanghai) accesses TLS in China 2 (Beijing) via terminal endpoint domain name.

Cloud Enterprise Network (CEN): Achieve interconnection between network instances across regions using CEN instances.

PrivateLink: Establish secure, private network connections through endpoint and endpoint service.

Billing notes

When configuring a private network connection, if you create an endpoint and associate it with the endpoint service com.volces.privatelink.{region}.tls, no fees are incurred for this endpoint.

Prepare data

In the following example, the project of all resources is set to default, and the availability zone is set to Zone A.

Data type	Instance name example	Notice
Private network	China (Shanghai): VPC-sh China (Beijing): VPC-bj	Obtain the VPC and Subnet for China (Beijing) and China (Shanghai). Make sure there are no conflicts in the subnet CIDR range. If a private network does not exist, refer to Creating VPC to create one.
Subnet	China (Shanghai): Subnet-sh China (Beijing): Subnet-bj
Cloud server instance	ECS-sh. Details: Region: China (Shanghai) Private network: vpc-sh Subnet: Subnet-sh	Obtain ECS instances in China (Shanghai) for collecting log data. If no ECS instances exist, see Purchase options overview for instructions.

Step 1 Configure Cloud Enterprise Network(CEN)

Create a CEN instance

On the CEN Instances tab, click Create CEN.

Create a CEN instance. You can refer to the following example and fill in other parameters as needed or leave them as default.

Name: cen-tls

Affiliated project: default

Click Reset.

Load inter-region network instances

On the CEN list page, click the name of the newly CEN instance cen-tls.

On the Network Instance tab, click Attach Network Instance.

Refer to examples below to add two network instances in China (Beijing) and China (Shanghai).

Account: This account

Region: Select China (Beijing) and China (Shanghai)

Instance type: Private network

Network instance: Select VPC-bj and VPC-sh

Create bandwidth package

In the left navigation, select the Bandwidth Package tab and click Create Bandwidth Package.

Follow the example below to create a bandwidth package. Fill out the remaining parameters as needed or keep the default settings.

Cloud Enterprise Network: Select the newly created CEN instance cen-tls

Project: default (Bandwidth packages and CEN instances must be in the same project)

Click Confirm order to review your order details, select the service terms, and then click Buy now. You will be redirected to the order page to pay by following the instructions on the screen.

Configure inter-region bandwidth package

Return to the CEN instance tab.

On the CEN list page, click the name of the newly CEN instance cen-tls.

Click Inter-region bandwidth to enter the inter-region bandwidth tab.

In Bandwidth Package section, click Associate Bandwidth Package, select the bandwidth package you created above, and click Associate.

In Inter-region Bandwidth, click Allocate Inter-region Bandwidth, select the bandwidth package you created before, set Interoperability area to China (Beijing) and China (Shanghai), set the bandwidth based on your business needs, and then click Allocate.

Step 2 Configure private network connection

Create endpoint

Search for Products & Services in the console and select PrivateLink. Click PrivateLink in the search results.

In the top menu bar, select the target region. For this example, select China (Beijing).

Click Create Endpoint.

Refer to the following example to create the endpoint. Configure other parameters based on your needs or leave them as default.

Region: China (Beijing)

Type: Interface

Affiliated project: default

Add method: VolcanoEngine Service

Endpoint service: Select the com.volces.privatelink.{region}.tls service for the corresponding region.

VPC: Select the VPC VPC-bj corresponding to China 2 (Beijing).

Availability Zone and Subnet: Select Availability Zone A corresponding to China 2 (Beijing), and subnet Subnet-bj.

Record Endpoint domain name and IP.

In the endpoint list, view and record the endpoint domain name corresponding to the recently created endpoint.

The endpoint domain name is formatted as: *.ep-misgsxxx.tls.cn-beijing.privatelink.volces.com.

Click the name of the newly created endpoint.

On the Availability Zone and network interface tab, record the IP in the IP Address column of the corresponding availability zone's row, such as 192.168.7.64.

Step 3 Verify the network link

In the console, search for ECS in Products and Services, and then click ECS in the search results.

Select Instances & Images > Instances.

In the top navigation bar, select the target region. In this example, select China (Shanghai).

In the Actions column of the ECS instance you created, click Connect and follow the instructions to enter the ECS.

Run the following command to access TLS using the endpoint domain name.

curl -v https://ep-misgsxxx.tls.cn-beijing.privatelink.volces.com/projects

Return results:

Connected to ep-misgsxxx.tls.cn-beijing.privatelink.volces.com (192.168.7.64) port 443 (#0)
...
{"errorCode":"InvalidAccessKeyId","errorMessage":"The Access Key Id you provided does not exist in our records."}

Notice

If the resolved domain and IP match the ones recorded in the endpoint, cross-region collection network configuration is successful.

When collecting logs in China (Shanghai), use this domain name for configuration.

Last updated: 2026.05.26 11:31:26