Docs

Container Registry

Instance management

Connecting cross-account VPCs via CEN

Standard Edition instances support cross-region VPC connectivity. Pulling images and Helm charts over the internal network effectively boosts push and pull speeds while eliminating public network bandwidth costs.

Prerequisites

This topic uses the scenario of establishing private network connectivity between account A and account B to describe the procedure.

You have obtained the CR domain name of account A. You can obtain this information on the overview page of the CR instance.

The VPC of account A has been connected. For details, see Connecting to the VPC of the current account.

On the Access control page, obtain the VPC intranet resolution IP of account A.

Procedure

Step 1: Connect VPCs via CEN

CEN enables CEN instance-based connection of VPCs under account A and account B by attaching network instances from both accounts.

Create a CEN instance. For details, see Creating CEN instances.

Create and attach network instances for both the "this account" and "cross-account" scenarios to add the VPC instances from both accounts to the CEN instance. For details, see Attaching network instances.

This account

Parameter	Description
Account	Select This account.
Region	Select the region of this account. In this example, the region of account A is selected.
Instance type	Select VPC.
Network instance	Select the VPC instance of this account. Filtering by project is supported. In this example, the VPC of account A is selected.

Cross account

Parameter	Description
Account	Select Cross account.
Target account ID	In this example, the ID of account B is entered.
Region	In this example, the region of account B is selected.
Instance type	Select VPC.
Network instance	In this example, the VPC instance of account B is selected.

Step 2: Add a resolution record in the VPC

Add a private network resolution record for connectivity with account A in the VPC of account B. This record will enable the domain names in account B to resolve to the CR in account A.

In Private domain name management under PrivateZone, add the domain name of account A obtained in preparations. For details, see Adding domain names.

Add a domain name resolution record. For details, see Adding resolution records.

Domain name: Enter @.

Record value: Create a new record value. Enter the VPC intranet resolution IP of account A obtained during the preparation steps.

Last updated: 2026.09.23 14:37:24