Docs

Elastic Compute Service

Instance configuration

Configuring WSUS service for Windows OS

Volcano Engine provides a Windows WSUS server, which helps reduce the public network bandwidth consumed by Windows updates on your instance and further lowers the small chance of risks introduced by security updates.

Terms

About WSUS

WSUS (Windows Server Update Services) is a service launched by Microsoft. Companies and organizations can use it to manage and distribute content to be updated for the Windows operating system and related Microsoft products within the internal network. With this service, you can download update files from Microsoft update servers to your company's internal WSUS server, and internal clients can then obtain updates from that server. This keeps systems up to date in a timely manner, saves network bandwidth, and enables unified management of update content for internal clients. Learn more.

About Group Policy

Group Policy is a service provided by Microsoft to control the working environment of user accounts and computer accounts. It allows you to configure and manage account and computer settings on devices running the Windows Server and Windows client operating systems. Learn more.

About Registry

The Registry is a system-defined hierarchical database in the Windows operating system. It stores configuration information and parameters for the system, hardware devices, applications, and other components. Learn more.

Applicable scenarios

Cannot access the public network directly

If the internal network of your ECS instance is completely isolated from the Internet for security purposes, which prevents direct access to official update servers of Microsoft, a VolcanoEngine WSUS update server is recommended. It allows you to update the ECS instance timely via the VolcanoEngine intranet to make sure the system runs stably.

Public network bandwidth limitation

If updates directly from Microsoft are very slow on your ECS instance due to limited public network bandwidth, we recommend using the Volcano Engine WSUS update server. This avoids consuming the instance's public network bandwidth during updates, which could otherwise cause network congestion and affect other services.

Focus on update stability

If you are concerned that directly installing updates pushed by Microsoft may affect the stability of your ECS instance, we recommend using the Volcano Engine WSUS update server. The WSUS update server inspects all updates received from Microsoft before pushing them, which further reduces the rare chance that a security update causes stability issues.

Usage notes

Because the Volcano Engine WSUS update server must first receive and inspect updates from Microsoft, the updates you receive from it may arrive slightly later than Microsoft's official updates.

Below are the currently supported operating systems for configuring VolcanoEngine WSUS update server:

Operating system	Versions
Windows Server	Windows Server 2022 Datacenter Edition 64 bit Chinese Windows Server 2022 Datacenter Edition 64 bit English
		Windows Server 2019 Datacenter Edition 64 bit Chinese Windows Server 2019 Datacenter Edition 64 bit English
		Windows Server 2016 Datacenter Edition 64 bit Chinese Windows Server 2016 Datacenter Edition 64 bit English

Procedure

To configure the WSUS service, you can modify the Group Policy or update the Registry. In the example provided in this topic, Windows Server 2022 Datacenter Edition 64 bit Chinese is used. The path of the actual operating system shall prevail.

warning

After you configure WSUS via the Group Policy, the operating system writes the relevant configuration information to the Registry during startup/updates. The corresponding Registry content is then overwritten.

If you have configured WSUS via the Registry but have not modified the corresponding Group Policy, when the Group Policy is later modified and forcibly updated, the Group Policy configuration overrides the Registry configuration.

Modify Group Policy configurations

Update Registry configurations

Click the "Start" button, and click "System Tools > Run".

Enter gpedit.msc and click the "OK" button.

In the "Local Group Policy Editor" window, select "Computer Configuration > Administrative Templates > Windows Components > Windows Update" in the left-side navigation pane.

Configure automatic updates

In the feature directory on the right, double-click "Configure Automatic Updates".

In the "Configure Automatic Updates" window, select "Enabled" and then choose an automatic update option (for example, 2 - Notify for download and auto install).

Click the "Apply" button, and then click the "OK" button to complete the configuration.

Configure update server and statistics server

In the feature directory on the right, double-click "Specify intranet Microsoft update service location".

In the "Specify intranet Microsoft update service location" window, select the "Enabled" option and enter the VolcanoEngine WSUS server addresshttp://wsus.update.ivolces.com in both "Set the intranet update service for detecting updates:" and "Set the intranet statistics service:".

Click the "Apply" button, and then click the "OK" button to complete the configuration.

Restart the instance to make the configuration take effect.

Last updated: 2026.06.18 17:49:52