Container Registry:Accelerate image synchronization

Sync acceleration performance data

The following table shows P95 latency data from March 2022 for synchronizing a single-layer 1 GB image across global regions using sync acceleration. Latency values exclude queuing time from exceeding the concurrency limit. Data for the Chinese mainland is based on the Hangzhou region.

Step 1 (optional): Grant permissions to a RAM user

A RAM user needs the following permissions to use the custom synchronization link feature. For more information, see Grant permissions to a RAM user by using a custom policy.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "cr:CreateSyncCustomLink",
                "cr:GetSyncCustomLink",
                "cr:UpdateSyncCustomLink",
                "cr:ListSyncCustomLink",
                "cr:DeleteSyncCustomLink"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Step 2 (optional): Create VPCs

Create a Virtual Private Cloud (VPC) in both the source and destination regions. This topic uses a source instance in the Hangzhou region and a destination instance in the Singapore region. The VPC in the Hangzhou region is named test1 and the VPC in the Singapore region is named test2.

Step 3: Connect networks by using a CEN instance

Create a Cloud Enterprise Network (CEN) instance and configure a transit router in both the source and destination regions. For more information, see Connect VPCs across regions.

Step 4: Add VPCs to ACR instances

1. Log on to the Container Registry console.

2. In the top navigation bar, select a region.

3. On the Instances page, click the source Enterprise Edition instance.

4. On the Instances page, click the Enterprise Edition instance in the Hangzhou region.

5. In the left-side navigation pane of the instance management page, choose Repository > Access Control.

6. On the VPC tab, click Add VPC .

7. In the Add VPC dialog box, set Existing VPC to test1, select a vSwitch, and then click Confirm.

8. Repeat the preceding steps to add the VPC named test2 to the destination instance. Note the Visit IP of the instance within test2.

   You can add a VPC to multiple destination instances in the same region. After the VPC is added, all instances can use the same link to synchronize images.

9. From an ECS instance within the VPC associated with the source instance, test the connectivity to the destination instance IP address. Replace <Target_IP> with the IP address that you recorded in the previous step and run the following command:

   telnet <Target_IP> 443

   Expected output:

   Trying <Target_IP>...
   Connected to <Target_IP>.

Step 5: Configure the custom synchronization link

You can create only one synchronization link between two instances in different regions. Do not create duplicate links.

1. Log on to the Container Registry console.

2. In the top navigation bar, select a region.

3. On the Instances page, click the source Enterprise Edition instance.

4. On the Instances page, click the Enterprise Edition instance in the Hangzhou region.

5. In the left-side navigation pane, choose Distribution > Synchronization Link. Then, click Add Synchronization Link.

6. In the Network Instance wizard, configure the parameters and click Next.

   Parameter	Description
   Link Name	Enter a name for the synchronization link.
   Link Description	Enter a description for the synchronization link.
   Instance ID/Name	Select the ID of the Cloud Enterprise Network instance.
   Source Network	Configure the network for the source instance region: Virtual Private Cloud: Select a VPC. In this topic, the VPC named test1 in the Hangzhou region is selected. Note For a VPC to be selectable, it must be added to the source instance and have cross-region bandwidth configured in CEN. vSwitch: Select a vSwitch. The available vSwitches vary based on the region and availability zone. Select a vSwitch as prompted on the page. security group: Select a security group to secure the link. Note The security group must allow inbound traffic on ports 80 and 443. Managed security groups are not supported.
   Destination Network	Configure the network for the destination instance region: Region: Select the region of the destination instance. Virtual Private Cloud: Select a VPC. In this topic, the VPC named test2 in the Singapore region is selected. Note When you select a VPC for the destination instance region, the VPC must be added to the destination instance and have cross-region bandwidth configured in CEN. Otherwise, the VPC is not available for selection.

7. In the Interconnection Bandwidth wizard, configure the parameters and click Create.

   Parameter	Description
   Maximum Bandwidth Usage	The maximum bandwidth for synchronization tasks on this link. The bandwidth is dynamically and evenly distributed among concurrent tasks on the link.
   Total Sync Tasks	The maximum number of concurrent synchronization tasks on this link. Tasks that exceed this limit are queued. Note Standard Edition instances support a maximum of 5 concurrent synchronization tasks. Premium Edition instances support a maximum of 10.

8. On the Synchronization Link page, find the link that you created and click Enable in the Actions column.

9. In the Tips dialog box, click Confirm.

   After you enable the synchronization link, you can create a sync rule to synchronize images between the source and destination instances. The sync rule automatically uses this link to accelerate image synchronization. For more information, see Synchronize images between instances in the same account and Synchronize images between instances across different accounts.

How to check the link type

To check the link type, log on to the Container Registry console. On the management page of your Enterprise Edition instance, choose Distribution > Replication Record in the left-side navigation pane. On the Replication Record page, you can view the link type used by each synchronization task. The following list describes the link types:

• Default Link: The default link of the Enterprise Edition instance is used.

• Cross-border Acceleration Link: The sync acceleration feature speeds up image synchronization.

• Custom Link: A custom CEN link speeds up image synchronization.