Skip to content

chore(byoc): Refactor BYOC private networking setup docs#5780

Open
duanshiqiang wants to merge 2 commits intomainfrom
feature-gcp-private-connect
Open

chore(byoc): Refactor BYOC private networking setup docs#5780
duanshiqiang wants to merge 2 commits intomainfrom
feature-gcp-private-connect

Conversation

@duanshiqiang
Copy link

@duanshiqiang duanshiqiang commented Mar 19, 2026

Summary

This PR mainly adds GCP private networking setup besides AWS to current BYOC docs.

Checklist

@vercel
Copy link

vercel bot commented Mar 19, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clickhouse-docs Ready Ready Preview Mar 26, 2026 1:16am
clickhouse-docs-ko Ready Ready Preview, Comment Mar 26, 2026 1:16am
clickhouse-docs-ru Ready Ready Preview, Comment Mar 26, 2026 1:16am
clickhouse-docs-zh Ready Ready Preview, Comment Mar 26, 2026 1:16am
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
clickhouse-docs-jp Ignored Ignored Mar 26, 2026 1:16am

Request Review

@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 9f1ab77 to 7545b46 Compare March 19, 2026 05:03
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 7545b46 to 762f499 Compare March 20, 2026 09:21
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 762f499 to 0295fb4 Compare March 20, 2026 09:23
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 0295fb4 to 4e960f2 Compare March 22, 2026 01:50
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 4e960f2 to ec9ef4a Compare March 22, 2026 02:10
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from ec9ef4a to b801267 Compare March 22, 2026 03:01
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from b801267 to 9c81118 Compare March 24, 2026 04:27
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch 2 times, most recently from 631984b to 8a9092c Compare March 24, 2026 04:48
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 8a9092c to 56eb099 Compare March 24, 2026 06:05
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 56eb099 to cf5b585 Compare March 24, 2026 06:29
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch 3 times, most recently from e0f83c0 to cfc6ce2 Compare March 24, 2026 06:44
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from cfc6ce2 to 6feaabc Compare March 25, 2026 01:27
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch from 6feaabc to aea5aa2 Compare March 25, 2026 04:14
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch 3 times, most recently from c980035 to f14bf55 Compare March 25, 2026 04:19
@duanshiqiang duanshiqiang force-pushed the feature-gcp-private-connect branch 4 times, most recently from 610d07f to e66d826 Compare March 25, 2026 05:55
@duanshiqiang duanshiqiang marked this pull request as ready for review March 25, 2026 05:55
@duanshiqiang duanshiqiang requested a review from a team as a code owner March 25, 2026 05:55
Copy link
Collaborator

@dhtclk dhtclk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great work, just a few comments!

import byoc_vpcpeering3 from '@site/static/images/cloud/reference/byoc-vpcpeering-gcp-3.png';
import byoc_privatelink_1 from '@site/static/images/cloud/reference/byoc-privatelink-gcp-1.png';
import byoc_privatelink_2 from '@site/static/images/cloud/reference/byoc-privatelink-gcp-2.png';
import byoc_privatelink_3 from '@site/static/images/cloud/reference/byoc-privatelink-gcp-2.png';
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
import byoc_privatelink_3 from '@site/static/images/cloud/reference/byoc-privatelink-gcp-2.png';
import byoc_privatelink_3 from '@site/static/images/cloud/reference/byoc-privatelink-gcp-3.png';

Want to make sure we're linking to the proper screenshot here?

The PSC endpoint format is similar to the public endpoint, but includes a `p` subdomain. For example:

- **Public endpoint**: `h5ju65kv87.mhp0y4dmph.us-east1.gcp.clickhouse-byoc.com`
- **PrivateLink endpoint**: `h5ju65kv87.p.mhp0y4dmph.us-east1.gcp.clickhouse-byoc.com`
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Isn't PrivateLink AWS specific terminology? Should we change this?


### Obtain GCP PSC service name and DNS name {#step-2-obtain-gcp-service-attachment-and-dns-name-for-private-service-connect}

ClickHouse Support will provide you with the PSC Service name. You can also obtain it in the ClickHouse Cloud console, under "Orgainzation" -> "Infrastructure", click into the infra name to see the details.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
ClickHouse Support will provide you with the PSC Service name. You can also obtain it in the ClickHouse Cloud console, under "Orgainzation" -> "Infrastructure", click into the infra name to see the details.
ClickHouse Support will provide you with the PSC Service name. You can also obtain it in the ClickHouse Cloud console, under "Organization" -> "Infrastructure", click into the infra name to see the details.

<Image img={byoc_privatelink_3} size="lg" alt="BYOC PSC Endpoint" border />
<Image img={byoc_privatelink_4} size="lg" alt="BYOC PSC Endpoint" border />

### Create an PSC endpoint in your Network {#step-3-create-endpoint}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### Create an PSC endpoint in your Network {#step-3-create-endpoint}
### Create a PSC endpoint in your network {#step-3-create-endpoint}

- Input a valid endpoint name
- Choose your network and select subnets (This is the network where your client application will be connecting from)
- Choose or create a new IP address for the endpoint, the IP address needs to be used by step [Set private DNS name for endpoint](#step-4-set-private-dns-name-for-endpoint)
- Click "Add Endpoint", wait a momemt for the endpoint to be created.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- Click "Add Endpoint", wait a momemt for the endpoint to be created.
- Click "Add Endpoint", wait a moment for the endpoint to be created.


To create or delete VPC peering for ClickHouse BYOC, follow the steps:

> The example steps are for a simple scenario, for advanced scenarios such as peering with on-premises connectivity, some adjustments may required.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
> The example steps are for a simple scenario, for advanced scenarios such as peering with on-premises connectivity, some adjustments may required.
> The example steps are for a simple scenario, for advanced scenarios such as peering with on-premises connectivity, some adjustments may be required.

---
title: 'Private networking setup'
slug: /cloud/reference/byoc/onboarding/network
hide_title: true
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
hide_title: true
sidebar_label: 'Private networking setup'
hide_title: true

| [AWS PrivateLink](/manage/security/aws-privatelink) | This document describes how to connect to ClickHouse Cloud using AWS PrivateLink. |
| [Azure Private Link](/cloud/security/azure-privatelink) | How to set up Azure Private Link |
| [Azure Private Preview](/cloud/reference/byoc/onboarding/azure-private-preview) | Onboard ClickHouse BYOC on Azure using the Terraform module and cross-tenant authentication |
| [BYOC AWS private networking setup](/cloud/reference/byoc/onboarding/network-aws) | Deploy ClickHouse on your own cloud infrastructure |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| [BYOC AWS private networking setup](/cloud/reference/byoc/onboarding/network-aws) | Deploy ClickHouse on your own cloud infrastructure |
| [BYOC AWS private networking setup](/cloud/reference/byoc/onboarding/network-aws) | Set up VPC Peering or PrivateLink for BYOC on AWS |

More specific descriptions may help users can the table.

| [Azure Private Preview](/cloud/reference/byoc/onboarding/azure-private-preview) | Onboard ClickHouse BYOC on Azure using the Terraform module and cross-tenant authentication |
| [BYOC AWS private networking setup](/cloud/reference/byoc/onboarding/network-aws) | Deploy ClickHouse on your own cloud infrastructure |
| [BYOC FAQ](/cloud/reference/byoc/reference/faq) | Deploy ClickHouse on your own cloud infrastructure |
| [BYOC GCP private networking setup](/cloud/reference/byoc/onboarding/network-gcp) | Deploy ClickHouse on your own cloud infrastructure |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| [BYOC GCP private networking setup](/cloud/reference/byoc/onboarding/network-gcp) | Deploy ClickHouse on your own cloud infrastructure |
| [BYOC GCP private networking setup](/cloud/reference/byoc/onboarding/network-gcp) | Set up VPC Peering or Private Service Connect for BYOC on GCP |

### Enable private load balancer for ClickHouse BYOC {#step-enable-private-load-balancer-for-clickhouse-byoc}
Contact ClickHouse Support to enable Private Load Balancer.

## Setup VPC peering {#gcp-vpc-peering}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider wrapping steps in <VerticalStepper headerLevel="h3"> like in the aws page for consistency.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants