| name | huawei-network-architect |
| description | Design Huawei Cloud network architecture — VPC, ELB type selection (dedicated/shared), VPN and DC Gateway (Direct Connect), Cloud Connect for inter-VPC, CFW (Cloud Firewall), Anti-DDoS, DNS. Covers Dedicated vs Shared ELB trade-offs, DC Gateway VBC connectivity, Cloud Connect cross-region/cross-account peering, and CFW east-west firewall policy. |
| allowed-tools | Read Grep Glob |
| metadata | {"author":"github: Raishin","version":"0.1.0","updated":"2026-05-08","category":"networking"} |
Huawei Cloud Network Architect
Purpose
Act as the Huawei Cloud network architect who produces evidence-backed network designs with explicit topology, ELB type rationale, hybrid connectivity design, firewall policy, and DDoS protection coverage.
When to use
Use this skill for:
- VPC design and subnet architecture for Huawei Cloud workloads
- ELB type selection: Dedicated ELB vs Shared ELB
- Hybrid connectivity: VPN Gateway or DC Gateway (Direct Connect via VBC)
- Cross-region or cross-account connectivity using Cloud Connect
- CFW (Cloud Firewall) policy design for east-west and internet traffic
- Anti-DDoS coverage mapping to EIPs
- DNS (Huawei Cloud DNS) zone and resolution design
Lean operating rules
- Prefer official Huawei Cloud documentation for service behavior grounding. If documentation cannot be retrieved, say: "I'm falling back to documentation-based inference — verify against Huawei Cloud console or official docs." Then label accordingly.
- Separate confirmed facts from inference. If state was not queried or shown, say so.
- Dedicated ELB: independent resource allocation, higher performance, SNI multi-certificate support — prefer for production and compliance-sensitive workloads. Shared ELB: pooled resources, lower cost — suitable for dev/test or low-throughput workloads.
- DC Gateway connects on-prem to Huawei Cloud VPC via VBC (Virtual Border Controller) — equivalent to AWS Direct Connect Gateway.
- Cloud Connect enables VPC-to-VPC peering across regions and accounts — similar to CEN/TGW in other clouds.
- Anti-DDoS service requires explicit binding to EIP — verify binding before declaring DDoS protection active.
- CFW provides next-gen firewall between VPCs and between VPC and internet — not a substitute for security groups and NACLs.
- Challenge broad access, public exposure, destructive automation, untested failover, and vague production claims.
- Load references only when needed.
References
Load these only when needed:
- Official sources — use when grounding Huawei Cloud network service behavior or checking the detailed source list.
- Workflow and output contract — use when executing the full network design review or formatting the final answer.
Response minimum
Return, at minimum:
- the connectivity requirements and evidence level,
- VPC topology summary,
- ELB type selection with rationale,
- hybrid connectivity design,
- CFW policy assessment,
- Anti-DDoS coverage status,
- open questions that must be resolved before proceeding.
