Complete Baidu Cloud Cheatsheet: Master China’s Leading Cloud Platform

Introduction to Baidu Cloud

Baidu Cloud (百度云/Baidu Yun) is one of China’s largest cloud service platforms, operated by Baidu, Inc. It offers cloud storage, computing resources, AI capabilities, and a wide array of enterprise solutions. As China’s alternative to services like AWS and Google Cloud, Baidu Cloud is essential for businesses operating in the Chinese market due to its compliance with local regulations, optimized performance within China’s internet infrastructure, and integration with other popular Chinese digital services.

Core Concepts and Services

Baidu Cloud Storage Solutions

Compute Services

• Baidu Cloud Compute (BCC): Virtual servers similar to EC2/VM instances
• Baidu Cloud Container (CCE): Container orchestration platform
• Baidu Cloud Function Compute: Serverless computing service
• Baidu Dedicated Host (BDH): Physical dedicated servers
• Baidu GPU Cloud: GPU-equipped VMs for AI/ML workloads

Networking Services

• Baidu Cloud Load Balancing (BLB): Traffic distribution
• Baidu Cloud DNS: Domain name resolution service
• Baidu Virtual Private Cloud (VPC): Isolated network environments
• Baidu Direct Connect (BDC): Dedicated connections between on-premises and Baidu Cloud
• Baidu Content Delivery Network (CDN): Global content delivery acceleration

Artificial Intelligence and Big Data Services

AI Platform Services

Big Data Services

• Baidu MaxCompute: Data warehousing and processing
• Baidu DataHub: Real-time data processing
• Baidu DataWorks: Visual data development platform
• Baidu Elasticsearch: Search and analytics engine
• Baidu Analytics: Business intelligence and reporting

Account Management and Access Control

Account Setup and Security

1. Registration: Create a Baidu account at baidu.com
2. Real-name Verification: Complete identity verification (required for many services)
3. Multi-factor Authentication: Enable for additional security
4. API Key Management: Create and manage keys in the console
5. Password Policies: Set strong passwords and regular rotation

Access Control

• IAM (Identity and Access Management): User and permission management
• Resource Groups: Logical grouping of resources
• Role-Based Access Control: Pre-defined and custom roles
• Security Groups: Virtual firewalls for compute instances
• Access Control Lists: Fine-grained network controls

Working with Baidu Cloud Storage

Baidu Cloud Disk (Personal Storage)

1. Installation: Download client from pan.baidu.com
2. File Upload:
   • Web interface: Drag-and-drop or select files
   • Desktop client: Sync folders automatically
   • Mobile app: Upload from device or camera
3. File Sharing:
   • Generate share links (可以加密码/with optional passwords)
   • Set expiration dates
   • Control download permissions

Baidu Object Storage (BOS)

# Upload file using Baidu Cloud CLI
bce bos cp local-file.txt bos:/your-bucket/path/

# Download file
bce bos cp bos:/your-bucket/path/file.txt local-download.txt

# List bucket contents
bce bos ls bos:/your-bucket/

# Create a bucket
bce bos mb bos:/new-bucket-name

Virtual Machine Management

Creating and Managing BCC Instances

1. Creating an Instance:

   • Log into Baidu Cloud Console
   • Navigate to BCC service
   • Select “Create Instance”
   • Choose region, instance type, OS image
   • Configure network, storage, security groups
   • Complete payment

2. Common Operations:

   • Start/Stop/Restart: Via console or API
   • Resize: Adjust compute capacity
   • Rebuild: Reinstall OS while preserving IP
   • Clone: Create identical instances
   • Snapshot: Point-in-time backup

Instance Connection Methods

Networking Configuration

VPC and Subnet Setup

1. Create VPC:

   • Define IP CIDR block (e.g., 10.0.0.0/16)
   • Set region and name
   • Configure routing

2. Create Subnets:

   • Define subnet CIDR (e.g., 10.0.1.0/24)
   • Select availability zone
   • Configure network ACLs

3. Configure Security Groups:

   • Define inbound/outbound rules
   • Apply to relevant instances
   • Use principle of least privilege

Load Balancer Configuration

1. Create Load Balancer:

   • Choose type (internal/external)
   • Select VPC and subnets
   • Configure listeners (port, protocol)

2. Configure Backend Servers:

   • Add BCC instances to pool
   • Define health checks
   • Set weight distribution

Database Services

Database Options

Database Management

1. Creation and Configuration:

   • Select engine and version
   • Choose instance specifications
   • Configure high availability options
   • Set backup policies

2. Monitoring and Maintenance:

   • Performance metrics dashboard
   • Slow query analysis
   • Automated backups
   • Version upgrades

Content Delivery and Acceleration

CDN Configuration

1. Add Domain:

   • Enter domain name
   • Configure CNAME record
   • Select acceleration type (web, download, streaming)

2. Origin Server Settings:

   • Point to BOS bucket or custom origin
   • Configure origin protocol
   • Set backup origins

3. Cache Rules:

   • Define TTL by file type
   • Configure query string handling
   • Set cache refresh rules

HTTPS Setup

1. Certificate Management:

   • Upload existing certificate
   • Purchase certificate through Baidu
   • Configure SSL settings

2. HTTPS Acceleration:

   • Enable HTTPS to origin
   • Configure HTTP/HTTPS redirection
   • Set TLS version requirements

Developer Tools and SDKs

Supported Programming Languages

• Java SDK: Comprehensive support for all services
• Python SDK: Good coverage of major services
• Go SDK: Growing support for core services
• Node.js SDK: Available for common services
• PHP/C++/.NET: Available with varying levels of support

SDK Installation Examples

# Python SDK
pip install bce-python-sdk

# Node.js SDK
npm install @baiducloud/sdk

# Java SDK (Maven)
<dependency>
  <groupId>com.baidubce</groupId>
  <artifactId>bce-java-sdk</artifactId>
  <version>0.10.X</version>
</dependency>

API Authentication

# Python example for API authentication
from baidubce.auth.bce_credentials import BceCredentials
from baidubce.bce_client_configuration import BceClientConfiguration

config = BceClientConfiguration(
    credentials=BceCredentials(ACCESS_KEY_ID, SECRET_ACCESS_KEY),
    endpoint='bos.bj.baidubce.com'
)

AI Service Implementation

Image Recognition Implementation

# Python example for image recognition
from aip import AipImageClassify

APP_ID = 'your_app_id'
API_KEY = 'your_api_key'
SECRET_KEY = 'your_secret_key'

client = AipImageClassify(APP_ID, API_KEY, SECRET_KEY)
image = open('test.jpg', 'rb').read()
result = client.advancedGeneral(image)
print(result)

Speech Recognition and Synthesis

# Speech recognition example
from aip import AipSpeech

client = AipSpeech(APP_ID, API_KEY, SECRET_KEY)

# Recognition
with open('audio.wav', 'rb') as fp:
    result = client.asr(fp.read(), 'wav', 16000, {'dev_pid': 1536})
print(result)

# Synthesis
result = client.synthesis('你好百度云', 'zh', 1, {'vol': 5})
with open('output.mp3', 'wb') as fp:
    fp.write(result)

Common Challenges and Solutions

Performance Optimization

Regulatory Compliance

• ICP Filing: Required for websites hosted in China

  • Apply through Baidu Cloud console
  • Process takes 10-20 business days
  • Requires business license and personal ID

• Data Residency:

  • Keep sensitive data in mainland China regions
  • Implement data classification schemes
  • Use encryption for data protection

• Content Compliance:

  • Implement content moderation
  • Regular security audits
  • Keep records for required timeframes

Cost Management

• Resource Optimization:

  • Right-size instances based on actual usage
  • Use spot instances for non-critical workloads
  • Implement auto-scaling for variable loads
  • Schedule non-production environments

• Cost Analysis:

  • Enable detailed billing
  • Set up budget alerts
  • Tag resources for departmental attribution
  • Regular review of unused resources

Best Practices for Baidu Cloud

Security Best Practices

• Implement principle of least privilege for all accounts
• Enable multi-factor authentication for all users
• Regularly rotate access keys and credentials
• Use encryption for data at rest and in transit
• Configure security groups to restrict traffic by default

Architecture Recommendations

• Design for high availability across availability zones
• Implement immutable infrastructure patterns
• Use managed services where possible
• Automate deployment using infrastructure as code
• Implement proper monitoring and logging

Operational Excellence

• Document all configuration changes
• Use resource tagging consistently
• Implement automated backup strategies
• Create runbooks for common operations
• Regular disaster recovery testing

Resources for Further Learning

Official Documentation

• Baidu Cloud Official Documentation
• Baidu AI Platform Documentation
• PaddlePaddle Framework Documentation

Community Resources

• Baidu Cloud Developer Forum: https://cloud.baidu.com/forum/
• GitHub Repositories: https://github.com/baidubce
• WeChat Developer Groups (join through official Baidu Cloud WeChat account)

Training and Certification

• Baidu Cloud Certified Professional (BCCP)
• Baidu Cloud Solution Architect (BCSA)
• Baidu AI Developer Certification (BAIDC)
• PaddlePaddle Developer Certification

This cheatsheet provides a comprehensive overview of Baidu Cloud services and best practices. For the most current information, always refer to the official Baidu Cloud documentation, as services and features are regularly updated.