The IVPD service uses a public endpoint. If an Elastic Computing Service (ECS) instance in a virtual private cloud (VPC) does not have a public IP address or public bandwidth, it cannot access the IVPD service. To enable access, you can associate the VPC with Alibaba Cloud DNS PrivateZone. This enables API calls over the Alibaba Cloud private network.
Background information
The IVPD service uses a public endpoint. If an Elastic Computing Service (ECS) instance in a virtual private cloud (VPC) does not have a public IP address or public bandwidth, it cannot access the IVPD service. To enable access, you can associate the VPC with Alibaba Cloud DNS PrivateZone. This enables API calls over the Alibaba Cloud private network.
Usage notes
This solution is applicable only in the region where the ECS instance is located. Cross-region configuration of PrivateZone is not supported.
The following table lists the service endpoints that support PrivateZone. Make sure that the endpoint you use is in this list.
Alibaba Cloud Region |
Region ID |
CNAME Record Value |
Private Endpoint |
China (Shanghai) |
cn-shanghai |
popunify-vpc.cn-shanghai.aliyuncs.com |
ivpd-vpc.cn-shanghai.aliyuncs.com |
China (Beijing) |
cn-beijing |
popunify-vpc.cn-beijing.aliyuncs.com |
ivpd-vpc.cn-beijing.aliyuncs.com |
Procedure
Log on to the Alibaba Cloud DNS console.
In the navigation pane on the left, click PrivateZone.
Click Add Zone.
In the Add PrivateZone dialog box, complete the following settings and click OK.
Zone Name: Enter the private domain name for the region. For example, in the China (Shanghai) region, enter ivpd-vpc.cn-shanghai.aliyuncs.com.
Subdomain Recursive Resolution Proxy: Select this option. This ensures that if a DNS query is for a subdomain of the zone name that does not have a record in the zone file, the query is forwarded to a public authoritative DNS for resolution.
Find the PrivateZone that you created and click Resolution Settings in the Actions column.
On the Resolution Settings page, click Add Record.
In the Add Record dialog box, complete the following settings and click OK.
Record Type: Select CNAME.
Host: Enter
@.Value: Enter the CNAME record value for the corresponding region. For example, for the China (Shanghai) region, enter popunify-vpc.cn-shanghai.aliyuncs.com.
TTL: The time to live (TTL). This topic uses 1 minute as an example.
Go back to the Alibaba Cloud DNS > PrivateZone page. Find the PrivateZone that you created and click Associate VPC in the Actions column.
In the Associate VPC dialog box, select the same region as the PrivateZone. Select the VPCs where your instances are located, and then click OK. You can select multiple VPCs. Note: Ensure that you select the VPC that contains your ECS instance.
Verification
After you associate the VPC with the PrivateZone, log on to the instance using a remote connection. From the ECS instance, test access to the endpoint for the region.
Usage
When you use an SDK, set the endpoint to the private domain name that you configured in the preceding steps:
Java:
ProductDomain vpcDomain = new ProductDomain("ivpd", "ivpd-vpc.cn-shanghai.aliyuncs.com");
req.setSysProductDomain(vpcDomain);