Access MaxCompute through PrivateLink

Step 1: Create endpoints

1. Create a VPC and a vSwitch. For more information, see VPCs and vSwitches.

2. Create an interface endpoint for the frontend service. The endpoint, VPC, and vSwitch must be in the same region.

   1. Log in to the Virtual Private Cloud console.

   2. In the navigation pane on the left, choose Endpoints. In the top-left corner, select a region.

      This example uses China (Shenzhen).

   3. On the Endpoints page, click the Interface Endpoint tab.

   4. Click Create Endpoint. If you are using this service for the first time, first click Enable PrivateLink.

   5. On the Create Endpoint page, configure the parameters as described in the following instructions. Leave the other parameters at their default settings.

      Parameter	Description
      Endpoint Name	Enter a custom name for the endpoint.
      Endpoint Type	Select Interface Endpoint. This type allows a service consumer to access a service through an interface endpoint.
      Endpoint Service	Select Alibaba Cloud Service. In the Endpoint Service Name search box, enter com.aliyuncs.privatelink.cn-shenzhen.maxcompute.frontend and select the service. An endpoint can connect to only one endpoint service.
      VPC	Select the VPC in which you want to create the endpoint.
      Security Groups	Select a security group to associate with the endpoint's elastic network interface. The security group controls data traffic for the elastic network interface.
      Zone and vSwitch	Select an availability zone that the endpoint service supports, and then select a vSwitch in that zone. The system automatically creates an elastic network interface for the endpoint in each selected vSwitch.

3. Create an endpoint for the tunnel service.

   1. On the Endpoints page, click the Interface Endpoint tab.

   2. Click Create Endpoint.

   3. On the Create Endpoint page, configure the parameters as described in the following instructions. Leave the other parameters at their default settings.

      Parameter	Description
      Endpoint Name	Enter a custom name for the endpoint.
      Endpoint Type	Select Interface Endpoint. This type allows a service consumer to access a service through an interface endpoint.
      Endpoint Service	Select Alibaba Cloud Service. In the Endpoint Service Name search box, enter com.aliyuncs.privatelink.cn-shenzhen.maxcompute.tunnel.share and select the service. An endpoint can connect to only one endpoint service.
      VPC	Select the VPC in which you want to create the endpoint.
      Security Groups	Select a security group to associate with the endpoint's elastic network interface. The security group controls data traffic for the elastic network interface.
      Zone and vSwitch	Select an availability zone that the endpoint service supports, and then select a vSwitch in that zone. The system automatically creates an elastic network interface for the endpoint in each selected vSwitch.

These two endpoints are interdependent. Enable both at the same time to prevent connection failures.

Step 2: Enable domain name access

1. Log in to the Virtual Private Cloud console.

2. In the navigation pane on the left, choose Endpoints. In the top-left corner, select a region.

3. On the Endpoints page, click the name of the target endpoint.

   This example uses the frontend endpoint.

4. On the endpoint details page, click the Basic Information tab.

   In the Domain Name of Endpoint Service section, turn on the Custom Domain Name switch.

Step 3: Use the odpscmd client

1. Ensure that you have downloaded and installed the odpscmd client.

2. Configure the odps_config.ini file. For more information about the procedure and parameters, see Connect to MaxCompute by using the odpscmd client. The following is an example configuration:

   • end_point: http://service-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com/api

   • tunnel_endpoint: http://dt-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com

   ############################################ Required fields ############################################
   project_name=xxx
   access_id=xxx
   access_key=xxx
   end_point=http://service-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com/api
   ############################################ Optional fields ############################################
   log_view_host=http://logview.odps.aliyun.com
   # https_check=
   # confirm threshold for query input size(unit: GB)
   # data_size_confirm=
   # this url is for odpscmd update
   # update_url=
   # download sql results by instance tunnel
   use_instance_tunnel=true
   # the max records when download sql results by instance tunnel
   instance_tunnel_max_record=10000
   # IMPORTANT:
   #   If leaving tunnel_endpoint untouched, console will try to automatically get one from odps service, which might charge networking fees in some cases.
   #   Please refer to https://help.aliyun.com/document_detail/34951.html
   tunnel_endpoint=http://dt-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com
   # use set.<key>=
   # e.g. set.odps.sql.select.output.format=

3. A successful connection produces output similar to the following:

   [root@iZxxx                    vZ ~]# cd bin
   [root@iZxxx                    vZ bin]# ./odpscmd --config=test.conf
                __
    ---  ---/ /---   --- ---- --- -  ----/ /
   / _ \/ _ // _ \ (_-</ __// ' \/ _ /
   \___/\_,_// .__//___/\__//_//_/\_,_/
            /_/
   Aliyun ODPS Command Line Tool
   Version 0.40.10
   @Copyright 2020 Alibaba Cloud Computing Co., Ltd. All rights reserved.
   Connecting to http://service-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com/api, project: xxx
   Endpoint: http://service-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com/api
   Project: xxx
   Quota: default in region N/A
   Timezone: Asia/Shanghai
   Connected!