PrivateLink establishes private connections between aVirtual Private Cloud (VPC) and Alibaba Cloud services, eliminating public internet exposure. Use a PrivateLink endpoint to privately accessSimple Message Queue (formerly MNS).
Use cases
Use a PrivateLink endpoint to access Simple Message Queue (formerly MNS) from a VPC in the following scenarios:
-
You need to isolate network traffic for services running on instances.
-
You are building a cloud or inter-region network using Cloud Enterprise Network (CEN).
-
You cannot use routing rules to access cloud products in your CEN-based network.
After you create a PrivateLink endpoint, you can still use the original Simple Message Queue (formerly MNS) to access the Simple Message Queue (formerly MNS) service.
Billing
-
Activating PrivateLink is free. You are then billed hourly for instance usage and data processing. Billing details.
-
The service consumer and provider for PrivateLink can use different Alibaba Cloud accounts and designate the Payer.
Limitations
To enable private access to Simple Message Queue (formerly MNS), you must submit a ticket to request access. Alibaba Cloud activates the feature for your account.
Prerequisites
-
A VPC and vSwitch exist in the region where you want to create the endpoint. Create and manage a VPC.
-
You have submitted a ticket to add your account to the PrivateLink access whitelist. Provide your primary account UID and resource region in the ticket.
Procedure
Log on to the VPC console.
-
In the left-side navigation pane, click Endpoints.
-
In the top navigation bar, select a region that supports PrivateLink access toSimple Message Queue (formerly MNS).
-
On the Endpoints page, click the Interface Endpoint tab, and then click Create Endpoint.
-
On the Create Endpoint page, configure the following parameters. Use default values for all other parameters.
Parameter
Description
Endpoint name
Enter a custom name for the endpoint.
Endpoint type
Select Interface Endpoint to allow a service consumer to access a provider's service.
Endpoint service
Click Alibaba Cloud Service. Search for the endpoint service by name. The name follows the format
com.aliyuncs.${regionId}.smq. For example,com.aliyuncs.cn-heyuan-acdr-1.smqis the service name for the Heyuan Auto Dedicated Cloud.NoteAn endpoint can be associated with only one endpoint service.
VPC
Select the VPC for the endpoint.
Security group
The security group controls traffic to and from the endpoint elastic network interface.
Zone and vSwitch
Select the zone that matches the endpoint service, then select a vSwitch. An endpoint ENI is automatically created in each selected vSwitch.
-
Click Create.
Record the endpoint domain name. You need it to accessSimple Message Queue (formerly MNS) service.
On the endpoint details page, in the Endpoint Service Domain Name section, copy the Default Service Domain Name (format:
ep-xxx.smq.xxx.privatelink.aliyuncs.com). -
Use the endpoint domain name in your SDK configuration to access Simple Message Queue (formerly MNS) through PrivateLink. Configure the domain name using the Console SDK or Client SDK.