VPC-specific internal domain names

VPC-specific internal domain name format

A VPC-specific internal domain name has the format {regionId}-internal.log.aliyuncs.com, where {regionId} is the ID of the region where SLS resides. Take the value of {regionId} from the Region ID column of the tables in Region and CIDR block reference. This domain name is the value that you set as the endpoint in an SDK or API client.

Differences from existing internal domain names

VPC-specific internal domain names use dedicated CIDR blocks. In each region, SLS assigns a fixed CIDR block to the virtual IP address (VIP) of the VPC-specific internal domain name in that region. Because this CIDR block is fixed, you can use it as the destination of the route that you configure for access from outside the region.

Access through a VPC-specific internal domain name is limited to the internal network. The request must come from a network that is connected to the internal network of the region where SLS resides, such as a VPC in that region or a network that you connect to it. An environment outside such a network, including a client that connects over the Internet, cannot reach the domain name.

Access scenarios and network requirements

The network configuration that a VPC-specific internal domain name requires depends on where the client runs:

• A client in a VPC in the same region as SLS — Set the VPC-specific internal domain name of that region as the endpoint. No additional network connection or route is required.

• An Elastic Compute Service (ECS) instance in another region, or a device in an on-premises data center — Connect the client network to the internal network of the region where SLS resides, and then configure a route that points to the CIDR block of that region.

Set the domain name as the endpoint

Set the VPC-specific internal domain name of the region where SLS resides as the endpoint in your client. The following example uses Java:

import com.aliyun.openservices.log.Client;
import com.aliyun.openservices.log.http.client.ClientConfiguration;
import com.aliyun.openservices.log.http.signer.SignVersion;

public class Sample {

    public static void main(String[] args) throws Exception {
        // This example uses the China (Beijing) region. For other regions, specify the corresponding value.
        String endpoint = "cn-beijing-internal.log.aliyuncs.com";
        // This example obtains the AccessKey ID and AccessKey secret from environment variables.
        String accessKeyId = System.getenv("ALIBABA_CLOUD_ACCESS_KEY_ID");
        String accessKeySecret = System.getenv("ALIBABA_CLOUD_ACCESS_KEY_SECRET");
        ClientConfiguration clientConfiguration = new ClientConfiguration();
        clientConfiguration.setRegion("cn-beijing");
        clientConfiguration.setSignatureVersion(SignVersion.V4);
        Client client = new Client(endpoint,
                accessKeyId,
                accessKeySecret,
                clientConfiguration);
    }
}

The example builds a client for the China (Beijing) region. For another region, specify the endpoint and the region ID of that region. The client configuration in the example also specifies signature version V4. Before you run the example, set the ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET environment variables.

Region and CIDR block reference

The following tables list the VPC-specific internal domain name and the fixed IPv4 CIDR block of each region. Locate the region where SLS resides, and then use the domain name and the CIDR block in that row.