You can assign a custom domain name to a Container Registry Enterprise Edition instance and secure it with an SSL certificate. This allows you to access your instance over HTTPS by using your own domain name.
Prerequisites
You have a domain name with an ICP filing.
A domain name, which consists of a string of names separated by periods (.), is used to identify a Container Registry Enterprise Edition instance when data is transferred. You can register a domain name by using Alibaba Cloud Domain Name Service. For more information, see What is Alibaba Cloud Domain Name Service?.
NoteYou do not need an ICP filing for your domain name if your Container Registry instance is in a region that does not require it.
You have an SSL certificate.
An SSL certificate enables the HTTPS protocol for your Container Registry Enterprise Edition instance. It encrypts data in transit and authenticates the server's identity to ensure secure communication.
Alibaba Cloud provides SSL certificates issued by multiple trusted Certificate Authorities (CAs) from within and outside the Chinese mainland. With these certificates, you can migrate your services from HTTP to HTTPS at a minimal cost. You can purchase or upload a certificate in the Alibaba Cloud Certificate Management Service console. For more information, see Purchase a commercial certificate.
NoteIf you purchased an SSL certificate from a third-party provider, you must upload it to the SSL Certificate Service. For more information, see Upload, synchronize, and share an SSL certificate.
Domain name certificates currently support TLS 1.1 and TLS 1.2.
Alibaba Cloud DNS is activated.
Alibaba Cloud DNS routes requests for your custom domain name to the corresponding IP addresses of your Container Registry Enterprise Edition instance. For more information, see Activate PrivateZone.
RAM access control is configured for using custom domain names.
When you use a custom domain name, you must add a RAM role to your account and grant this role the permissions to manage Alibaba Cloud SSL certificates so that Container Registry can access the required SSL certificate. For more information, see Configure RAM access control for a custom domain name.
Create a custom domain name
An Enterprise Edition instance has two types of domain names:
Default domain names: A public domain name and a VPC domain name.
Custom domain name: A domain name that you add.
Log on to the Container Registry console.
In the top navigation bar, select a region.
On the Instances page, click the Enterprise Edition instance that you want to manage.
In the navigation pane on the left, choose .
On the Domain Name page, click Add Domain Name.
In the Add Domain Name dialog box, select a Domain Name and a Certificate ID, and then click Confirm.
Configure access control and DNS resolution
Internet Access
Configure public access control. For more information, see Configure public access control.
Log on to the Alibaba Cloud DNS console.
In the navigation pane on the left, click Public Zone.
On the Public Zone page, click Add Domain Name. In the Add Domain Name dialog box, enter your custom domain name and click OK.
On the Public Zone page, find the target domain name and click Settings in the Actions column.
On the Settings page, click Add Record.
In the Add Record dialog box, configure the parameters and click OK.
Parameter
Configuration
Record Type
Select CNAME.
Hostname
Enter the hostname part of your custom domain. For example, if your custom domain name is
registry.example.com, enterregistry.Query Source
Specifies the region and ISP of the visitor. In this example, select Default.
Record Value
Enter the default public domain name of the instance.
TTL
This is the cache time (TTL). A smaller value means that record changes propagate faster. The default is 10 minutes.
After you add the DNS record, you can access the Container Registry Enterprise Edition instance over the internet by using the custom domain name.
VPC access
Configure VPC access control. For more information, see Configure VPC access control.
Log on to the Alibaba Cloud DNS console.
In the navigation pane on the left, click Private Zone.
On the Authoritative Zone tab, click Add Zone.
In the Add Authoritative Zone dialog box, enter your custom domain name such as www.example.com in the Authoritative Zone field, select Recursive Resolution Proxy for Subdomain Names, and then click Confirm.
On the Authoritative Zone tab, find the target zone and click Settings in the Actions column.
On the Settings tab, click Add Record.
In the Add Record dialog box, configure the parameters and click Confirm.
Parameter
Configuration
Record type
Select CNAME.
Hostname
Enter @.
Record value
Enter the default VPC domain name of the instance.
TTL
Use the default value.
On the Settings tab, you can view the newly added record.
Return to the Private Zone page. On the Authoritative Zone tab, find the target zone and click Effective Scope in the Actions column.
In the Effective Scope panel, under Effective in VPCs, select the VPC associated with your instanceConfigure VPC access control. For more information, see Configure VPC access control.. Then, click Confirm.
On the Authoritative Zone tab, after the VPC appears in the Effective Scope column for the zone, you can access the Container Registry Enterprise Edition instance from the associated VPC by using the custom domain name.