ApsaraMQ for RabbitMQ supports whitelist configurations that allow clients from specific IP address ranges or specific VPCID entries to access ApsaraMQ for RabbitMQ instances.
Limits
Available in select regions via allowlist.
Legacy instances are not supported. An instance is considered legacy if its ID consists of digits only, or if its VPC domain name does not end with
mq.amqp.aliyuncs.com.VPCID whitelisting applies only to anytunnel-type VPC endpoints. Privatelink-type endpoints are not supported.
Features
ApsaraMQ for RabbitMQ supports two types of whitelist configurations:
VPC whitelist
For anytunnel-type VPC endpoints, you can configure a VPC whitelist by VPCID to ensure that only clients with the specified VPCID entries can access your ApsaraMQ for RabbitMQ instances.
Public IP address whitelist
For Internet access, you can configure a public IP address whitelist. This ensures that only clients with IP addresses in the whitelist can access ApsaraMQ for RabbitMQ instances.
VPC whitelists
Add a VPC to a whitelist
VPCID whitelisting applies only to anytunnel-type VPC endpoints. Privatelink-type endpoints do not support VPCID whitelisting because privatelink natively provides VPC access isolation.
Log on to the ApsaraMQ for RabbitMQ console. In the left-side navigation pane, click Instances.
In the top navigation bar of the Instances page, select the region where the instance that you want to manage resides. Then, in the instance list, click the name of the instance that you want to manage.
On the Instance Details page, click the Endpoint Information tab. In the Whitelist column, click VPC Whitelist.
In the Modify Whitelist panel, on the VPC Whitelist tab, click Add VPC to Whitelist.
Select the VPC that you want to add and click OK.
Public IP address whitelists
Add an IP address to a whitelist
Log on to the ApsaraMQ for RabbitMQ console. In the left-side navigation pane, click Instances.
In the top navigation bar of the Instances page, select the region where the instance that you want to manage resides. Then, in the instance list, click the name of the instance that you want to manage.
On the Instance Details page, click the Endpoint Information tab. In the Whitelist column, click IP Address Whitelist.
In the Modify Whitelist panel, on the Public IP Address Whitelist tab, click Add IP Address to Whitelist.
Enter the IP address segment that you want to add and click OK.
NoteAn IP address segment must be in the following format:
192.168.XX.XX/XX.
If your instance uses open-source authentication and you need to connect via a public endpoint, whitelist configuration alone may not be sufficient. For certain instance types, you must also configure the instance ID in the AMQP client before establishing the connection. For more information, see Access an Open-source Authentication Instance via the Public Endpoint.