Use this guide to set up network connectivity between a data source and DataWorks when both belong to the same Alibaba Cloud account and the same region. The example uses ApsaraDB RDS for MySQL.
Use cases
This scheme applies when all three conditions are met:
-
The data source belongs to an Alibaba Cloud service.
-
The data source and DataWorks workspace belong to the same Alibaba Cloud account.
-
The data source and DataWorks workspace are in the same region.
If your setup does not meet all three conditions, see the other network connectivity schemes for alternatives.
How it works
Deploy the resource group and the data source in the same Virtual Private Cloud (VPC). When both resources share a VPC, the resource group can reach the data source over the internal network — no cross-VPC routing or additional tunnel configuration required.
Prerequisites
Before you begin, ensure that you have:
-
A DataWorks-supported data source on Alibaba Cloud
-
A resource group that is attached to the workspace
-
A data source and workspace that meet all the conditions in Use cases
Configure network connectivity
Step 1: Get the VPC information
Collect the VPC details from both sides and record the values — you will compare them in Step 2.
Data source side
The following steps use RDS for MySQL as an example. For other Alibaba Cloud services, refer to the product documentation to find the VPC information.
-
Go to the RDS console. Find the target instance and click the Instance Name to open the Basic Information page.
-
In the left-side navigation pane, click Database Connection. Record the VPC ID displayed on this page — this is VPC 1 in the steps that follow.
DataWorks side
-
Go to the DataWorks resource group list page. Find the target resource group and click Network Settings in the Operation column.
-
Under Data Scheduling & Data Integration, find the VPC and vSwitch CIDR Block fields. Record the VPC ID — this is VPC 2 in the steps that follow. Also record the vSwitch CIDR Block value; you will need it in Step 3.
Step 2: Establish a network connection
Compare VPC 1 and VPC 2:
-
Same VPC (VPC 1 = VPC 2): The data source and the resource group are already on the same network. No further action is needed — skip to Step 3.
-
Different VPCs (VPC 1 ≠ VPC 2): On the resource group's network settings page, click Add Binding and attach VPC 1. This places the resource group in the same VPC as the data source.
Step 3: Add to the whitelist
If the data source uses whitelist-based access control, add the resource group's vSwitch CIDR block to the data source's whitelist. This allows the resource group to reach the data source.
The following steps use RDS for MySQL IP whitelist settings as an example. Add the vSwitch CIDR Block recorded in Step 1 to the Whitelist And Security Group in the RDS console.
For other Alibaba Cloud services, refer to the product documentation to configure the whitelist.
Test network connectivity
-
Log in to the DataWorks console. In the top navigation bar, select the target region. In the left-side navigation pane, choose Data Integration > Data Integration. Select the target workspace from the drop-down list and click Go to Data Integration.
-
In the left-side navigation pane, click Data Source. On the Data Source page, click Add Data Source. Select a data source type and fill in the connection parameters.
-
In the connection configuration, select the resource group connected to the data source network, then click Test Connectivity. If the result shows Failed, use the Connectivity Diagnosis Tool to troubleshoot the issue. If the resource group still cannot connect to the data source, submit a ticket.
What's next
For answers to common questions about network connectivity and resource group operations, see Resource group operations and network connectivity.