MaxCompute:Access MaxCompute through PrivateLink

Step 1: Create endpoints

1. Create a virtual private cloud (VPC) and a vSwitch. For more information, see Virtual Private Cloud and vSwitches.

2. Create the frontend interface endpoint. The endpoint, VPC, and vSwitch must be in the same region.

   1. Log on to the Virtual Private Cloud (VPC) console.

   2. In the navigation pane on the left, choose Endpoints. In the upper-left corner, select a region.

      This example uses China (Shenzhen).

   3. On the Endpoints page, click the Interface Endpoint tab.

   4. Click Create Endpoint. If this is your first time accessing the service, click Enable PrivateLink first.

   5. On the Create Endpoint page, configure the parameters as follows. Use the default configurations for the other parameters.

      Parameter	Description
      Endpoint Name	Enter a custom name for the endpoint.
      Endpoint Type	Select Interface Endpoint. This indicates that the service consumer accesses the service from the service provider through an interface endpoint.
      Endpoint Service	In this example, select Alibaba Cloud Service, enter com.aliyuncs.privatelink.cn-shenzhen.maxcompute.frontend in the Endpoint Service Name search box, and select the endpoint service. An endpoint can be associated with only one endpoint service.
      VPC	Select the VPC where you want to create the endpoint.
      Security Groups	Select a security group to associate with the endpoint NIC. The security group controls data communication for the endpoint NIC.
      Zone and vSwitch	Select the zone that corresponds to the endpoint service, and then select a vSwitch in that zone. The system automatically creates an endpoint NIC in each vSwitch.

3. Create the tunnel-associated endpoint.

   1. On the Endpoints page, click the Interface Endpoint tab.

   2. Click the Create Endpoint button.

   3. On the Create Endpoint page, configure the parameters as follows. Use the default configurations for the other parameters.

      Parameter	Description
      Endpoint Name	Enter a custom name for the endpoint.
      Endpoint Type	Select Interface Endpoint, which indicates that the service consumer accesses the service from the service provider through an interface endpoint.
      Endpoint Service	In this example, select Alibaba Cloud Service, enter com.aliyuncs.privatelink.cn-shenzhen.maxcompute.tunnel.share in the Endpoint Service Name search box, and select the endpoint service. An endpoint can be associated with only one endpoint service.
      VPC	Select the VPC where you want to create the endpoint.
      Security Groups	Select a security group to associate with the endpoint NIC. The security group controls data communication for the endpoint NIC.
      Zone and vSwitch	Select the zone that corresponds to the endpoint service, and then select a vSwitch in that zone. The system automatically creates an endpoint NIC in each vSwitch.

The two endpoints are interdependent. You must enable both endpoints at the same time. Otherwise, connectivity may fail.

Step 2: Enable domain name access

1. Log on to the Virtual Private Cloud (VPC) console.

2. In the navigation pane on the left, choose Endpoints. In the upper-left corner, select a region.

3. On the Endpoints page, click the name of the target endpoint.

   In this example, select the frontend node.

4. On the endpoint details page, click the Basic Information tab.

   In the Domain Name of Endpoint Service section, turn on the Custom Domain Name switch.

Step 3: Usage

1. Download and install the MaxCompute client (odpscmd).

2. Configure the odps_config.ini file. For detailed steps and parameter descriptions, see Connect using a local client (odpscmd). The following figure shows an example:

   • end_point: http://service-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com/api

   • tunnel_endpoint: http://dt-pvl.cn-shenzhen-vpc.maxcompute.aliyun-inc.com

   

3. The following figure shows a successful connection: