PrivateLink provides secure and stable private connections between a Virtual Private Cloud (VPC) and Alibaba Cloud services. This simplifies your network architecture and allows for private access to services, which avoids the security risks of using the public internet. This topic describes how to use an endpoint to privately access Simple Message Queue (formerly MNS).
Scenarios
You can use a PrivateLink endpoint to access a Simple Message Queue (formerly MNS) instance from a specific VPC in the following scenarios:
You need to isolate network links for instance-based products.
You use Cloud Enterprise Network (CEN) for cloud and inter-region networking.
You cannot use routing rules to access Alibaba Cloud services when you build a network using CEN.
After you create the PrivateLink endpoint, the original internal endpoint can still be used to access the Simple Message Queue (formerly MNS) service.
Billing
Activating PrivateLink is free of charge. After activation, you are charged on a pay-as-you-go basis for your actual usage. Bills are generated hourly. The fees include instance fees and data processing fees. For more information, see Billing.
The service consumer and the service provider for PrivateLink can use different Alibaba Cloud accounts. You can also specify whether the service consumer or the service provider pays the fees. For more information, see Payer.
Limits
To privately access Simple Message Queue (formerly MNS), submit a ticket to request this feature. Alibaba Cloud technical support will promptly enable it for you.
Prerequisites
Create a Virtual Private Cloud (VPC) and a vSwitch in the same region where you plan to create the endpoint. For more information, see Create and manage a VPC.
submit a ticket to have your account whitelisted for PrivateLink access. In the ticket, provide the user ID (UID) of the Alibaba Cloud account that was used to purchase the instance and the region where the instance resides.
Procedure
Log on to the VPC console.
In the navigation pane on the left, click Endpoints.
In the top menu bar, select the region that supports private access to Simple Message Queue (formerly MNS) resources through an endpoint.
On the Endpoints page, on the Interface Endpoint tab, click Create Endpoint.
On the Create Endpoint page, configure the following parameters and accept the default values for the other parameters.
Parameter
Description
Endpoint Name
Enter a custom name for the endpoint.
Endpoint Type
Select Interface Endpoint. This allows a service consumer to access the service from a service provider through an interface endpoint.
Endpoint Service
Click Alibaba Cloud Service. In the search box for the endpoint service name, enter the domain name and select the endpoint service. The domain name format is
com.aliyuncs.${regionId}.smq. For example,com.aliyuncs.cn-heyuan-acdr-1.smqis the endpoint service name for the Heyuan Automotive-dedicated Cloud.NoteAn endpoint can be associated with only one endpoint service.
VPC
Select the VPC in which you want to create the endpoint.
Security Group
Select the security groups to associate with the endpoint elastic network interface (ENI). Security groups control data communication to and from the endpoint ENI.
Zone And VSwitch
Select the zone where the endpoint service is available, and then select a vSwitch in that zone. The system automatically creates an endpoint ENI in each selected vSwitch.
Click Confirm Creation.
After the endpoint is created, record the generated endpoint domain name. You will use it later to access the Simple Message Queue (formerly MNS) service.
After you obtain the endpoint domain name, configure it in your software development kit (SDK) code to access Simple Message Queue (formerly MNS) over PrivateLink. For more information, see Console SDK and Client SDK.
References
For more information about PrivateLink, see What is PrivateLink?.