Manage public endpoints - Tair (Redis® OSS-Compatible) - Alibaba Cloud Documentation Center

Endpoint network types

Network type

Description

VPC

A VPC (Virtual Private Cloud) is your own isolated private network on Alibaba Cloud. VPCs are logically isolated at Layer 2, providing higher security and performance.
By default, an instance provides a VPC endpoint. Connecting over a VPC offers higher security and performance.

public network

Because connecting over the public network carries security risks, an instance has no public endpoint by default. Apply for a public endpoint if your client falls into any of the following cases:

The client device (such as an ECS instance) is not in the same VPC as the instance.
The client device is not in the same region as the instance.
The client is a device outside Alibaba Cloud (such as a local machine).

Note

For faster and more secure transmission, migrate your application to an ECS instance in the same region and network type as your instance, and then use the VPC endpoint.
Public and VPC connections share the instance's bandwidth and connection quota. For example, if an instance has 96 Mbit/s of bandwidth and VPC connections already use 70 Mbit/s, public connections can use at most 26 Mbit/s.

Limitations

Cloud-native cluster instances in direct connection mode do not support applying for a public endpoint.
Password-free access is available only over VPC. When connecting over a public endpoint, you must provide a password even if password-free access is enabled on the instance.
Applying for a public endpoint does not affect the instance, but it lowers security. Use it with caution.
After you apply for a public endpoint, the instance enters the Network Changing state, during which operations such as changing configurations and resetting the password are unavailable until the change completes.

Apply for a public endpoint

Procedure

Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.
In the Connection Information section, click Apply for Endpoint to the right of Internet Access.
Note
If the instance is a cloud-native cluster instance in direct connection mode, the Apply for Endpoint button is not displayed or is dimmed.

In the panel that appears, enter an endpoint and a port number.

Parameter	Description
Endpoint	You can modify only the prefix of the endpoint. By default, the prefix is the instance ID. The prefix must be 8 to 40 characters in length and can contain lowercase letters and digits. It must start with a lowercase letter.
Port	When you modify the endpoint, you can also modify the port number. Valid values for this parameter: 1024 to 65535.

Click OK.
After the application is submitted, the public endpoint is displayed in the Connection Information section.

Release the public endpoint

Prerequisite: A public endpoint has been allocated to the instance (see Apply for a public endpoint above).

Warning

This operation makes the current public endpoint unavailable, and clients can no longer connect to the instance over the public endpoint. Proceed with caution.

Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.
In the Connection Information section, click Release Connection Address next to Public Access.
In the panel that appears, click OK.

After releasing the endpoint, we recommend that you delete the corresponding public IP address from the instance's whitelist to ensure data security. For details, see Configure whitelists.

FAQ

Is there a charge for applying for a public endpoint?

No. Applying for a public endpoint is free, and traffic over public endpoints is not billed.

Why can't I find the option to apply for a public endpoint?

Two situations prevent the button from appearing:

No whitelist configured. If the Connection Information section does not display a VPC endpoint, the instance has no whitelist. Configure a whitelist first. See Configure whitelists.
Direct connection mode. Cloud-native cluster instances in direct connection mode do not support public endpoints.

Note
To check whether an instance runs in direct connection mode, see How do I know whether an instance is a cloud-native cluster instance in direct connection mode?.

If your application's ECS instance is not in the same VPC as the instance, or your application is not on Alibaba Cloud, consider using proxy mode. A direct-connection cloud-native cluster cannot switch to proxy mode in place. Use the instance restoration feature to restore the backup data to a new instance and select Proxy as the connection mode. For details, see Restore data from a backup set to a new instance.

Can I use password-free access over a public endpoint?

No. Password-free access works only over VPC. When connecting over a public endpoint, you must authenticate with a password.

What does the "Current engine version does not support operations" error mean?

The instance is running an outdated minor engine version that does not support this operation. Update to a supported version and try again. For details, see Update the minor version of an instance.

Related APIs

API operation	Description
AllocateInstancePublicConnection	Applies for a public endpoint for an instance.
ReleaseInstancePublicConnection	Releases a public endpoint for an instance.