Daftar putih IP untuk migrasi, sinkronisasi, berlangganan, atau validasi database on-premises - Data Transmission Service

Saat menggunakan Data Transmission Service (DTS) dengan database sumber atau tujuan yang dilindungi oleh firewall atau daftar putih, Anda harus menambahkan blok CIDR alamat IP DTS ke pengaturan keamanannya. Langkah ini umumnya diperlukan untuk database di pusat data lokal, platform cloud lain, atau database yang dikelola sendiri pada ECS guna memastikan DTS dapat mengakses database sehingga tugas transmisi data berjalan lancar.

Saat DTS terhubung ke database, perilakunya bergantung pada Access Method yang Anda pilih:

Penambahan otomatis: Jika database sumber atau tujuan adalah database Alibaba Cloud yang didukung—seperti RDS, PolarDB, atau MongoDB—dan Access Method yang dipilih adalah Alibaba Cloud Instance, DTS secara otomatis menambahkan blok CIDR alamat IP servernya ke daftar putih database.
Penambahan manual: Jika Anda terhubung ke database menggunakan alamat Public IP Address, Express Connect, VPN Gateway, or Smart Access Gateway, atau Cloud Enterprise Network (CEN), Anda harus menambahkan blok CIDR alamat IP server DTS secara manual ke pengaturan keamanan database.

Catatan penggunaan

Sumber daftar IP: Blok CIDR alamat IP yang ditampilkan di jendela pop-up otorisasi selama konfigurasi tugas di Konsol mungkin sudah kedaluwarsa. Selalu gunakan blok CIDR alamat IP dalam topik ini sebagai sumber resmi.
Perubahan alamat IP: Blok CIDR alamat IP untuk server DTS dapat berubah. Saat pertama kali menggunakan DTS atau menerima notifikasi tentang perluasan daftar putih, perbarui pengaturan Anda berdasarkan informasi yang diberikan di Konsol atau notifikasi tersebut. Periksa dan perbarui alamat IP secara berkala.
- Cloud Enterprise Network (CEN): Perbarui Konfigurasi Akses Layanan Cloud di CEN.
- Express Connect, VPN Gateway, or Smart Access Gateway: Perbarui local CIDR block di koneksi IPsec.
- Database lokal: Perbarui pengaturan keamanan database.
Memastikan kelengkapan daftar IP: Pastikan Anda menambahkan semua blok CIDR alamat IP untuk wilayah yang diperlukan. DTS dapat mengalihkan node layanan untuk disaster recovery. Jika daftar IP tidak lengkap, tugas akan terganggu setelah failover.

Catatan
Jika database Anda diterapkan dalam kluster (misalnya, Kafka, Redis, atau Doris), pastikan Anda menambahkan daftar putih IP DTS ke pengaturan keamanan setiap server dalam kluster tersebut.
Daftar putih yang ditambahkan secara otomatis: Jangan gunakan daftar putih yang dibuat otomatis oleh DTS (yang biasanya memiliki nama berisi dts atau DTS) untuk layanan non-DTS. DTS dapat mengubah daftar putih ini kapan saja, sehingga penggunaannya untuk tujuan lain dapat menyebabkan gangguan layanan.
Instans database cloud memerlukan konfigurasi daftar putih, bukan grup keamanan ECS: Untuk instans database cloud seperti ApsaraDB RDS, Anda harus menambahkan blok CIDR alamat IP server DTS melalui pengaturan daftar putih instans itu sendiri—bukan melalui aturan grup keamanan ECS. Misalnya, untuk instans RDS, buka Konsol RDS dan tambahkan blok CIDR alamat IP server DTS di bawah Data Security > Allowlist Settings. Aturan grup keamanan ECS berlaku di tingkat instans ECS dan tidak mengontrol akses inbound ke instans database cloud.
Risiko keamanan:
- Menambahkan blok CIDR alamat IP publik server DTS, baik secara otomatis maupun manual, dapat menimbulkan risiko keamanan. Dengan menggunakan layanan ini, Anda mengakui risiko tersebut dan bertanggung jawab untuk menerapkan langkah-langkah keamanan dasar. Langkah-langkah tersebut mencakup, namun tidak terbatas pada, penggunaan password akun yang kuat, pembatasan port terbuka untuk setiap blok CIDR, penggunaan autentikasi untuk panggilan API internal, serta peninjauan dan penghapusan aturan jaringan yang tidak diperlukan secara berkala. Sebagai alternatif, lakukan koneksi melalui jaringan pribadi dengan menggunakan Express Connect, VPN Gateway, or Smart Access Gateway.
- Untuk melindungi keamanan database Anda, hapus blok CIDR alamat IP DTS dari pengaturan keamanan Anda setelah tugas DTS selesai atau dirilis.
Risiko salah konfigurasi rute untuk jaringan 100.104.0.0/16: Blok CIDR 100.104.0.0/16 adalah jaringan layanan internal Alibaba Cloud dan merupakan jaringan default yang digunakan DTS untuk berkomunikasi dengan database Anda. Jangan menambahkan rute ke tabel rute VPC Anda yang mengarahkan traffic yang ditujukan ke 100.104.0.0/16 atau subnet-nya ke lompatan berikutnya melalui Express Connect, VPN Gateway, Koneksi Peering VPC, Cloud Enterprise Network (CEN), atau terowongan jaringan kustom lainnya. Konfigurasi semacam ini akan mengganggu koneksi antara DTS dan database Anda serta menyebabkan tugas migrasi data, sinkronisasi data, dan pelacakan perubahan gagal.

Langkah 1: Konfirmasi metode akses

Gunakan tabel berikut untuk mengidentifikasi skenario dan tindakan yang diperlukan. Jika metode akses Anda tidak memerlukan konfigurasi manual (kecuali dalam kasus khusus) atau penambahan manual blok CIDR alamat IP DTS, Anda dapat langsung menuju ke langkah berikutnya.

Metode akses	Skenario	Konfigurasi manual diperlukan	Deskripsi
Alibaba Cloud Instance	Database Alibaba Cloud seperti RDS, PolarDB, dan MongoDB.	Tidak (kecuali dalam kasus khusus)	DTS secara otomatis menambahkan alamat IP-nya ke daftar putih database. Pengecualian: MaxCompute, OceanBase, dan tugas migrasi lintas batas atau lintas wilayah memerlukan konfigurasi manual. MaxCompute: Konfigurasikan daftar putih untuk mengizinkan semua layanan Alibaba Cloud mengakses MaxCompute. OceanBase: Gunakan nilai untuk Express Connect, VPN Gateway, or Smart Access Gateway dari tabel Lampiran: Blok CIDR alamat IP server DTS untuk mengonfigurasi grup daftar putih. Tugas migrasi lintas batas atau lintas wilayah: Selain mengaktifkan titik akhir publik untuk database sumber, Anda juga harus menambahkan alamat Public IP Address untuk wilayah tempat database tujuan berada.
Self-managed Database on ECS	Database yang diterapkan pada instans ECS Alibaba Cloud.	Tidak (kecuali untuk kluster)	DTS secara otomatis menambahkan alamat IP-nya ke grup keamanan ECS. Pengecualian: Jika database Anda (seperti Kafka, Redis, atau Doris) merupakan kluster yang diterapkan pada beberapa instans ECS, DTS hanya mengonfigurasi grup keamanan untuk node pertama yang terhubung. Anda harus menambahkan instans ECS lainnya dalam kluster tersebut secara manual ke grup keamanan yang dibuat DTS.
Public IP Address	Database pusat data lokal Database dari penyedia cloud lain Database apa pun dengan alamat IP publik	Ya	Anda harus menambahkan blok CIDR alamat IP untuk layanan DTS di wilayah yang sesuai ke pengaturan keamanan database Anda.
Express Connect, VPN Gateway, or Smart Access Gateway	Database di pusat data lokal yang terhubung melalui Express Connect atau VPN Gateway.
Cloud Enterprise Network (CEN)	Database di pusat data lokal yang terhubung melalui Cloud Enterprise Network.
Database Gateway	Database yang terhubung melalui Gerbang Basis Data.	Ya (konfigurasikan IP gateway)	Metode ini tidak memerlukan penambahan blok CIDR alamat IP DTS. Sebagai gantinya, tambahkan alamat IP untuk semua Gateway node ID di Gerbang Basis Data (DG) ke pengaturan keamanan database Anda.

Langkah 2: Tentukan wilayah IP server DTS

Berdasarkan jenis tugas dan lokasi database Anda, gunakan tabel berikut untuk menentukan alamat IP server DTS wilayah mana yang harus ditambahkan ke daftar izin database yang tepat.

Jenis tugas	Database untuk daftar izin	Wilayah IP DTS
Sinkronisasi data	Database sumber	Wilayah database sumber dan tujuan
Sinkronisasi data	Database tujuan	Wilayah database tujuan
Migrasi data	Database sumber	Wilayah database tujuan
Migrasi data	Database tujuan	Wilayah database tujuan
Pelacakan perubahan	Database sumber	Wilayah database sumber
Validasi data (dikonfigurasi sebagai tugas terpisah)	Database sumber	Wilayah database tujuan
Validasi data (dikonfigurasi sebagai tugas terpisah)	Database tujuan	Wilayah database tujuan
Persiapan data	Database sumber	Wilayah database tujuan
Persiapan data	Database tujuan	Wilayah database tujuan

Misalnya, jika Anda menggunakan metode akses Public IP Address untuk memigrasikan data dari database MySQL yang dikelola sendiri ke instans RDS for MySQL, Anda harus menambahkan blok CIDR alamat IP publik server DTS untuk wilayah database tujuan ke allowlist database sumber.

Catatan

Pada tugas migrasi data, jika database sumber atau tujuan menggunakan metode akses alamat IP publik, database yang terhubung melalui IP publik harus mendaftarkan blok CIDR alamat IP server DTS dari kedua wilayah database sumber dan wilayah database tujuan.

Langkah 3: Tambahkan alamat IP

Konfigurasi otomatis

Kasus penggunaan

Alibaba Cloud Instance: Layanan database Alibaba Cloud seperti ApsaraDB RDS dan PolarDB. Skenario ini tidak mencakup MaxCompute, OceanBase, dan tugas migrasi lintas batas atau lintas wilayah.
Self-managed Database on ECS: Database yang dikelola sendiri single-node.

Detail konfigurasi

DTS secara otomatis mengonfigurasi daftar putih atau grup keamanan saat membuat koneksi. Untuk informasi lebih lanjut, lihat Daftar putih yang ditambahkan secara otomatis oleh DTS di bawah ini.

Alibaba Cloud Instance: DTS secara otomatis membuat grup daftar putih khusus produk.
Self-managed Database on ECS: DTS secara otomatis membuat grup keamanan bernama SG-DTS-GROUP-xxxx dan menerapkannya ke instans ECS.

Klik untuk memperluas: Daftar putih yang ditambahkan secara otomatis oleh DTS

Saat DTS terhubung ke instans database Alibaba Cloud (misalnya, saat mengklik Test Connectivity and Proceed di Konsol), DTS secara otomatis menambahkan daftar putih IP ke instans tersebut. Tabel berikut mencantumkan instans database Alibaba Cloud yang didukung dan nama daftar putih yang sesuai.

Catatan

Daftar putih IP yang ditambahkan secara otomatis oleh DTS khusus digunakan oleh DTS untuk terhubung ke instans database. Menggunakan daftar putih ini untuk beban kerja non-DTS dapat menyebabkan gangguan layanan.
Nama daftar putih IP yang ditambahkan secara otomatis oleh DTS berisi dts atau DTS.

Metode akses	Instans database	Parameter
Alibaba Cloud Instance	ApsaraDB RDS for MySQL ApsaraDB RDS for PostgreSQL ApsaraDB RDS for MariaDB ApsaraDB RDS for SQL Server	`rdsdts`
	PolarDB for MySQL PolarDB for PostgreSQL PolarDB for PostgreSQL (kompatibel dengan Oracle)	`dtspolardb`
	AnalyticDB for MySQL 3.0	`dts_adb_v3`
	AnalyticDB for PostgreSQL	`dts`
	ApsaraDB for MongoDB	`ddsdts`
	Tair (kompatibel Redis)	`dts_group`
	PolarDB-X 1.0	`drdsdts`
	PolarDB-X 2.0	`polardb_x_dts`
	ApsaraMQ for Kafka	`dts_kafka`
	Alibaba Cloud Elasticsearch	`dts_group`
	Lindorm	`ali_dts_group`
	ApsaraDB for ClickHouse	`dts_clickhouse`
	ApsaraDB for SelectDB	`dts_selectdb`
Self-managed Database on ECS	Instans ECS	`SG-DTS-GROUP-****`

Kasus khusus

Penerapan kluster: Jika database Anda (seperti Kafka, Redis, atau Doris) diterapkan pada beberapa instans ECS, DTS hanya akan mengonfigurasi grup keamanan secara otomatis untuk node pertama yang terhubung. Anda harus menambahkan instans ECS dari node yang tersisa secara manual ke grup keamanan SG-DTS-GROUP-xxxx yang dibuat DTS.
MaxCompute, OceanBase, dan tugas migrasi lintas batas atau lintas wilayah:
- MaxCompute: Konfigurasikan daftar putih untuk mengizinkan semua layanan Alibaba Cloud mengakses MaxCompute.
- OceanBase: Gunakan nilai untuk Express Connect, VPN Gateway, or Smart Access Gateway dari tabel Lampiran: Blok CIDR alamat IP server DTS untuk mengonfigurasi grup daftar putih.
- Tugas migrasi lintas batas atau lintas wilayah: Selain mengaktifkan titik akhir publik untuk database sumber, Anda juga harus menambahkan alamat Public IP Address untuk wilayah tempat database tujuan berada.

Alamat IP publik

Kasus penggunaan

Database yang dikelola sendiri di pusat data lokal.
Database yang dihosting oleh penyedia cloud lain.
Database apa pun yang mengekspos layanan melalui alamat IP publik.

Prosedur

Penting

Jika Access Method adalah Public IP Address, Anda harus menambahkan blok CIDR alamat IP server DTS untuk wilayah database sumber dan tujuan ke pengaturan keamanan instans database.

Dapatkan daftar IP: Di tabel Blok CIDR alamat IP server DTS, dapatkan blok CIDR alamat IP publik untuk wilayah yang ditentukan di Langkah 2.
Konfigurasikan firewall atau daftar putih: Tambahkan blok CIDR ini ke firewall server database atau ke aturan grup keamanan penyedia cloud Anda. DTS memerlukan akses semua-port dari blok CIDR alamat IP server DTS—bukan hanya port layanan database. Pastikan kebijakan firewall atau grup keamanan Anda mengizinkan traffic dari blok CIDR IP DTS di semua port untuk menghindari kegagalan koneksi akibat pembatasan port.

Rekomendasi keamanan

Prinsip hak istimewa minimal: Buka hanya port database yang diperlukan untuk blok CIDR IP DTS. Kami menyarankan agar Anda tidak mengizinkan akses dari 0.0.0.0/0.
Autentikasi kuat: Gunakan akun database khusus dengan izin minimum yang diperlukan dan password yang kuat untuk DTS.
Enkripsi dalam transit: Jika memungkinkan, aktifkan dan terapkan koneksi terenkripsi SSL/TLS untuk database Anda.

Express Connect, VPN Gateway, Smart Access Gateway, atau Cloud Enterprise Network (CEN)

Kasus penggunaan

Metode ini digunakan untuk pusat data lokal yang terhubung ke VPC melalui Express Connect Alibaba Cloud, VPN Gateway, Smart Access Gateway, atau Cloud Enterprise Network (CEN).

Prosedur

Dapatkan daftar IP: Di tabel Blok CIDR alamat IP server DTS, dapatkan blok CIDR layanan cloud untuk wilayah yang ditentukan di Langkah 2.
Konfigurasikan rute dan firewall:
- Cloud Enterprise Network (CEN): Di instans CEN Anda, konfigurasikan blok CIDR IP privat DTS sebagai layanan cloud.
- Express Connect, VPN Gateway, or Smart Access Gateway: Tambahkan blok CIDR IP privat DTS ke Local CIDR Block dari koneksi IPsec-VPN Anda.
- Database lokal: Di firewall pusat data lokal Anda, konfigurasikan kebijakan untuk mengizinkan traffic dari blok CIDR IP privat DTS mengakses database. DTS memerlukan akses semua-port dari blok CIDR alamat IP server DTS. Pastikan kebijakan firewall Anda mengizinkan traffic dari blok CIDR IP DTS di semua port untuk menghindari kegagalan koneksi akibat pembatasan port.

Catatan

Setelah menambahkan alamat IP, periksa konfigurasi instans database Anda untuk pengaturan apa pun yang mungkin membatasi akses dari DTS. Sebagai contoh, periksa parameter berikut di file konfigurasi database yang dikelola sendiri:

MySQL: bind-address.
PostgreSQL: listen_addresses.
MongoDB: bindIp.
Kafka: listeners dan advertised.listeners.
Redis: bind.

Langkah berikutnya

Untuk keamanan, hapus blok CIDR alamat IP DTS yang sesuai dari daftar putih atau grup keamanan database Anda setelah tugas DTS selesai. Anda dapat menghapus grup daftar putih (seperti rdsdts) atau grup keamanan (seperti SG-DTS-GROUP-xxxx) yang dibuat DTS secara otomatis.

Blok CIDR DTS

Catatan

Saat database lokal terhubung ke DTS melalui Cloud Enterprise Network (CEN) atau Express Connect, VPN Gateway, or Smart Access Gateway, DTS menggunakan alamat IP server dari blok CIDR internal Alibaba Cloud 100.64.0.0/10.
Jika DTS menambahkan server baru, Anda harus memperbarui daftar putih database yang dikelola sendiri. Jika tidak, DTS mungkin gagal terhubung ke database.

Tiongkok Daratan

Tiongkok (Hangzhou)

ID Wilayah	Metode akses	Blok CIDR
cn-hangzhou	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.52.0/24,100.104.61.128/26,100.104.244.64/26,100.104.216.192/26,100.104.85.0/26,100.104.221.128/26,100.104.2.0/26,100.104.251.192/26,100.104.159.64/26,100.104.216.128/26,100.104.148.192/26,100.104.239.64/26,100.104.114.0/26,100.104.0.192/26,100.104.201.192/26,100.104.228.0/26,100.104.41.0/26,100.104.203.128/26,100.104.145.128/26,100.104.105.64/26,100.104.91.0/26,100.104.134.128/26,100.104.96.128/26,100.104.74.128/26,100.104.225.128/26,100.104.198.0/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,112.124.239.0/26

Tiongkok (Shanghai)

ID wilayah	Metode akses	Blok alamat IP
cn-shanghai	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.205.0/24,100.104.226.128/26,100.104.149.64/26,100.104.241.128/26,100.104.177.128/26,100.104.203.192/26,100.104.113.0/26,100.104.187.0/26,100.104.17.0/26,100.104.33.192/26,100.104.3.192/26,100.104.107.0/26,100.104.29.192/26,100.104.187.192/26,100.104.177.64/26,100.104.93.128/26,100.104.174.64/26,100.104.160.0/26,100.104.147.128/26,100.104.247.192/26,100.104.225.192/26,100.104.158.128/26,100.104.35.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,59.82.32.64/26,117.185.224.192/26,59.82.32.192/26,106.11.224.64/26,112.65.93.64/26,59.82.32.128/26,106.11.224.192/26,59.82.32.0/26,117.185.224.64/26,47.103.166.192/26,8.128.64.64/26,47.101.109.64/26,47.101.109.192/26,8.128.66.128/26,8.128.64.128/26,117.185.224.0/26,47.103.170.0/26,106.11.224.0/26,8.128.64.0/26,8.128.64.192/26,8.128.66.192/26,101.91.141.64/26,101.91.141.128/26,47.101.109.0/26,106.11.224.128/26,112.65.93.0/26,8.128.66.64/26,47.103.166.128/26,112.65.93.128/26,101.91.141.0/26,47.101.109.128/26,47.103.166.64/26,140.206.221.64/26,8.128.66.0/26,117.185.224.128/26,101.91.139.192/26,101.133.205.192/26

Tiongkok (Qingdao)

ID Wilayah	Metode akses	Blok CIDR
cn-qingdao	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.72.0/24,100.104.35.192/26,100.104.12.0/26,100.104.111.0/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	203.119.185.0/24,140.205.47.0/24,110.76.8.64/26,203.119.146.128/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,203.119.147.0/24,110.75.186.0/26,203.209.247.192/26,203.119.240.0/26,203.119.182.192/26,110.75.134.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,203.119.184.0/24,110.75.130.192/26,203.119.191.64/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,203.119.187.0/24,110.75.235.0/24,110.75.186.64/26,118.190.207.25,110.76.9.0/24,106.11.76.64/26,203.119.146.192/26,115.28.200.55,110.75.230.0/24,203.119.188.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,203.119.149.0/24,59.82.46.128/26,203.119.191.128/26,110.76.0.0/24,106.11.185.0/24,106.11.76.0/26,115.28.216.250,203.119.151.0/24,47.102.234.0/26,203.119.190.0/24,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,203.119.150.0/24,110.76.8.0/26,120.27.53.203,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,106.11.40.64/26,8.139.112.128/26,203.119.189.0/24,118.190.207.194,8.139.99.192/26,203.119.186.0/24,8.139.112.0/26,106.11.184.0/24,120.27.72.0/24,203.119.183.0/24,106.11.73.128/26,203.119.191.0/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,39.98.96.0/24,203.119.148.0/24,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26,120.27.72.192/26,120.27.72.128/26,120.27.72.0/26,120.27.72.64/26

Tiongkok (Beijing)

ID wilayah	Metode akses	Rentang alamat IP
cn-beijing	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.11.64/26,100.104.128.192/26,100.104.143.0/26,100.104.183.0/24,100.104.200.64/26,100.104.201.0/26,100.104.213.64/26,100.104.227.192/26,100.104.232.128/26,100.104.236.128/26,100.104.247.64/26,100.104.84.128/26,100.104.237.64/26,100.104.6.0/26,100.104.9.128/26,100.104.230.64/26,100.104.157.64/26,100.104.104.64/26,100.104.218.64/26,100.104.59.0/26,100.104.93.64/26,100.104.79.0/26,100.104.235.128/26,100.104.17.128/26,100.104.141.64/26,100.104.251.0/26,100.104.200.128/26,100.104.9.0/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,39.156.175.0/26,112.126.111.128/26,39.107.7.64/26,39.107.7.0/26,182.92.137.64/26,49.7.153.192/26,49.7.152.192/26,182.92.137.128/26,49.7.152.0/26,112.126.112.0/26,39.107.223.192/26,49.7.152.64/26,114.250.62.192/26,111.206.225.128/26,114.250.54.64/26,49.7.152.128/26,112.126.112.64/26,49.7.153.128/26,111.13.119.192/26,111.206.225.64/26,39.107.223.128/26,114.250.54.0/26,114.250.62.128/26,182.92.17.192/26,114.250.62.0/26,111.13.22.64/26,111.13.246.192/26,49.7.153.0/26,182.92.32.192/26,39.156.175.128/26,182.92.137.0/26,49.7.153.64/26,39.107.223.0/26,39.156.175.64/26,182.92.17.128/26,101.200.20.0/26,182.92.137.192/26,112.126.111.192/26,39.156.175.192/26,114.250.62.64/26,111.13.119.128/26,39.107.223.64/26,182.92.32.128/26,101.200.116.192/26,47.95.35.136/32,39.102.181.128/26,8.131.132.0/26

Tiongkok (Zhangjiakou)

ID Wilayah	Metode akses	Blok CIDR
cn-zhangjiakou	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.144.128/26,100.104.175.0/24,100.104.180.192/26,100.104.249.0/26,100.104.32.64/26,100.104.52.0/26,100.104.84.128/26,100.104.133.128/26,100.104.211.192/26,100.104.196.192/26,100.104.13.128/26,100.104.75.64/26,100.104.174.192/26,100.104.195.64/26,100.104.106.128/26,100.104.76.64/26,100.104.18.128/26,100.104.237.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,39.101.252.128/26

Tiongkok (Hohhot)

ID wilayah	Metode akses	Blok alamat IP
cn-huhehaote	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.72.0/24,100.104.145.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.122.128/26,100.104.158.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	39.102.199.64/26,39.104.72.87,39.104.78.173,39.104.62.152,39.99.77.64/26,39.102.199.128/26,39.104.199.192/26,39.104.79.122,39.102.224.0/26,39.99.77.0/26,39.104.220.0/24,39.104.86.0,39.102.199.192/26,39.99.77.128/26

Tiongkok (Ulanqab)

ID Wilayah	Metode akses	Blok alamat IP
cn-wulanchabu	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.182.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26,100.104.205.192/26,100.104.152.128/26,100.104.199.192/26,100.104.120.0/26,100.104.37.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	140.205.47.0/24,8.130.69.168,110.76.8.64/26,203.209.225.192/26,140.205.41.192/26,39.101.5.0/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,110.75.134.192/26,8.130.69.173,39.101.0.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,110.75.230.0/24,59.82.126.0/24,8.130.121.252,39.101.7.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,121.89.103.128/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,8.139.112.128/26,8.139.99.192/26,121.89.103.192/26,8.139.112.0/26,39.101.0.64/26,39.101.0.128/26,121.89.103.64/26,106.11.73.128/26,121.89.104.0/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,8.130.48.34,8.130.122.110,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26

Tiongkok (Shenzhen)

ID Wilayah	Metode akses	Blok CIDR
cn-shenzhen	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.75.64/26,100.104.235.192/26,100.104.205.0/24,100.104.41.64/26,100.104.171.128/26,100.104.161.192/26,100.104.172.192/26,100.104.168.0/26,100.104.160.128/26,100.104.179.128/26,100.104.98.192/26,100.104.168.128/26,100.104.247.64/26,100.104.17.64/26,100.104.87.0/26,100.104.105.128/26,100.104.114.192/26,100.104.213.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,120.24.136.0/26,119.23.166.64/26,8.129.151.192/26,47.121.45.0/26,47.112.83.192/26,47.106.63.192/26,47.112.84.64/26,8.129.151.0/26,47.112.84.0/26,47.106.63.0/26,8.129.151.128/26,47.106.63.64/26,47.112.84.128/26,47.120.229.128/26,8.129.151.64/26,47.106.63.128/26,47.113.76.192/26

Tiongkok (Heyuan)

ID Wilayah	Metode koneksi	Blok alamat IP
cn-heyuan	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.147.192/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26,100.104.48.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.113.157.64/26,47.113.157.192/26,47.113.157.128/26,47.113.158.0/26

Tiongkok (Guangzhou)

ID Wilayah	Metode akses	Blok CIDR
cn-guangzhou	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.132.64/26,100.104.240.128/26,100.104.122.128/26,100.104.233.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.11.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,8.134.0.64/26,8.134.0.128/26,8.134.0.192/26,8.134.5.0/26,8.134.79.141/32,8.134.79.143/32

Tiongkok (Wuhan)

ID Wilayah	Metode akses	Blok alamat IP
cn-wuhan-lr	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.182.128/26,100.104.127.0/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26,100.104.145.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,8.148.11.160/32,8.148.12.15/32,8.148.11.99/32,8.148.10.43/32,8.148.10.61/32

Tiongkok (Chengdu)

ID Wilayah	Metode akses	Blok alamat IP
cn-chengdu	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.76.192/26,100.104.145.64/26,100.104.235.192/26,100.104.127.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.149.128/26,100.104.177.0/26,100.104.120.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	47.109.5.0/26,110.75.225.0/26,110.75.225.64/26,110.75.225.128/26,110.75.225.192/26,223.4.187.192/26,223.5.153.0/26,223.5.153.64/26,223.5.153.128/26,110.75.134.128/26,110.75.134.192/26,110.75.143.0/26,110.75.157.192/26,110.75.186.0/26,110.75.186.64/26,110.75.190.0/26,110.75.190.64/26,8.139.99.192/26,8.139.112.0/26,8.139.112.64/26,8.139.112.128/26,47.108.33.192/26,47.109.170.0/26,47.109.170.64/26,47.109.170.128/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26

Wilayah lain

Tiongkok (Hong Kong)

ID Wilayah	Metode akses	Blok alamat IP
cn-hongkong	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.233.0/24,100.104.177.192/26,100.104.158.192/26,100.104.180.192/26,100.104.120.0/26,100.104.2.64/26,100.104.242.64/26,100.104.187.64/26,100.104.169.0/26,100.104.37.0/26,100.104.6.128/26,100.104.142.192/26,100.104.144.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	140.205.47.0/24,110.76.8.64/26,47.240.180.192/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,110.75.134.192/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,47.240.211.0/26,110.75.130.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,47.90.37.175,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,110.75.230.0/24,47.240.210.192/26,140.205.196.0/24,59.82.47.0/26,47.243.0.32/28,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.89.39.119,47.102.234.0/26,47.90.38.29,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,8.139.112.64/26,8.139.112.128/26,47.240.195.0/26,8.139.99.192/26,8.139.112.0/26,47.240.195.128/26,106.11.73.128/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,47.90.24.64/26,47.240.195.64/26,47.240.210.64/26,47.240.210.128/26,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.75.235.128/26,110.75.230.64/26,110.76.9.128/26,140.205.47.128/26,110.76.9.64/26,140.205.196.128/26,110.76.2.64/26,110.76.11.64/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.76.9.192/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,110.76.0.0/26,110.76.0.64/26,110.75.235.64/26,140.205.196.64/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,140.205.196.192/26,110.75.235.192/26,110.76.2.0/26,110.76.2.192/26

Singapura

ID Wilayah	Metode akses	Blok CIDR
ap-southeast-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.188.0/24,100.104.207.128/26,100.104.12.0/26,100.104.179.64/26,100.104.41.64/26,100.104.59.64/26,100.104.91.64/26,100.104.111.64/26,100.104.44.0/26,100.104.238.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	161.117.146.192/26,161.117.164.64/26,161.117.164.0/26,161.117.172.0/28,161.117.146.128/26,47.102.181.128/26,47.102.181.192/26,47.102.234.64/26,47.102.234.0/26,8.139.112.64/26,8.139.112.0/26,8.139.112.128/26,8.139.99.192/26,47.89.72.128/26,47.89.73.128/26,47.89.73.192/26,47.89.75.192/26,47.89.88.64/26,47.89.90.64/26,47.246.74.192/26,47.246.107.0/26,47.89.88.0/26,47.89.90.0/26,47.246.108.64/26,47.246.164.64/26,47.89.88.128/26,47.246.73.64/26,47.246.74.0/26,47.246.175.192/26,110.76.0.128/26,47.88.233.192/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,47.88.233.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,47.74.206.0/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,47.88.233.0/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,47.74.206.192/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,140.205.196.64/26,47.74.206.128/26,140.205.47.192/26,110.75.230.128/26,47.74.206.64/26,110.76.0.192/26,106.11.73.128/26,47.88.233.64/26,140.205.196.192/26,110.75.235.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26

Malaysia (Kuala Lumpur)

ID Wilayah	Metode akses	Blok alamat IP
ap-southeast-3	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.5.0/24,100.104.36.0/26,100.104.234.192/26,100.104.76.192/26,100.104.69.0/26,100.104.87.192/26,100.104.158.192/26,100.104.250.0/26,100.104.62.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	47.250.30.0/24,47.250.34.128/28,47.250.29.0/24,47.87.205.0/26,47.250.30.128/26,47.250.30.0/26,47.250.30.64/26,47.250.29.64/26,47.87.205.192/26,47.87.205.128/26,47.250.30.192/26,47.250.29.192/26,47.250.29.0/26,47.87.205.64/26,47.250.29.128/26,47.87.206.192/26,47.87.206.64/26,47.87.206.128/26,47.87.206.0/26

Indonesia (Jakarta)

ID Wilayah	Metode akses	Alamat IP
ap-southeast-5	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.175.0/24,100.104.35.192/26,100.104.235.192/26,100.104.12.0/26,100.104.111.0/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26,100.104.57.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.215.147.0/28,147.139.132.101,149.129.230.192/26,147.139.156.64/26,147.139.165.206,147.139.133.46,147.139.179.168,147.139.156.0/26,147.139.156.128/26

Filipina (Manila)

ID wilayah	Metode akses	Blok CIDR
ap-southeast-6	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.199.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.212.137.0/26,8.212.136.192/26,8.212.136.128/26,8.212.136.64/26

Thailand (Bangkok)

ID Wilayah	Metode akses	Blok CIDR
ap-southeast-7	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.150.192/26,100.104.75.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.180.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.213.163.0/26,8.213.162.64/26,8.213.162.128/26,8.213.162.192/26,47.81.23.64/26,47.81.23.128/25

Jepang (Tokyo)

ID Wilayah	Metode akses	Blok CIDR
ap-northeast-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.112.0/24,100.104.117.192/26,100.104.12.0/26,100.104.166.64/26,100.104.179.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26,100.104.111.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	47.91.0.128/26,47.245.51.0/24,47.245.18.192/26,47.245.18.128/26,47.91.0.192/26,8.209.192.160/28,47.245.51.64/26,47.245.51.0/26,47.87.192.64/26,47.245.51.192/26,47.87.192.192/26,47.245.51.128/26,47.87.192.0/26,47.87.192.128/26

AS (Silicon Valley)

ID Wilayah	Metode akses	Blok alamat IP
us-west-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.175.0/24,100.104.48.128/26,100.104.166.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.242.64/26,100.104.57.192/26,100.104.11.64/26,100.104.24.192/26,100.104.67.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	140.205.47.0/24,110.76.8.64/26,203.209.225.192/26,140.205.41.192/26,110.75.157.192/26,110.75.186.0/26,203.209.247.192/26,47.88.98.0/24,110.75.134.192/26,203.119.159.192/26,47.88.15.174,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,47.252.71.192/26,140.205.41.64/26,110.75.190.0/26,8.149.144.0/24,140.205.197.0/26,203.209.247.128/26,110.75.235.0/24,47.252.90.64/26,110.75.186.64/26,110.76.9.0/24,106.11.76.64/26,47.88.6.196,110.75.230.0/24,140.205.196.0/24,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/24,106.11.76.0/26,47.88.10.217,47.102.234.0/26,47.252.71.128/26,47.102.234.64/26,59.82.46.192/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,110.76.2.0/24,47.88.1.17,8.139.112.64/26,8.139.112.128/26,47.252.90.0/26,8.139.99.192/26,47.251.136.112/28,8.139.112.0/26,106.11.73.128/26,110.76.11.0/24,59.82.46.64/26,47.102.181.192/26,47.88.98.128/26,47.88.98.192/26,47.88.98.64/26,47.88.98.0/26,47.251.17.180,47.77.112.0/20,47.87.192.0/18

AS (Virginia)

ID Wilayah	Metode akses	Blok CIDR IP
us-east-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.233.0/24,100.104.240.128/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.122.128/26,100.104.87.192/26,100.104.179.64/26,100.104.41.64/26,100.104.238.64/26,100.104.171.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.76.9.64/26,110.75.134.192/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,140.205.196.64/26,8.139.99.192/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.252.91.128/26,47.88.98.128/26,47.250.29.192/26,47.252.71.192/26,47.252.90.0/26,47.252.91.192/26,47.250.29.64/26,47.88.98.192/26,47.252.90.64/26,47.252.71.128/26,47.88.98.64/26,47.250.29.0/26,47.250.29.128/26,47.252.91.0/26,47.88.98.0/26,47.252.91.64/26,47.253.64.0/28,47.87.206.192/26,47.87.206.64/26,47.87.206.128/26,47.87.206.0/26,47.90.220.124,47.77.112.0/20,47.87.192.0/18

Jerman (Frankfurt)

ID Wilayah	Metode akses	Blok CIDR
eu-central-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.5.0/24,100.104.193.128/26,100.104.161.64/26,100.104.89.128/26,100.104.177.0/26,100.104.224.0/26,100.104.92.128/26,100.104.62.64/26,100.104.216.192/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.209.86.0/26,47.254.165.128/26,47.245.155.0/28,47.254.165.64/26,47.254.165.192/26,47.254.180.0/24,110.76.0.128/26,140.205.47.0/26,110.76.2.128/26,110.75.230.192/26,110.76.8.64/26,140.205.41.192/26,203.209.225.192/26,110.75.235.128/26,110.75.230.64/26,110.75.157.192/26,110.76.9.128/26,110.75.186.0/26,203.209.247.192/26,140.205.47.128/26,110.75.134.192/26,110.76.9.64/26,140.205.196.128/26,203.119.159.192/26,106.11.73.192/26,203.209.225.128/26,110.75.130.192/26,110.76.2.64/26,140.205.41.64/26,110.75.190.0/26,110.76.11.64/26,140.205.197.0/26,203.209.247.128/26,140.205.47.64/26,110.76.9.0/26,110.75.235.0/26,110.75.186.64/26,110.76.9.192/26,106.11.76.64/26,110.75.230.0/26,140.205.196.0/26,110.76.11.128/26,110.76.11.192/26,110.76.11.0/26,59.82.47.0/26,47.102.181.128/26,59.82.46.128/26,110.76.0.0/26,110.76.0.64/26,106.11.76.0/26,47.102.234.0/26,47.102.234.64/26,59.82.46.192/26,110.75.235.64/26,110.75.130.128/26,110.75.134.128/26,110.76.8.0/26,110.75.190.64/26,110.75.143.0/26,8.139.112.64/26,8.139.112.128/26,8.139.99.192/26,140.205.196.64/26,8.139.112.0/26,140.205.47.192/26,110.75.230.128/26,110.76.0.192/26,106.11.73.128/26,140.205.196.192/26,110.75.235.192/26,47.102.181.192/26,59.82.46.64/26,110.76.2.0/26,110.76.2.192/26,47.87.212.0/26,47.87.212.64/26,47.87.212.128/26,47.87.212.192/26

Inggris (London)

ID wilayah	Metode akses	Blok alamat IP
eu-west-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.133.64/26, 100.104.207.128/26, 100.104.87.192/26, 100.104.145.64/26, 100.104.235.192/26, 100.104.75.64/26, 100.104.132.64/26, 100.104.92.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.208.72.0/24, 8.208.73.0/24, 8.208.75.64/28, 47.88.98.0/24, 47.88.98.128/26, 47.88.98.192/26, 47.88.98.64/26, 47.88.98.0/26, 8.208.73.64/26, 8.208.72.64/26, 8.208.72.0/26, 8.208.72.128/26, 8.208.73.0/26, 8.208.73.128/26, 8.208.72.192/26, 8.208.73.192/26, 47.87.236.128/26, 47.87.236.0/26, 47.87.236.64/26, 47.87.236.192/26

UEA (Dubai)

ID Wilayah	Metode akses	Blok CIDR
me-east-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.205.0/24,100.104.161.0/26,100.104.53.0/26,100.104.111.128/26,100.104.248.128/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.209.86.0/26,47.254.165.128/26,47.254.165.64/26,47.254.165.192/26,47.87.212.0/26,47.87.212.64/26,47.87.212.128/26,47.87.212.192/26

Korea Selatan (Seoul)

ID Wilayah	Metode akses	Blok CIDR
ap-northeast-2	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.119.128/26, 100.104.153.64/26, 100.104.76.192/26, 100.104.246.192/26, 100.104.106.192/26, 100.104.210.128/26, 100.104.62.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	149.129.14.128/26, 149.129.13.64/26, 149.129.14.192/26, 149.129.13.0/26

Arab Saudi (Riyadh)

ID Wilayah	Metode akses	Blok CIDR
me-central-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.106.192/26,100.104.145.64/26,100.104.210.128/26,100.104.48.128/26,100.104.69.0/26,100.104.76.192/26,100.104.87.192/26,100.104.242.64/26
	Cloud Enterprise Network (CEN)
	Public IP Address	8.213.0.192/26,8.213.5.0/26,8.213.16.59,8.213.16.111,8.213.16.123,8.213.16.17,8.213.16.91,8.213.5.64/26,8.213.6.0/24,8.213.0.128/26,8.213.6.64/26,8.213.6.192/26,8.213.6.0/26,8.213.6.128/26

Meksiko (Mexico City)

ID Wilayah	Metode akses	Blok alamat IP
na-south-1	Express Connect, VPN Gateway, or Smart Access Gateway	100.104.35.192/26,100.104.122.128/26
	Cloud Enterprise Network (CEN)	100.104.35.192/26,100.104.122.128/26
	Public IP Address	47.246.169.0/26,47.87.0.64/26,47.89.89.64/26,47.246.171.0/26,47.87.196.128/26,47.246.170.128/26,47.246.168.64/26,47.89.75.0/26,47.87.1.0/26,47.89.89.192/26,47.87.196.0/26,47.246.170.64/26,47.89.74.192/26,47.235.1.64/26,47.89.75.64/26,47.87.196.64/26,47.87.196.192/26,47.87.0.192/26,47.246.170.192/26,47.246.169.128/26,47.246.168.0/26,47.89.89.128/26,47.235.1.128/26,47.89.74.128/26,47.246.168.192/26,47.246.169.192/26,47.87.0.128/26,47.235.0.192/26,47.246.171.64/26,47.246.164.192/26,47.246.169.64/26,47.235.1.192/26

FAQ

Port mana yang harus dibuka untuk blok CIDR alamat IP DTS?

Buka port yang digunakan oleh database Anda. Sebagai contoh, port default untuk MySQL adalah 3306, dan port default untuk PostgreSQL adalah 5432.
Bagaimana menangani daftar putih IP setelah tugas DTS selesai?

Untuk keamanan, setelah tugas DTS selesai, hapus blok CIDR alamat IP DTS dari daftar putih IP atau grup keamanan database Anda. Anda dapat menghapus grup daftar putih (misalnya, rdsdts) atau grup keamanan (misalnya, SG-DTS-GROUP-xxxx) yang dibuat DTS secara otomatis.
Mengapa alamat IP dari kedua wilayah sumber dan tujuan diperlukan untuk akses alamat IP publik?

Hal ini hanya diperlukan untuk tugas sinkronisasi data. DTS menerapkan node pekerja di kedua wilayah sumber dan tujuan untuk melakukan heartbeat dua arah dan perbandingan data. Hal ini memastikan konsistensi data dan stabilitas tautan. Jenis tugas lain, seperti migrasi dan pelacakan perubahan, mengikuti aturan satu wilayah.
Bagaimana cara menghindari penambahan sejumlah besar blok CIDR IP DTS ke daftar putih (misalnya, jika persetujuan keamanan sulit)?

Untuk tugas migrasi data, daftar putih IP lengkap umumnya diperlukan karena DTS harus terhubung langsung ke database sumber dan tujuan. Tidak mungkin melewati daftar putih dengan menggunakan koneksi VPC untuk jenis tugas ini. Jika persetujuan keamanan menyulitkan penambahan sejumlah besar blok CIDR IP, pertimbangkan alternatif berikut:
- Beralih ke sinkronisasi data: Tugas sinkronisasi data mendukung koneksi jaringan pribadi, seperti Express Connect, VPN Gateway, or Smart Access Gateway atau Cloud Enterprise Network (CEN). Akses jaringan pribadi menggunakan blok CIDR internal Alibaba Cloud (100.64.0.0/10 subnet), yang secara signifikan mengurangi jumlah blok CIDR IP yang harus ditambahkan atau bahkan menghilangkan kebutuhan konfigurasi daftar putih sama sekali.
- Beralih ke metode akses jaringan pribadi: Jika lingkungan Anda mendukungnya, hubungkan database sumber atau tujuan Anda ke Alibaba Cloud melalui Express Connect, VPN Gateway, or Smart Access Gateway, VPN Gateway, atau Cloud Enterprise Network (CEN). Hal ini mengurangi blok CIDR IP yang diperlukan menjadi rentang internal kecil.
- Gunakan 0.0.0.0/0 (akses semua jaringan): Jika database sumber memiliki batasan jumlah entri daftar putih dan Anda tidak dapat menambahkan semua blok CIDR IP DTS, Anda dapat mengonfigurasi 0.0.0.0/0 untuk mengizinkan akses dari semua alamat IP. Peringatan keamanan: Pendekatan ini membawa risiko keamanan yang signifikan. Jika Anda memilih opsi ini, terapkan langkah-langkah keamanan tambahan seperti password akun yang kuat, akun database khusus dengan hak istimewa minimal untuk DTS, dan koneksi terenkripsi.
Bagaimana cara mengatasi kode kesalahan DTS DTS-999999 (kegagalan koneksi)?

Kode kesalahan DTS-999999 biasanya menunjukkan bahwa DTS tidak dapat terhubung ke database sumber atau tujuan. Penyebab paling umum adalah daftar putih yang tidak lengkap—tidak semua blok CIDR alamat IP server DTS yang diperlukan telah ditambahkan ke pengaturan keamanan database.

Untuk mengatasi masalah ini:
1. Lihat Langkah 2: Tentukan wilayah IP server DTS untuk mengonfirmasi blok CIDR IP DTS wilayah mana yang perlu ditambahkan, berdasarkan jenis tugas dan lokasi database Anda. Perhatikan bahwa jenis tugas yang berbeda memiliki persyaratan yang berbeda. Sebagai contoh:
  - Migrasi data: database sumber memerlukan blok CIDR IP dari wilayah database tujuan.
  - Sinkronisasi data: database sumber memerlukan blok CIDR IP dari kedua wilayah database sumber dan tujuan.
2. Verifikasi bahwa Anda telah menambahkan semua blok CIDR untuk wilayah yang diperlukan secara lengkap. Melewatkan satu blok CIDR saja dapat menyebabkan kegagalan koneksi.
3. Setelah memperbarui daftar putih, coba ulang tugas DTS.
Jika kesalahan tetap terjadi setelah memverifikasi daftar putih, periksa aturan firewall Anda untuk memastikan bahwa blok CIDR IP DTS memiliki akses semua-port. Pembatasan port juga dapat menyebabkan kesalahan DTS-999999.

API Terkait

API	Deskripsi
Dapatkan alamat IP server DTS	Mengembalikan alamat IP server DTS.