Alibaba Cloud DNS:Forward management

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Outbound Endpoint tab, and click Create Outbound Endpoint.

4. In the Create Outbound Endpoint panel, specify the following parameters: Endpoint Name, Outbound VPC, Security Group, and Source IP Addresses of Outbound Traffic.

   

   • Endpoint Name: Enter a name for the outbound endpoint based on your business requirements.

   • Outbound VPC: Select a VPC. All outbound DNS requests in the forward module are forwarded by this VPC.

     Important

     • After you create an outbound endpoint, you cannot change the specified outbound VPC of the endpoint. This prevents the forwarding of DNS requests from being interrupted due to misoperations.

     • For more information about the regions that support the forward module, see the "Supported regions" section of this topic. Alibaba Cloud continuously updates the module to support more regions. If you want other regions to support the forward module,

       submit a ticket.

   • Security Group: Select a security group that is associated with the VPC. The forwarding rules of the security group apply to the VPC.

     Important

     • Configure a security group outbound rule that allows outbound traffic on port 53. Inbound rules do not affect the forwarding feature.

     • Only security groups that are not in managed mode are supported. For more information, see Managed security group.

   • Source IP Addresses of Outbound Traffic: Enter available IP addresses that are not used by Elastic Compute Service (ECS) instances in the subnets in the specified zones. You must specify two to six IP addresses for the outbound endpoint to ensure high availability. We recommend that you specify the IP addresses in different zones.

     Important

     If you do not specify IP addresses, the system automatically allocates IP addresses to the outbound endpoint.

5. Click OK. Private DNS creates a service-linked role if the role does not exist.

   Note

   Note: A message is displayed each time you create an outbound endpoint. If a role exists, no role is created.

6. View the created outbound endpoints on the Outbound Endpoint tab. The states of outbound endpoints include Normal, Creating, Create Failed, Modifying, Modify Failed, and Abnormal.

   Important

   • The system takes 5 to 10 minutes to create an outbound endpoint. If an outbound endpoint is in the Creating state, wait for a few minutes.

   • You cannot modify or delete an outbound endpoint that is in the Creating state. If an outbound endpoint is in the Abnormal or Modify Failed state, submit a ticket to troubleshoot issues.

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Outbound Endpoint tab, find the outbound endpoint whose configurations you want to modify, and then click Edit in the Actions column.

4. In the Modify Outbound Endpoint panel, modify the following parameters based on your business requirements: Endpoint Name and Source IP Addresses of Outbound Traffic.

   

5. Click OK. The state of the endpoint changes to Modifying. You cannot modify or delete the endpoint that is in the Modifying state.

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Outbound Endpoint tab. Find the outbound endpoint that you want to delete, and click Delete in the Actions column. In the Delete Confirmation message, click OK.

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Forward Rule tab, and click Create Forward Rule.

4. In the Create Forward Rule panel, specify the following parameters:

   

• Rule Name: Enter a name for the forwarding rule based on your business requirements.

• Rule Type: You can select only Forward to External IP Address.

• Forward Zone: Enter the zone for which you want to forward DNS requests.

  Important

  All domain names (root domain names) are supported. . is the root domain name.

  Top-level domain names are supported. com, cn, and top are the top-level domain names.

  If a DNS request matches multiple levels of domain name, such as example.com,com, and., the DNS record of the zone with the longest name takes effect. In this example, the DNS request matches the domain name example.com.

• Outbound Endpoint: Select an outbound endpoint. The outbound endpoint is used to forward DNS requests to the specified IP addresses.

• IP Addresses and Ports of External DNS: Enter the IP address and port number of the destination server to which the DNS requests are forwarded. You can enter up to six IP addresses and port numbers. Both private and public IP addresses are supported.

5. After you specify the preceding parameters, click OK. The created forwarding rule is displayed in the forwarding rule list.

   

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Forward Rule tab. Find the forwarding rule that you want to modify and click Edit in the Actions column.

4. In the Modify Forward Rule panel, modify the Rule Name and IP Addresses and Ports of External DNS parameters, and click OK.

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Forward Rule tab. Find the forwarding rule that you want to delete and click Delete in the Actions column.

4. In the Delete Confirmation message, click OK. If the forwarding rule is configured with an effective scope, the operation fails.

   Important

   You must disassociate the forwarding rule from VPCs before you delete the forwarding rule. For more information about how to disassociate VPCs from a forwarding rule, see the Remove an effective scope from a forwarding rule section of this topic.

Manage the effective scope of a forwarding rule

Specify an effective scope for a forwarding rule

After you create a forwarding rule, you must specify an effective scope for the forwarding rule. In this way, the forwarding rule can take effect in the corresponding VPCs within the effective scope.

1. Log on to the Alibaba Cloud DNS console.

2. In the left-side navigation pane, click Private DNS (PrivateZone). In the upper-right corner of the Private DNS (PrivateZone) page, click Configuration Mode, and click the Forward Module tab.

3. On the Forward Module tab, click the Forward Rule tab. Find the desired forwarding rule and click Effective Scope of Forward Rule in the Actions column.

4. Select one or more VPCs where the forwarding rule will take effect and click OK. You can associate the forwarding rule with VPCs across accounts. For more information, see Associate a zone with VPCs across accounts.