DataWorks provides exclusive resource groups for Data Integration for you to run synchronization tasks and ensure fast and stable data transmission. Exclusive resource groups for Data Integration can be used to synchronize data in complex network environments. Before you use an exclusive resource group for Data Integration that you purchase, you must perform operations such as configuring network settings and IP address whitelists. This topic describes the process from the purchase of an exclusive resource group for Data Integration to the use of the resource group.
Prerequisites
You are familiar with the performance and billing of an exclusive resource group for Data Integration with specific specifications. The performance of an exclusive resource group for Data Integration is measured based on the number of tasks that can be run in parallel. We recommend that you determine the specifications and subscription duration based on your business requirements before you purchase an exclusive resource group for Data Integration. For more information, see Billing of exclusive resource groups for Data Integration (subscription).
Network connections are established between your resource group and data sources, and the IP address whitelists of the data sources are configured to ensure accessibility. If the network connections are not established, your synchronization task cannot be run. For more information about solutions for the network connectivity between an exclusive resource group for Data Integration and a data source, and precautions for configuring an IP address whitelist for a data source, see Exclusive resource groups for Data Integration.
You have a good command of the use scenarios of exclusive resource groups for Data Integration. For more information, see Scenarios of exclusive resource groups for Data Integration.
Procedure
To purchase and use an exclusive resource group for Data Integration, you must perform the following steps.
Step | Description | References |
1 | Create an order to purchase exclusive resources for Data Integration and create an exclusive resource group for Data Integration based on the purchase order ID. Exclusive resource groups for Data Integration are charged based on the subscription billing method. | |
2 | Associate the exclusive resource group for Data Integration with a workspace based on your business requirements. After an exclusive resource group is created, the resource group does not belong to any workspace. Therefore, you must associate the exclusive resource group with a workspace. | Associate the exclusive resource group for Data Integration with a workspace |
3 | If you want to use the exclusive resource group for Data Integration to access a data source that resides in a virtual private cloud (VPC), associate the resource group with this VPC or a VPC that connects to the data source. | |
4 | If the access of the exclusive resource group for Data Integration to the data source is restricted by the IP address whitelist of the data source, add the elastic IP address (EIP) of the resource group or the CIDR block of the vSwitch with which the resource group is associated to the IP address whitelist. | |
5 | Test the network connectivity between the exclusive resource group for Data Integration and the data source on the Data Source page in the DataWorks console. This ensures that a synchronization task that uses the data source can be normally configured. | Test the network connectivity of the exclusive resource group for Data Integration |
6 | Use the exclusive resource group for Data Integration to run a synchronization task. If you want to use the exclusive resource group for Data Integration to run a synchronization task in the workspace with which the resource group is associated, manually select the resource group when you configure the task in the workspace. | Use the exclusive resource group for Data Integration to run tasks |
7 | View and monitor the resource usage of the exclusive resource group for Data Integration and the number of instances that are waiting for resources in the resource group. |
Precautions
Only an Alibaba Cloud account or a RAM user to which the AliyunBSSOrderAccess and AliyunDataWorksFullAccess policies are attached can create a resource group.
Only a workspace administrator can associate a resource group with a workspace and change the workspace with which a resource group is associated.
For information about the permissions that are required to use the features and perform operations on the Resource Groups page of the DataWorks console, see Custom policies used to manage permissions on the entities in the DataWorks console.
For information about how to create a custom policy and attach the custom policy to a RAM user, see (Optional) Create a custom policy.
You can associate an exclusive resource group for Data Integration that uses the specifications of 4 vCPUs and 8 GiB of memory with a maximum of two VPCs. You can associate an exclusive resource group for Data Integration that uses the other specifications with a maximum of three VPCs.
Create an exclusive resource group for Data Integration
Only an Alibaba Cloud account or a RAM user to which the AliyunBSSOrderAccess and AliyunDataWorksFullAccess policies are attached can create a resource group.
Log on to the DataWorks console.
In the left-side navigation pane, click Resource Groups. On the Exclusive Resource Groups tab of the Resource Groups page, click Create Resource Group for Data Integration. On the DataWorks Exclusive Resources page, configure the following parameters.
Parameter
Description
Region
The region in which you want to create and use the exclusive resource group.
NoteAn exclusive resource group for Data Integration cannot be shared across regions. For example, exclusive resource groups in the China (Shanghai) region can be used only by the workspaces in the China (Shanghai) region.
Type
The type of the exclusive resource group. Select Exclusive Resource Groups for Data Integration for this parameter.
Resource Group Name
The name of the exclusive resource group for Data Integration. The name must be unique within a tenant. Otherwise, an error is reported when you confirm the purchase operation.
NoteA tenant refers to an Alibaba Cloud account. Each tenant can have multiple RAM users.
Resource Group Description
The description of the exclusive resource group for Data Integration.
Duration
Exclusive resource groups for Data Integration are charged based on the subscription billing method. To ensure service continuity, we recommend that you select Auto-renewal. You can also go to the Renewal Management page to enable or disable auto renewal after the resource group is created. For more information, see General reference: Disable auto-renewal for subscription resources.
You can configure other parameters based on your business requirements.
Click Buy Now, and pay the order as prompted.
Then, DataWorks starts to initialize the resource group. When the resource group enters the Running state, the resource group is created in the DataWorks console.
NoteDataWorks requires approximately 20 minutes to initialize the exclusive resource group for Data Integration. Wait until the status of the resource group changes to Running.
After the exclusive resource group for Data Integration is created in the DataWorks console, you must associate the resource group with a workspace. This way, you can select the resource group when you configure a task in the workspace.
Associate the exclusive resource group for Data Integration with a workspace
Only a workspace administrator can associate a resource group with a workspace and change the workspace with which a resource group is associated.
You must associate the exclusive resource group for Data Integration with a workspace before you can use the resource group in the workspace. An exclusive resource group for Data Integration can be shared among multiple workspaces but cannot be used across regions. For example, you can associate an exclusive resource group for Data Integration in the China (Shanghai) region only with workspaces in the China (Shanghai) region. To associate the created exclusive resource group for Data Integration with a workspace, perform the following steps:
Log on to the DataWorks console.
In the left-side navigation pane, click Resource Groups. On the Exclusive Resource Groups tab of the Resource Groups page, find the exclusive resource group for Data Integration and click Change Workspace in the Actions column.
In the Modify home workspace dialog box, find the workspace with which you want to associate the resource group, and click Bind in the Actions column to associate the resource group with the workspace.
Associate the exclusive resource group for Data Integration with a VPC
Exclusive resource groups reside in the VPC in which DataWorks is hosted. Exclusive resource groups are disconnected from other network environments. To use an exclusive resource group, you must associate the exclusive resource group with a VPC that can connect to data sources. This way, the exclusive resource group can access the data sources over the VPC. To associate the exclusive resource group for Data Integration with a VPC, perform the following steps:
You can associate an exclusive resource group for Data Integration that uses the specifications of 4 vCPUs and 8 GiB of memory with a maximum of two VPCs. You can associate an exclusive resource group for Data Integration that uses the other specifications with a maximum of three VPCs.
Log on to the DataWorks console.
In the left-side navigation pane, click Resource Groups. On the Exclusive Resource Groups tab of the Resource Groups page, find the exclusive resource group for Data Integration and click Network Settings in the Actions column.
Before you associate the exclusive resource group for Data Integration with a VPC, you must log on to the RAM console with your Alibaba Cloud account and authorize DataWorks to access your cloud resources. You can go to the Cloud Resource Access Authorization page to authorize DataWorks to access your cloud resources. You can also authorize DataWorks to access your cloud resources by clicking the related button in the dialog box that is displayed the first time you log on to the DataWorks console with your Alibaba Cloud account.
Associate the exclusive resource group with a VPC.
On the VPC Binding tab of the Network Settings page, click Add Binding. In the Add VPC Binding panel, configure the parameters. You must configure the parameters based on the network environments of your data source and resource group. The following table describes the details.
NoteIf you want to use the resource group to access a data source, such as an Alibaba Cloud data source or a self-managed data source hosted on an ECS instance, you can select a network connectivity solution and configure network settings based on whether the resource group and data source belong to the same Alibaba Cloud account.
Parameter
Description (same region and Alibaba Cloud account)
Description (different regions or Alibaba Cloud accounts)
VPC
If your data source and the exclusive resource group belong to the same Alibaba Cloud account, we recommend that you select the VPC in which your data source resides.
If your data source and the exclusive resource group belong to different Alibaba Cloud accounts, configure this parameter based on the description for the scenario where your data source and the exclusive resource group reside in different regions.
If your data source and the exclusive resource group belong to different Alibaba Cloud accounts or reside in different regions, you must select a VPC that connects to the data source. For example, if your data source does not reside in a VPC, you can click Create VPC to create a VPC for the exclusive resource group. After the VPC is created, you can select it from the VPC drop-down list. You can also select a VPC that connects to your data source.
NoteIf your data source and the exclusive resource group reside in different regions or belong to different Alibaba Cloud accounts, you must use VPN Gateway or Express Connect to establish a connection between the VPC with which the exclusive resource group is associated and the VPC in which the data source resides and add a route that points to the IP address of the data source for the exclusive resource group. For more information, see Establish a network connection between a resource group and a data source.
Zone
Select the zone in which your data source resides.
Select a zone from which a network connection to your data source is established.
vSwitch
If you set the VPC parameter to the VPC in which your data source resides, we recommend that you select the vSwitch with which the data source is associated.
NoteAfter you associate the exclusive resource group with the VPC in which the data source resides and a vSwitch that resides in the VPC, a route that points to the CIDR block of the VPC is automatically added. This ensures that the exclusive resource group can access the data sources in this VPC.
Select the vSwitch to which the data source is connected. If no vSwitch is available, you can click Create VSwitch to create a vSwitch for the exclusive resource group. After a vSwitch is created, select the vSwitch.
Security Groups
Security groups allow or deny access to the exclusive resource group over the Internet or an internal network. You can select an existing security group based on your business requirements, or click Create Security Group to create a security group for the resources in the exclusive resource group. For information about how to create a security group, see Add a security group rule.
Click OK.
NoteIf your data source and the exclusive resource group reside in different regions or belong to different Alibaba Cloud accounts, you must add a route that points to the IP address of your data source after you associate the exclusive resource group with a VPC.
Add host configurations. This operation is optional.
You may fail to access your data source by using IP addresses. For example, you can access your data source only by using hostnames. In this case, you must perform the following steps to add host configurations. Otherwise, the connectivity test fails when you add the data source by using its hostnames.
Click the Hostname-to-IP Mapping tab. On this tab, click Add. In the Create Hostname-to-IP Mapping dialog box, configure the parameters. The following table describes the parameters.
Parameter
Description
IP Address
The actual IP address of the data source.
Hostname
The hostname that is used to access the data source. If you want to specify multiple hostnames, place each hostname on a separate line.
If the data source has multiple IP addresses, click Add to add more host configurations.
NoteThe IP address or hostnames that are added in a host configuration must be different from the IP addresses or hostnames in existing host configurations.
You can map one IP address to multiple hostnames in a host configuration. However, one hostname can point to only one IP address.
Configure the IP address whitelist of a data source
Even if your exclusive resource group for Data Integration and your data source reside in the same zone, same VPC, and same vSwitch, the access from the resource group to the data source may still fail due to restrictions of the IP address whitelist of the data source. In this case, you must configure the IP address whitelist of your data source based on the following instructions:
If you want to establish a network connection between the exclusive resource group and your data source over an internal network, you must add the CIDR block of the vSwitch with which the resource group is associated to the IP address whitelist of your data source.
To view the CIDR block of the vSwitch with which the resource group is associated, perform the following operations: Log on to the DataWorks console and click Resource Groups in the left-side navigation pane. On the Exclusive Resource Groups tab, find the exclusive resource group and click Network Settings in the Actions column. On the VPC Binding tab, you can view the CIDR block in the VSwitch CIDR Block column.
If you want to establish a network connection between the exclusive resource group and your data source over the Internet, you must add the EIP of the resource group to the IP address whitelist of your data source.
Test the network connectivity of the exclusive resource group for Data Integration
After you complete the preceding network configuration, you need to test the network connectivity between the resource group and your data source by performing the following operations:
On the Workspaces page, find the desired workspace and click Manage in the Actions column.
In the left-side navigation pane of the page that appears, click Data Source to go to the Data Source page.
Find the desired data source and click Edit in the Actions column.
In the dialog box that appears, select Data Integration for Resource Group connectivity, find the exclusive resource group for Data Integration that you want to use, and then click Test connectivity in the Actions column. If the connectivity status is Connected, a network connection is established between the resource group and data source.
NoteIf a network connection cannot be established between the resource group and data source, click Troubleshoot in the Connectivity status column to choose a diagnostic tool to diagnose network connection exceptions. For more information about the solutions for network connectivity between an exclusive resource group and data sources that reside in various network environments, see Establish a network connection between a resource group and a data source.
Click Complete.
Use the exclusive resource group for Data Integration to run tasks
After an exclusive resource group for Data Integration is created and configured, you can change the resource group used by tasks to the newly created exclusive resource group for Data Integration by using one of the following methods.
Environment for the operation | Supported change operation | Entry point |
Production environment | Change the resource groups for Data Integration for multiple tasks in the production environment at the same time | Go to the Operation Center page and choose in the left-side navigation pane. On the Cycle Task page, select the tasks for which you want to change the resource groups, click Actions in the lower part of the Cycle Task page, and then select Modify Data Integration Resource Group. |
Development environment |
| Go to the DataStudio page.
Note If you cannot find the entry point of changing the resource groups for tasks, you can select Offline synchronization from the Node Type drop-down list in the filter condition section to search for all batch synchronization tasks. |
icon and select Batch Operation. On the Batch Operation-Data Development tab, select the tasks for which you want to change the resource groups, click More in the lower part of the tab, and then select Change Resource Group for Data Integration. View the resource usage of the exclusive resource group for Data Integration and monitor the resource group
You can view the resource usage of the exclusive resource group for scheduling and the number of instances that are waiting for resources in the resource group in the DataWorks console. You can also use the intelligent monitoring feature provided in Operation Center to monitor the resource usage of the resource group and the number of instances that are waiting for resources in the resource group. For more information about how to view the resource usage of a resource group, see View the resource usage of an exclusive resource group. For more information about how to monitor a resource group, see Create a custom alert rule.