After you activate Drive and Photo Service (PDS) Developer Edition, you can configure a custom domain name used to access the enterprise drive. You can also configure a custom data access domain name, a custom API domain name, and a custom logon domain name. After you configure a custom domain name, the limit of 500 shares allowed to be created per day no longer applies.
Usage notes
To increase the numbers of created shares and accesses per day to more than 500 or remove the limit on downloading APK and IPA files in externally-faced shares, make sure that you have configured both an enterprise-dedicated domain name and a data access domain name.
If your BasicUI is open to public or the number of internal accesses to your BasicUI is more than 1,000, you must configure a custom domain name.
Prerequisites
You have the permissions to perform operations in the PDS console. If you are using a RAM user without the AliyunPDSFullAccess policy attached, you must complete the authorization first. For more information, see Create a RAM user and Grant permissions to a RAM user.
You have activated PDS Developer Edition and created a domain. For more information, see Get started with PDS.
You have enabled BasicUI. For more information, see Enable BasicUI.
You have an account with the permissions of a super administrator or drive administrator for PDS Developer Edition.
You have registered a domain name. You can bind a domain name not registered with Alibaba Cloud. If you do not have a domain name, you can register one with Alibaba Cloud Domains. For more information, see Register a domain name.
Ensure that the domain name has an ICP filing. You can bind a domain name that does not belong to Alibaba Cloud Domains. If your domain name does not have an ICP filing, you can apply for one using the Alibaba Cloud ICP Filing system. For more information, see ICP filing process.
You have an SSL certificate. If you do not have one, you can purchase an SSL certificate from Alibaba Cloud Certificate Management Service. For more information, see Purchase an official certificate and Apply for a certificate.
If ICP filing is not completed by using the Alibaba Cloud ICP Filing system, the ICP filing status may not be retrievable, which may cause domain name binding or access to fail.
Procedure
Step 1: Resolve DNS
Obtain the DNS record value.
The following includes obtaining multiple domain record values. Obtain them as needed.
To increase the daily limit of 500 shares, you need to configure both the Enterprise Domain and the Data Access Domain.
If BasicUI is used for external operations or internal use with a daily access volume exceeding 1,000, you need to configure a custom domain name.
Go to the PDS console.
Navigate to the PDS Developer Edition Domain List page.
On the Domain List tab, select the domain you want to manage and click Details.
Select Application List, and in the BasicUI operation column, click Enter Management.
The enterprise domain is the website access domain name, and configuring a custom domain name makes it easier to remember.
The method to obtain the enterprise domain DNS record value is as follows:
In the management console's left-side navigation pane, select Enterprise Settings > Standard Customization.
Save the Default Domain Name under Enterprise Domain. For instance, example.apps.aliyunpds.com.
The data access domain is used for accessing file data or transcoding playback domain names.
File transfer: Mainly used for accessing domain names for file transfer within the drive and external link files.
Value-added services: Mainly used for accessing domain names for value-added services such as audio and video transcoding playback.
The method to obtain the data access DNS record value is as follows:
In the left-side navigation pane of the management console, select Enterprise Settings > Standard Customization.
Save the Default Domain Name under Data Access Domain. For instance, use example.data.aliyunpds.com. Retrieve the File Transfer or Value-added Services default domain name as necessary.
Example of obtaining data access DNS records:
Custom domain name pointing to PDS data domain: example.com -> ${PDS data domain}
Verify DNS domain ownership: _dnsauth.example.com -> _dnsauth.example.com.${PDS data domain}
${PDS data domain} is shown in the red box in the example image.
The method to obtain the API domain DNS record value is as follows:
In the management console's left-side navigation pane, select Enterprise Settings > Standard Customization.
Save the Default Domain Name under the API Domain section. An example would be example.api.aliyunpds.com
The method to obtain the login authentication domain DNS record value is as follows:
In the management console's left-side navigation pane, select Enterprise Settings > Standard Customization.
Save the Default Domain Name under the Login Authentication Domain section. For example: example.auth.aliyunpds.com
Refer to the corresponding steps to resolve the domain name to the PDS service based on the domain name service provider and account.
Resolve DNS for Alibaba Cloud registered Domain NamesResolve DNS for non-Alibaba Cloud registered Domain NamesThe steps to bind a domain name registered with Alibaba Cloud to PDS are as follows:
Log on to the Alibaba Cloud DNS console.
In the authoritative domain name list, click Access Configuration on the right side of the target domain name.
Click Add Record and fill in the domain name resolution information.
Parameter
Description
Example value
Record type
Select CNAME as the type to which the domain name points.
CNAME
Host record
Fill in according to your business needs, depending on which domain name you want to use to access PDS.
www
Source of resolution request
Select the line used to resolve the domain name. It is recommended to select Default. The system will automatically select the optimal line.
Default
Record value
Fill in the default domain name corresponding to the enterprise.
example.apps.aliyunpds.com
TTL
The update cycle of the domain name. The minimum TTL can be set to 1 second.
There is a certain delay before the TTL setting takes effect. The actual time in use will prevail.
10 minutes
The steps to bind a domain name registered with other domain name service providers to PDS are as follows:
On the DNS platform of your domain provider, use the settings described in the following table to add a CNAME record.
Parameter
Description
Example value
Record type
Select CNAME as the type to which the domain name points.
CNAME
Host record
Fill in according to your business needs, depending on which domain name you want to use to access PDS.
www
Source of resolution request
Select the line used to resolve the domain name. It is recommended to select Default. The system will automatically select the optimal line.
Default
Record value
Fill in the default domain name corresponding to the enterprise.
example.apps.aliyunpds.com
TTL
The update cycle of the domain name. The minimum TTL can be set to 1 second.
There is a certain delay before the TTL setting takes effect. The actual time in use will prevail.
10 minutes
Verify whether the DNS is effective.
After binding the custom domain name, you can use the Alibaba Cloud Network Probe Tool to check the result of the CNAME resolution.
If the domain name resolution result shows the external access domain name of the PDS you bound, it indicates that the CNAME resolution of the custom domain name has taken effect.
Step 2: Configure custom domain names
Before configuring the custom domain name, please download the corresponding domain name SSL certificate. For example, two files: example.key and example.pem.
Enter the domain configuration interface:
Enterprise domainData access domainAPI domainLogin authentication domainThe method to configure the enterprise domain custom operation is as follows:
Enter the Drive and Photo Service Developer Edition management console page.
In the left-side navigation pane, select Enterprise Settings > Standard Customization.
On the Standard Customization page, choose Enterprise Domain from the Enterprise Domain module to configure.
The method to configure the data access domain custom operation is as follows:
Enter the Drive and Photo Service Developer Edition management console page.
In the left-side navigation pane, select Enterprise Settings > Standard Customization.
On the Standard Customization page, under the Enterprise Domain module, select Data Access Domain for configuration.
The method to configure the API domain custom operation is as follows:
Enter the Drive and Photo Service Developer Edition management console page.
In the left-side navigation pane, select Enterprise Settings > Standard Customization.
On the standard customization page, locate the Enterprise Domain Names module and select API Domain Names to configure.
The method to configure the login authentication domain custom operation is as follows:
Enter the Drive and Photo Service Developer Edition management console page.
In the left-side navigation pane, select Enterprise Settings > Standard Customization.
On the Standard Customization page, under the Enterprise Domain module, select Login Authentication Domain to configure it.
Configure the domain name:
If the certificate is issued by an intermediary, the certificate content will be composed of the downloaded certificate and the certificate issued by the intermediary.
Open the downloaded certificate with a text editor, and add the certificate name, certificate content, and certificate private key in the domain configuration interface. If your certificate expires, please download the certificate again and update the certificate information in the domain configuration.
Enter the custom domain name, for example: www.example.com.
Enter the certificate name, for example: cert_xxxxx.
Enter the certificate content, starting with the format "-----BEGIN CERTIFICATE-----".
Enter the certificate private key, starting with the format "-----BEGIN RSA PRIVATE KEY-----".
Click Configure Now to finalize the Custom Domain Name setup.
Step 3: Use the custom domain name to access
Once the custom domain name is active, you can directly access the configured Enterprise Domain in your browser.
