doc-exports/docs/dns/umn/dns_usermanual_1033.html

Managing Endpoint Rules

Scenarios

To allow cloud servers to access an on-premises domain name, you need to create an outbound endpoint and configure endpoint rules to specify the on-premises domain name to be accessed and the IP addresses of the on-premises DNS servers. Private DNS then forwards the DNS queries for the on-premises domain name to the on-premises DNS servers based on the endpoint rules.

An endpoint rule can have more than one VPC associated. After a VPC is associated with an endpoint rule, DNS queries for the on-premises domain name from the cloud servers in the VPC will be forwarded to the on-premises DNS servers.

Prerequisites

An outbound endpoint has been created.

For details about how to create an outbound endpoint, see Creating an Outbound Endpoint.

Adding an Endpoint Rule

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane on the left, choose Resolvers.

   The Resolvers page is displayed.

4. Click in the upper left corner and select the desired region and project.
5. Click the Endpoint Rules tab.
6. Click Add Rule.
7. Configure the parameters based on Table 1.

   Table 1 Parameters for adding an endpoint rule

   Parameter	Description	Example Value
   Name	Name of the endpoint rule added to an outbound endpoint.	rule-test01
   Domain Name	Domain name used by on-premises servers. The domain name cannot be changed after an endpoint rule is created.	example.com
   Type	By default, Resolvers is selected.	Resolvers
   Outbound Endpoint	Select the outbound endpoint that you want to add to this endpoint rule to.	outbound-test01
   Associate VPC	Whether to associate VPCs with the endpoint rule. If this option is selected, you need to select one or more VPCs.	Select it.
   Region	Region that the VPCs belong to. This parameter is displayed after Associate VPC is selected. The current region is displayed by default.	eu-de
   VPC	Select the VPCs to be associated with the endpoint rule. This parameter is displayed after Associate VPC is selected.	vpc-test
   IP Addresses	IP address of a DNS server in the on-premises data center. A maximum of five IP addresses can be added.	192.168.1.1

8. Click OK.

Viewing an Endpoint Rule

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane on the left, choose Resolvers.

   The Resolvers page is displayed.

4. Click in the upper left corner and select the desired region and project.
5. Click the Endpoint Rules tab to view the endpoint rule list.

   You can view the endpoint rules you created or other users shared with you.

6. Click the name of the endpoint rule to view its details, such as basic configuration, VPCs, and IP addresses.

Modifying an Endpoint Rule

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane on the left, choose Resolvers.

   The Resolvers page is displayed.

4. Click in the upper left corner and select the desired region and project.
5. Click the Endpoint Rules tab to view the endpoint rule list.
6. Locate the endpoint rule and click Modify in the Operation column.

   You can change the rule name, associating other VPCs, disassociating from VPCs, and add, delete, or modify IP addresses.

Deleting an Endpoint Rule

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane on the left, choose Resolvers.

   The Resolvers page is displayed.

4. Click in the upper left corner and select the desired region and project.
5. Click the Endpoint Rules tab to view the endpoint rule list.
6. Locate the endpoint rule, click More in the Operation column, and select Delete.
7. Confirm the endpoint rule and click Yes.

Disassociating a VPC from an Endpoint Rule

1. Log in to the management console.
2. In the service list, choose Network > Domain Name Service.

   The DNS console is displayed.

3. In the navigation pane on the left, choose Resolvers.

   The Resolvers page is displayed.

4. Click in the upper left corner and select the desired region and project.
5. Click the Endpoint Rules tab to view the endpoint rule list.
6. Locate the endpoint rule and click in the VPCs column.

7. In the Disassociate VPC dialog box, click OK.

Parent topic: Resolver