Scenarios

This topic describes how to add the DNS server address and security group rules to a Linux ECS to ensure successful downloading of the Agent installation package and successful monitoring data collection. This topic takes an ECS as an example. The operations for BMSs are similar.

DNS and security group configuration are intended for the primary NIC.

Modifying the DNS Server Address (Command Lines)

You can modify the DNS server address of an ECS via command lines or the management console.

The following describes how to add the DNS server address to the resolv.conf file using command lines.

To use the management console, see Modifying the DNS Server Address (Management Console).

1. Log in to an ECS as user root.
2. Run the vi /etc/resolv.conf command to open the file.
3. Add the DNS server address, for example, nameserver 100.125.1.250 and nameserver 100.125.21.250 to the file. Enter :wq and press Enter to save the change.
   Figure 1 Adding the DNS server address (Linux)
   
   

   The value of nameserver varies depending on the region.

   CN North-Beijing1: 100.125.1.250,100.125.21.250

   CN North-Beijing4: 100.125.1.250,100.125.129.250

   CN Southwest-Guiyang1: 100.125.1.250,100.125.129.250

   CN East-Shanghai1: 100.125.1.250,100.125.64.250

   CN East-Shanghai2: 100.125.17.29,100.125.135.29

   CN South-Guangzhou: 100.125.1.250,100.125.136.29

   AP-Hong-Kong: 100.125.1.250,100.125.3.250

   AP-Bangkok: 100.125.1.250

   AP-Singapore: 100.125.1.250,100.125.128.250

   AF-Johannesburg: 100.125.1.250

   LA-Santiago: 100.125.1.250

   LA-Mexico City1: 100.125.1.22

   LA-Sao Paulo1: 100.125.1.22

Modifying the DNS Server Address (Management Console)

The following describes how to modify the DNS server address of an ECS on the management console. The operations for BMSs are similar.

1. In the upper left corner, select a region and project.
2. On the Service List page, choose Computing > Elastic Cloud Server.

   On the ECS console, click the name of the target ECS to view its details.

3. On the displayed Summary tab page, click the VPC name.
   The Virtual Private Cloud page is displayed.

   Figure 2 VPC
   

4. Click the name of the target VPC.
5. In the Networking Components area, click the number following Subnets.

   The Subnets page is displayed.

6. In the subnet list, click the name of target subnet.
7. In the Gateway and DNS Information area, click following DNS Server Address.
   

   Set the DNS server address to the value of nameserver in 3.

   Figure 3 Edit DNS Server Address
   
8. Click OK.
   

   The new DNS server address takes effect after the ECS or BMS is restarted.

Modifying the ECS Security Group Rules (Management Console)

The following describes how to modify security group rules for an ECS on the management console. The operations for BMSs are similar.

1. On the ECS details page, click the Security Groups tab.

   The security group list is displayed.

2. Click the security group name.
3. Click Modify Security Group Rule.

   The security group details page is displayed.

   

   Procedure for BMS:

   1. Click the security group ID on the upper left.
   2. Click Manage Rule in the Operation column of the security group.
4. Click the Outbound Rules tab, and click Add Rule.
5. Add rules based on Table 1.

   Table 1 Security group rules

   Protocol	Port	Type	Destination	Description
   TCP	80	IPv4	100.125.0.0/16	Used to download the Agent installation package from an OBS bucket to an ECS or BMS and obtain the ECS or BMS metadata and authentication information.
   TCP and UDP	53	IPv4	100.125.0.0/16	Used by DNS to resolve domain names, for example, resolve the OBS domain name when you are downloading the Agent installation package, and resolve the Cloud Eye endpoint when the Agent is sending monitoring data to Cloud Eye.
   TCP	443	IPv4	100.125.0.0/16	Used to collect monitoring data and send the data to Cloud Eye.