Updated on 2022-12-02 GMT+08:00

Creating a Private Zone


Create a private zone to map a private domain name to a private IP address within a VPC.


  • You have created a VPC.
  • You have created an ECS in the VPC and planned to use a private domain name (example.com) for the ECS.


  1. Log in to the management console.
  2. Hover the cursor over in the upper left corner. In the service list, choose Networking > Domain Name Service.

    The DNS console is displayed.

  3. In the navigation pane on the left, choose Private Zones.

    The Private Zones page is displayed.

  4. Click in the upper left corner and select the desired region and project.
  5. Click Create Private Zone.
  6. Set the required parameters.
    Figure 1 Creating a private zone
    Table 1 describes the parameters.
    Table 1 Parameters for creating a private zone



    Example Value


    Name of the private zone, which is the private domain name you have planned for the ECS.

    You can enter a top-level domain that complies with the domain naming rules.

    For details about the domain name format, see Domain Name Format and DNS Hierarchy.



    VPC to be associated with the private zone.


    This VPC must be the same as the VPC where your other cloud resources are deployed, such as cloud servers. Otherwise, the domain name cannot be resolved.



    (Optional) Email address of the administrator managing the private zone.

    Recommended email address: HOSTMASTER@Domain name

    For more information about the email, see Why Was the Email Address Format Changed in the SOA Record?



    (Optional) Identifier of the domain name.

    Each tag contains a key and a value. You can add a maximum of 10 tags to a zone.

    For details about tag key and value requirements, see Table 2.




    (Optional) Supplementary information about the zone.

    You can enter a maximum of 255 characters.

    This is a zone example.

    Table 2 Tag key and value requirements



    Example Value


    • Cannot be left blank.
    • Must be unique for each resource.
    • Can contain a maximum of 36 characters.
    • Cannot start or end with a space or contain special characters =*<>\,|/



    • Cannot be left blank.
    • Can contain a maximum of 43 characters.
    • Cannot start or end with a space or contain special characters =*<>\,|/


  7. Click OK.
  8. Switch back to the Private Zones page.

    View the created private zone in the zone list.

  9. Click the zone name to add a record set.

    On the Record Sets page, click Add Record Set. For detailed operations, see Record Set Overview.

    Click the zone name to view zone details. You can view SOA and NS record sets automatically generated by the system.

    • The SOA record set defines the DNS server that is the authoritative information source for a particular domain name.
    • The NS record set defines authoritative DNS servers for a domain name.

Follow-up Operations

After a private zone is created, you can perform the following operations: