Updated on 2024-07-19 GMT+08:00

Private Zone Overview

A private zone contains information about how to map a domain name and its subdomains used within one or more VPCs to private IP addresses. With private domain names, your ECSs can communicate with each other within the VPCs without having to connect to the Internet.

  • You can create any domain names without registering them.
  • One private zone can be associated with multiple VPCs, and domain names are valid only in VPCs.

To use private domain names, you must first create a private zone for each domain name and associate VPCs with the private zone.

Table 1 describes the operations that you can perform on private zones.

Table 1 Private zone operations

Operation

Scenario

Constraints

Creating a Private Zone

Create a private zone for your domain name.

  • Private zones are project-level resources. When you create a private zone, select a region and project.
  • Each account can create up to 50 private zones.
  • Private domain names must meet the following requirements:
    • Domain name labels are separated by dot (.), and each label does not exceed 63 characters.
    • A domain name label can contain letters, digits, and hyphens (-) and cannot start or end with a hyphen.
    • The total length of a domain name cannot exceed 254 characters.

Managing Private Zones

Modify, delete, batch delete, and view private zones.

  • The domain name of a created private zone cannot be modified.
  • If a private zone is deleted, all its record sets will also be deleted.

Associating a VPC with a Private Zone

Associate a VPC with a private zone.

  • You can only associate VPCs that you have created using your own account.
  • Each VPC can be associated only with one private zone. However, a private zone can have more than one VPC associated with it.

Disassociating a VPC from a Private Zone

Disassociate a VPC from a private zone.

  • After the disassociation, private domain names will not take effect in the VPC.
  • If a private zone is only associated with one VPC, you cannot disassociate it.