Private Network Access

Scenarios

You can configure a rule to allow certain access to a repository through a private network.

This way, you can pull images to certain cloud servers over VPC.

By default, you can access a repository from a VPC where the repository is. On the Access Control > Private Network Access page, you can see a default rule to allow the access.

Procedure

1. Log in to the SWR console. In the upper left corner, switch to your region. In the navigation pane, choose Repositories. Click your repository name.
2. In the navigation pane, choose Access > Access Control.
3. Click the Private Network Access tab, and click Create Private Network Access Rule in the upper right corner.
4. In the displayed dialog box, select a project, VPC, and subnet.
   Figure 1 Creating a private network access rule
   
   

   If the project you select is not the default one, you need to switch to the project and authorize access to required services in this project before you can continue to create the rule.

5. Click OK.

   If the status changes to Normal and there are IP addresses displayed, the private network access rule has been created.

   Figure 2 Private network access
   

   Then, you can access the repository from any IP address within the CIDR block of the subnet you selected.

   When you create a private network access rule, a VPC endpoint will be created in VPCEP. Do not delete that VPC endpoint.

Follow-up Operations

To access a repository, you also need to create an access credential. For details, see Access Credentials.