Scenarios
TDMQ for Apache Pulsar defaults to private network transmission to achieve lower network latency, higher transmission bandwidth, and better security isolation. When your consumers or producers are located in self-built IDCs or other cloud service platforms and cannot communicate directly with the Pulsar cluster, you can enable public network routing for cross-network production and consumption. When public network access is enabled, it is recommended that you configure strict security access policies to restrict access by IP addresses to ensure data security.
This document describes the operation steps for enabling public network routing, adjusting public network bandwidth configurations, and removing public network bandwidth in the TDMQ for Apache Pulsar console.
Constraints and Limitations
Currently, only pro clusters support the creation of public network access points.
Only one public network access point can be created for each cluster.
Enabling public network bandwidth will incur additional charges. For details, see Pricing. Creating a Public Network Access Point
2. In the left sidebar, choose Cluster, select the target region, and click the ID of the target cluster to go to the Basic Information page.
3. Select the Access Point tab, click Create, select Public Network for the route type, and select the desired size of bandwidth.
4. Click OK. After completing the payment, you can view the created access point in the access point list.
Configuring Security Policies
1. On the Access Point list page, choose More > Security Policies in the operation column of the created access point.
2. In the pop-up window, configure the allowed IP addresses. Click OK to complete the configuration.
Note:
If no security policy is configured, all access is denied by default, and 127.0.0.1 is displayed on the page.
The number of security policies cannot exceed 50.
The IP address sources support the following formats:
Single IP address: for example, 192.168.0.1
CIDR: for example, 192.168.1.0/24; IP range masks from /24 to /32
Not supported IP address: 0.0.0.0