RocketMQ instances are physically isolated and exclusively occupied by each tenant. You can customize specifications and storage space of a RocketMQ instance as required.
Before purchasing a RocketMQ instance, prepare the required resources, including a virtual private cloud (VPC), subnet, and security group with proper rules. Each RocketMQ instance is deployed in a specific VPC and bound to a specific subnet and security group, which provide an isolated virtual network environment and allow you to easily configure and manage security protection policies.
Table 1 lists the resources required by a RocketMQ instance.
Resource | Requirement | Operations |
|---|---|---|
VPC and subnet | Configure the VPC and subnet for RocketMQ instances as required. You can use the current account's existing VPC and subnet or create new ones. Note the following when creating a VPC and a subnet:
| For details about how to create a VPC and subnet, see the Virtual Private Cloud User Guide. |
Security group | Different RocketMQ instances can use the same security group or different security groups. To use RocketMQ instances, add the security group rules described in Table 2 or Table 3. You can also add other rules as required. After a security group is created, its default inbound rule allows communication among ECSs within the security group and its default outbound rule allows all outbound traffic. In this case, you can access a RocketMQ instance within a VPC, and do not need to add rules according to Table 2 or Table 3. | For details about how to create a security group and configure security group rules, see the Virtual Private Cloud User Guide. |
EIP | This parameter is required to enable public access. Note the following when creating EIPs:
| For details about how to create an EIP, see "Assigning an EIP" in Elastic IP User Guide. |
Direction | Protocol | Port | Source | Description |
|---|---|---|---|---|
Inbound | TCP | 8100 | IP address or IP address group of the RocketMQ client | The port is used for private network access to metadata nodes using TCP. |
Inbound | TCP | 8200 | The port is used for public network access to metadata nodes using TCP. | |
Inbound | TCP | 10100–10199 | The port is used for private access to service nodes using TCP. | |
Inbound | TCP | 10101–10199 | The port is used for public access to service nodes using TCP. |
Direction | Protocol | Port | Source | Description |
|---|---|---|---|---|
Inbound | TCP | 8100 | IP address or IP address group of the RocketMQ client | The port is used for private network access to instances using TCP. |
Inbound | TCP | 8200 | The port is used for public network access to instances using TCP. | |
Inbound | TCP | 8080 | The port is used for private network access to instances using gRPC. | |
Inbound | TCP | 8081 | The port is used for public network access to instances using gRPC. | |
Inbound | TCP | 10100 | The port is used for private access to service nodes using TCP. | |
Inbound | TCP | 10101 | The port is used for public access to service nodes using TCP. |
in the upper left corner to select a region.DMS for RocketMQ instances in different regions cannot communicate with each other over an intranet. Select a nearest region for low latency and fast access.
and choose Application > Distributed Message Service for RocketMQ to open the console of DMS for RocketMQ.DMS for RocketMQ instances in different regions cannot communicate with each other over an intranet. Select a nearest location for low latency and fast access.
Projects isolate compute, storage, and network resources across geographical regions. For each region, a preset project is available.
An AZ is a physical region where resources use independent power supply and networks. AZs are physically isolated but interconnected through an internal network.
Select AZs as prompted based on the instance version.
You can customize a name that complies with the rules: 4–64 characters; starts with a letter; can contain only letters, digits, hyphens (-), and underscores (_).
This parameter is for enterprise users. An enterprise project manages cloud resources. The enterprise project management service unifies cloud resources in projects, and resources and members in a project. The default project is default.
This parameter is required only for v5.x.
This parameter is required only for v4.8.0.
The disk size must be multiple of 100. The disk type cannot be changed once the RocketMQ instance is created.
The disk type can be high I/O or ultra-high I/O. For details on how to select a disk type, see "Disk Types and Performance" in Elastic Volume Service User Guide.
The 5.x professional edition does not support high I/O.
A VPC provides an isolated virtual network for your RocketMQ instances. You can configure and manage the network.
After the RocketMQ instance is created, its VPC and subnet cannot be changed.
A security group is a set of rules for accessing a RocketMQ instance.
The SSL setting can be changed after the instance is created. Select a transmission mode as required.
After ACL is enabled, the permissions for each user are exclusive.
Public access is disabled by default. You can enable or disable it as required. After public access is enabled, configure an IPv4 EIP for the RocketMQ instance.
Tags are used to identify cloud resources. When you have many cloud resources of the same type, you can use tags to classify cloud resources by dimension (for example, usage, owner, or environment).
Up to 20 tags can be added to each RocketMQ instance. For details about the requirements on tags, see Configuring Tags for a RocketMQ Instance.
It takes 3 to 15 minutes to create an instance. During this period, the instance status is Creating.