Skip to main content
All components of the AutoMQ Cloud BYOC environment are deployed within your Alibaba Cloud account to ensure data privacy and security. Before installing AutoMQ, you need to prepare various Alibaba Cloud resources in advance. This article describes how to prepare the necessary cloud resources for AutoMQ on the Alibaba Cloud public cloud.
In this document, “AutoMQ,” “AutoMQ service provider,” and “the AutoMQ service” all refer to AutoMQ HK Limited and its affiliates.

​
Prepare VPC

You can choose to use an existing VPC when installing AutoMQ, or create a new one for it. For production environments, we recommend checking and adjusting your existing VPC configuration to meet AutoMQ’s requirements. For POC testing, creating a new VPC is a quicker option.

​
VPC Requirements

To deploy the AutoMQ BYOC environment on Alibaba Cloud, your Virtual Private Cloud (VPC) must meet the following conditions:

​
Scenario 1: Create a New VPC

If you need to create a new VPC for AutoMQ, we recommend using the standard creation process in the Alibaba Cloud VPC console.
  1. Log in to the Alibaba Cloud VPC console.
  2. Click Create VPC.
  3. Configure the Region and Availability Zone.
  4. Set the Name and IPv4 CIDR Block for the VPC.
  5. Simultaneously, create the required VSwitches for the VPC. Create the appropriate number of VSwitches in different availability zones based on your deployment model (single-AZ or three-AZ).
  6. Depending on your deployment needs, create a NAT Gateway during the creation process or in a subsequent step.
    • NAT Gateway: If you plan to deploy AutoMQ on ACK, ensure you configure a NAT Gateway for the VSwitches where the worker nodes are located.
  7. Click Confirm to create.

​
Scenario 2: Configure an Existing VPC

If you are deploying AutoMQ in an existing VPC, verify that the following configurations meet the requirements.

​
1. Check DNS Configuration

  1. In the Alibaba Cloud VPC console, select your target VPC.
  2. In the VPC details, confirm that the private domain name resolution feature is enabled. This feature is enabled by default for Alibaba Cloud VPCs.

​
Prepare PrivateZone (Optional)

The AutoMQ cluster exposes service addresses to applications through Private DNS, which relies on private domain name resolution within the VPC. Therefore, a PrivateZone must be configured to provide reliable domain name resolution services. You can choose to have the AutoMQ console create the PrivateZone automatically or prepare it yourself by following the tutorial below.

​
PrivateZone Requirements

When configuring PrivateZone, the following two key conditions must be met:

​
PrivateZone Configuration Steps

​
Step 1: Check Existing PrivateZone

  1. Log in to the Alibaba Cloud console and visit the Alibaba Cloud DNS PrivateZone console.
  2. In the left navigation bar, select Private DNS.
  3. Check if a Zone associated with the target VPC already exists.

​
Step 2: Create or Configure PrivateZone

If a PrivateZone already exists:
  1. Select the target Zone and click Set Association Scope.
  2. In the Associated Resolution Scopes section, ensure that the VPC where AutoMQ is deployed is included.
  3. Record the domain name information for subsequent TLS feature configuration.
If you need to create a new PrivateZone:
  1. Click Add Zone.
  2. Configure the basic information:
    • Zone Name: Enter a private domain name (e.g., internal.example.com).
  3. Click OK.
  4. After successful creation, go to the Associated VPCs page for the Zone and associate the VPC where AutoMQ is deployed.

​
Step 3: Verify the Configuration

  1. On the Zone’s details page, confirm the VPC association status.
  2. Check if the domain name configuration meets the planning requirements for the TLS feature.
  3. Record the Zone’s ID and domain name, which will be provided to the AutoMQ components during subsequent installation.

​
Prepare Cluster Security Group (Optional)

During the cluster deployment process, you can opt to use a pre-configured security group for precise network access control. If you choose this method, you must create a security group in advance and configure its inbound rules according to the table below. If you prefer to simplify network configuration, you can choose to have AutoMQ automatically create a new security group with all the necessary rules during cluster creation, in which case you can skip this section.