Page tree
Skip to end of metadata
Go to start of metadata

Overview

The following document provides the steps to build a production hosting environment on the Alibaba® Cloud.

Warning:

  • We strongly recommend that you read the Getting Started wih Alibaba Cloud website before you begin this process.
  • You must obtain an elastic IP when you create your server.
  • We strongly recommend that you host interconnected servers at Alibaba within the same region.
  • You must purchase a license for cPanel & WHM. New installations automatically receive a free 15-day trial license.
  • You cannot change your hostname within cPanel & WHM after you launch an instance. Make certain that you configure it before you launch. An incorrect hostname may cause license errors.

Download our preconfigured security rules file

Download the following security rules file: cPanel_Alibaba_Security_Rules_v1.json.

 Click to view...

[{"SourceCidrIp":"0.0.0.0/0","Description":"UDP DNS","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"53/53","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"UDP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:22:21Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"MySQL","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"3306/3306","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:22:03Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"Webmail","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"2095/2096","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:21:48Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"WHM","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"2086/2087","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:21:32Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"cPanel","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"2082/2083","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:21:16Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"Webdav, Caldav, and Carddav","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"2077/2080","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:19:39Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"POP3 with SSL","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"995/995","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:18:43Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"IMAP with SSL","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"993/993","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:18:22Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"IMAP","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"143/143","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:17:36Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"POP3","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"110/110","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:17:21Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"TCP DNS","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"53/53","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:16:58Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"Inbound Mail","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"25/26","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:15:25Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"FTP and SSH","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"20/22","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T19:14:59Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"-1/-1","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"ICMP","SourcePortRange":"-1/-1","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T18:54:33Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"22/22","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T18:54:33Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"80/80","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T18:54:33Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""},{"SourceCidrIp":"0.0.0.0/0","Description":"","DestCidrIp":"","NicType":"intranet","DestGroupName":"","PortRange":"443/443","DestGroupId":"","Ipv6DestCidrIp":"","Direction":"ingress","Priority":1,"IpProtocol":"TCP","SourcePortRange":"","SourceGroupOwnerAccount":"","Policy":"Accept","CreateTime":"2019-08-01T18:54:33Z","SourceGroupId":"","DestGroupOwnerAccount":"","Ipv6SourceCidrIp":"","SourceGroupName":""}]


You will use this file in a later step.

Note:

This set of security rules provides open access to and from the server. You can refine your security rules later.

Log in to Alibaba's Marketplace

Perform the following steps to log in to Alibaba's Marketplace site:

  1. Log in to the Alibaba Cloud website.
  2. Navigate to the Alibaba Cloud Marketplace website.
  3. Click Login.
  4. Enter your email address and password, and click Sign In. The Marketplace interface will appear.

Select the cPanel & WHM product

To select the cPanel & WHM product from the Alibaba Marketplace, perform the following steps:

  1. Search for cPanel & WHM. A list will appear.
  2. Click the cPanel & WHM listing. A product listing interface will appear.
  3. Click Choose Your Plan. The ECS Custom Launch interface will appear.

Configure the instance

To configure the cPanel & WHM instance, perform the following steps:

  1. In the Billing Method section, select Pay-As-You-Go.
  2. In the Region section, select a nearby region.
  3. Select a Zone within the region. Do not select Random.
  4. In the Instance Type section, select your desired instance type.
  5. Confirm that cPanel & WHM appears in the Image text box.
  6. In the Storage section, select at least 20GB for the System Disk size.
  7. The Data Disk section is optional.
  8. Click Next: Networking, and the Networking interface will appear.

Configure networking options

To configure the networking options for your instance, perform the following steps:

Configure VPC

If you've already set up VPCs on Alibaba, the interface will display your available VPCs. Select the desired VPC.

  1. If this is your first instance, we recommend that you click Go to Console and Create. A new VPCs interface appears.
  2. Click Create VPC.
  3. In the VPC section, enter a label for the VPC in the Name text box.
  4. Do not change the information in the IPv4 CIDR Block section.
  5. In the VSwitch section, enter a label for the VSwitch in the Name text box.
  6. Select the zone that you selected earlier within the region. Ensure that a green checkmark appears next to the ECS label.
  7. Click OK. A success message will appear, and click the Complete button.
  8. Close the browser tab for the VPCs interface.
  9. Click the Refresh button and select the newly-created VPC. The interface will automatically populate the Switch text box.
  10. Under Network Billing Method, select the Assign Public IP Address checkbox.
  11. Set the bandwidth slider to the maximum throughput that you expect to send or receive from your instance.

Configure Security Group

  1. In the Security Group section, click Create Security Group. A Security Group interface will appear in a new browser tab.
  2. Click Create Security Group button. A confirmation message will appear.
  3. In the Template menu, select Customize.
  4. In the Security Group Name textbox, enter a label.
  5. Enter a description of this security group in the Description text box.
  6. Under Network Type, select VPC.
  7. In the VPC menu, select the VPC that you created earlier. It will automatically populate the text box with the ID of the VPC.
  8. Click OK. A confirmation message will appear.
  9. Click Create Rules Now. Another confirmation message will appear.
  10. Click Import rules. Another confirmation message will appear.
  11. Click select. Select the file that you downloaded at the beginning of this document.

    Reminder:

    This set of security rules provides open access to and from the server. You can refine your security rules later.

  12. Close the browser tab.
  13. In the Security Group section, click Reselect Security Group.
  14. Select the security group that you created.
  15. Click Select.
  16. Click Next: System Configurations. A new interface appears.

Select system configuration

Perform the following steps to configure the system on the instance:

  1. Under Login Credentials, select Password.
  2. Enter a secure password in the Login Password and Confirm Password text boxes.
  3. Enter a name for the instance. This is not the hostname of the instance. It is the label that will appear on the Console.
  4. Enter a Description of the instance.
  5. In the Host field, enter a fully-qualified domain name (FQDN) as the hostname of your server.

    Important:

    • Do not select a hostname that begins with www or a number, or a hostname that ends with a hyphen (-).
    • You must use a fully-qualified domain name (FQDN) that uniquely identifies the server (for example, hostname.example.com or hostname.example.co.uk).
    • Do not choose a hostname that a cPanel account on your server will use.
    • Do not choose a potential service subdomain as a hostname (for example, cpanel.example.com or whm.example.com).
    • Do not select a socially-unacceptable hostname. The hostname will appear in mail headers.
    • Only use lowercase, Latin-script letters in hostnames.
  6. Skip the remaining steps and click Preview Order. The Order Summary interface will appear.
  7. In the Terms of Service section, select the ECS Service Level Agreement checkbox.
  8. Click Create Instance. A confirmation message will appear.
  9. Click Console. The Instances interface will appear, and it will display your newly-created instance.


Note:

New instances may require several minutes to initialize.

Create Elastic IP Address (EIP)

In order to access your server, you must configure an EIP for the server.

To configure an EIP, perform the following steps:

  1. Click More.
  2. Click Network and Security Group.
  3. Click Convert to EIP.
  4. Read the warning box.
  5. Click OK.

The interface will refresh and display a public EIP for the server.

Log in to WHM

To log in to WHM, perform the following steps:

  1. In your preferred browser, navigate to the following URL where IP ADDRESS represents the server's IP address:

    https://IP ADDRESS:2087
  2. Agree to the software license. A new interface will appear.
  3. Enter the your contact information and nameserver information. The WHM Home interface will appear.

You must purchase a license for cPanel & WHM. New installations automatically receive a free 15-day trial license.

Additional documentation