Connecting to a DB Instance Through a Public Network

You can connect to a DB instance through a non-SSL connection or an SSL connection. The SSL connection encrypts data and is more secure.

Prerequisites

  1. An EIP has been bound to the target DB instance and security group rules have been configured.
    1. Bind an EIP to the target DB instance.

      For details about how to bind an EIP, see section Binding an EIP.

    2. Obtain the IP address of the local device.
    3. Configure security group rules.

      Add the IP address obtained in 1.b and the instance port to the inbound rule of the security group.

      For details about how to configure a security group rule, see section Configuring Security Group Rules.

    4. Run the ping command to check the connectivity between the local device and the EIP that has been bound to the DB instance in 1.a.
  2. You have installed a database client to connect to DB instances.

    You can use a database client to connect to the target DB instance in the Linux or Windows operating system (OS).

    • In the Linux OS, you need to install a MySQL client on the ECS. It is recommended that you download a MySQL client running a version later than that of the DB instance.

      For details about how to obtain and install the MySQL client, see section How Can I Install the MySQL Client?

Using MySQL-Front to Connect to a DB Instance

  1. Start MySQL-Front.
  2. In the displayed dialog box, click New.

    Figure 1 Connection management

  3. Enter the information of the DB instance to be connected and click Ok, as shown in Figure 2.

    Figure 2 Adding an account
    Table 1 Parameter description

    Parameter

    Description

    Name

    Indicates the name of the database connection task. If you do not set this parameter, it will be the same as the Host value by default.

    Host

    Indicates the EIP of the DB instance to be connected.

    Port

    Indicates the private network port of the DB instance.

    User

    Indicates the name of the user who will access the DB instance. The default user is root.

    Password

    Indicates the password of the RDS database account.

  4. In the displayed window, select the connection that you have created in Figure 3 and click Open.

    If the connection information is correct, the DB instance is successfully connected.
    Figure 3 Opening a session

    If the connection fails, ensure that preparations have been correctly made in Prerequisites and try again.

Using SSL to Connect to a DB Instance

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and a project.
  3. Click Service List. Under Database, click Relational Database Service. The RDS console is displayed.
  4. On the Instances page, click the target DB instance. In the DB Information area on the Basic Information page, click in the SSL field to download the root certificate or certificate bundle.
  5. Import the root certificate to the Linux OS on the ECS. For details, see How Can I Import the Root Certificate to a Windows or Linux OS?

    • Since April 2017, RDS has offered a new root certificate that has a 20-year validation period. The new certificate takes effect after DB instances are rebooted. Replace the old certificate before it expires to improve system security.

      For details, see section How Can I Identify the Validity Period of an SSL Root Certificate?

    • You can also download the certificate bundle, which contains both the new certificate provided since April 2017 and the old certificate.

  6. Connect to an RDS DB instance. The Linux OS is used as an example.

    mysql -h <host> -P <port> -u <userName> -p --ssl-ca=<caDIR>
    Table 2 Parameter description

    Parameter

    Description

    <host>

    Indicates the EIP of the DB instance to be connected.

    <port>

    Indicates the port of the DB instance to be connected.

    <userName>

    Indicates the username of the RDS database account. The default administrator is root.

    <caDIR>

    Indicates the directory of the CA certificate. The certificate should be stored in the directory where the command is executed.

    For example, to connect to a DB instance through an SSL connection as user root, run the following command:

    mysql -h 172.16.0.31 -P 3306 -u root -p --ssl-ca=ca.pem

    Enter the password of the database account if the following information is displayed:

    Enter password:

    If the connection fails, ensure that preparations have been correctly made in Prerequisites and try again.

Parent topic: Connecting to an RDS for MySQL DB Instance Through a Public Network