Help Center/ GeminiDB/ GeminiDB DynamoDB-Compatible API/ Working with GeminiDB DynamoDB-Compatible API/ Instance Connection and Management/ Connection Information Management/ Configuring Access Control
Updated on 2026-04-13 GMT+08:00
View PDF
Share

Configuring Access Control

Scenarios

Load balancing is typically required in enterprise applications to enhance database availability and performance. GeminiDB DynamoDB-Compatible API supports private network access control for load-balanced endpoints. You can configure access policies to ensure a stable, high-performance, secure, and reliable database environment for enterprise workloads.

Precautions

  • Configure private network access control only for instances connected using load balancer addresses.
  • A load balancer address does not support security groups. After creating an instance, you need to configure IP address access control. If no whitelist is configured, all IP addresses that can communicate with the VPC can access the instance.

Configuring Private Network Access Control

  1. Log in to the GeminiDB console.
  2. On the Instances page, click the target instance.
  3. In the Network Information area, click next to Access Control.

    Figure 1 Enabling access control

  4. Select Blacklist or Whitelist and specify IP addresses or a CIDR block.

    IP address and CIDR block formatting rules

    • Enter one IP address (for example, 192.168.0.1) or CIDR block (for example, 192.168.0.1/16) per line, separated by a line break.
    • You can add a remark to each entry by using a vertical bar (|) as a separator (for example, 192.168.0.1 | remark01).
    • The blacklist or whitelist can contain a maximum of 300 IP addresses or CIDR blocks.
    • A remark must be between 0 and 255 characters and cannot contain angle brackets (< or >).

    Only the whitelist or blacklist can be configured. If you change the mode, the original configuration becomes invalid.

    • Blacklist: IP addresses in the blacklist are not allowed to access your instance.
    • Whitelist: Only IP addresses in the whitelist are allowed to access your instance.
    Figure 2 Configuring access control

  1. Log in to the GeminiDB console.
  2. On the Instances page, click the target instance.
  3. In the Network Information area, click next to Access Control. In the displayed dialog box, click Yes to disable access through a load balancer.

    Figure 3 Disabling private network access control

  4. Verify that the load balancer address does not take effect.

Helpful Links

Parent Topic: Connection Information Management