Unbinding an EIP

The Elastic IP (EIP) service enables your RDS instances to communicate with the Internet using static public IP addresses and scalable bandwidths. But this increases the risk of network-wide attacks on your instances. Using an EIP leaves you open to DoS or DDoS attacks.

As an internal component, the database can be accessed using an internal IP address. Therefore, you are advised to unbind the EIP from the database.

Unbinding an EIP

Log in to the management console.
Click in the upper left corner and select a region.
Click in the upper left corner of the page and choose Databases > Relational Database Service.
On the Instances page, click the DB instance that has an EIP bound.
In the navigation pane on the left, choose Connectivity & Security. In the Connection Information area, click Unbind next to the EIP field. In the displayed dialog box, click Yes.

Alternatively, in the Connection Topology area, click Public Connection and then Unbind in the connection topology. In the displayed dialog box, click Yes.
If you have enabled operation protection, click Send Code in the displayed Identity Verification dialog box and enter the obtained verification code. Then, click OK.

Two-factor authentication improves the security of your account and cloud product. For details about how to enable operation protection, see Identity and Access Management User Guide.
On the Connectivity & Security page, view the results.

You can also view the progress and result of unbinding an EIP from a DB instance on the Task Center page.

To bind an EIP to the DB instance again, see Binding an EIP.