Overview

Scenarios

You can create a DB instance on the management console and connect to the DB instance through an ECS.

If you are using RDS for the first time, see the constraints described in section MySQL Constraints.

Process

Figure 1 illustrates the process of connecting to a MySQL DB instance through a private network.

Figure 1 Connecting to a DB instance through a private network

• Step 1: Create a DB instance. Confirm the specifications, storage, network, and database account configurations of the MySQL DB instances based on service requirements.
• Step 2: Configure security group rules.
  • If the ECS and RDS DB instance are in the same security group, they can communicate with each other by default. No security group rule needs to be configured. Go to Step 3: Connect to a DB Instance Through a Private Network.
  • If the ECS and RDS DB instance are in different security groups, you need to configure security group rules for them, separately.
    • RDS DB instance: Configure an inbound rule for the security group with which the RDS DB instance is associated.
    • ECS: The default security group rule allows all outgoing data packets. In this case, you do not need to configure a security rule for the ECS. If not all outbound traffic is allowed in the security group, you need to configure an outbound rule for the ECS.
• Step 3: Connect to a DB instance through a private network. You can connect to a DB instance through a common connection or an SSL connection. The SSL connection encrypts data and is more secure.