Updated on 2023-11-21 GMT+08:00

Configuring an SSL Connection

Secure Socket Layer (SSL) is an encryption-based Internet security protocol for establishing an encrypted link between a server and a client. It provides privacy, authentication, and integrity to Internet communications.

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data to prevent it from being intercepted during transfer.
  • Ensures data integrity during transmission.

After SSL is enabled, you can establish an encrypted connection between your client and the instance you want to access to improve data security.

Precautions

  • After you enable or disable SSL, the established connection is interrupted. Restart the instance for the change to take effect.
  • Enabling SSL will prolong network connection response and increase CPU usage. So, evaluate impacts on service performance before enabling SSL.
  • The SSL function provided by GeminiDB Cassandra supports only TLS 1.3 or later.

Enabling SSL

  1. Log in to the management console.
  2. In the service list, choose Databases > GeminiDB Cassandra API.
  3. On the Instances page, locate the instance that you want to enable SSL for.
  4. In the DB Information area, click to enable SSL.

    Figure 1 Enabling SSL

    Alternatively, choose Connections in the navigation pane on the left. In the Basic Information area, click in the SSL field to enable SSL.

    Figure 2 Enabling SSL

    After SSL connection is enabled, you can connect to the GeminiDB Cassandra instance through SSL connections. For details, see SSL.

Disabling SSL

  1. Log in to the management console.
  2. In the service list, choose Databases > GeminiDB Cassandra API.
  3. On the Instances page, locate the instance that you want to disable SSL for.
  4. In the DB Information area, click to disable SSL.

    Figure 3 Disabling SSL

    Alternatively, choose Connections in the navigation pane on the left. In the Basic Information area, click in the SSL field to disable SSL.

    Figure 4 Disabling SSL

    After SSL connection is disabled, you can connect to the GeminiDB Cassandra instance an unencrypted connection. For details, see Non-SSL Connection.