Help Center/ Distributed Cache Service/ FAQs/ Security/ Why Can't Security Groups Be Configured for DCS Redis 4.0/5.0/6.0 Basic Edition Instances?
Updated on 2024-09-30 GMT+08:00

Why Can't Security Groups Be Configured for DCS Redis 4.0/5.0/6.0 Basic Edition Instances?

Currently, DCS Redis 4.0/5.0/6.0 basic edition instances use VPC endpoints and do not support security groups.

To allow access only from specific IP addresses to a DCS Redis 4.0, 5.0, or 6.0 basic edition instance, add the IP addresses to the instance whitelist.

If no whitelists are added for the instance or the whitelist function is disabled, all IP addresses that can communicate with the VPC can access the instance.

Creating a Whitelist Group

  1. Log in to the DCS console.
  2. Click in the upper left corner of the management console and select the region where your instance is located.
  3. In the navigation pane, choose Cache Manager.
  4. Click the name of a DCS instance.
  5. Choose Instance Configuration > Whitelist. On the displayed page, click Create Whitelist Group.
  6. In the Create Whitelist Group dialogue box, specify Group Name and IP Address/Range.

    Table 1 Whitelist parameters

    Parameter

    Description

    Example

    Group Name

    Whitelist group name of the instance. A maximum of four whitelist groups can be created for each instance.

    Group naming rules:

    • Start with a letter.
    • 4 to 64 characters.
    • Only letters, digits, hyphens (-), and underscores (_) are allowed.

    DCS-test

    IP Address/Range

    IP addresses or address segments of the instances allowed for access. A maximum of 100 IP addresses or IP address segments can be added to an instance. Use commas (,) to separate multiple IP addresses or address segments.

    Unsupported IP address and IP address range: 0.0.0.0 and 0.0.0.0/0.

    10.10.10.1,10.10.10.10,192.168.0.0/16

  7. Click OK.

    The whitelist function takes effect immediately after the whitelist group is created. Only whitelisted IP addresses can access the instance. For persistent connections, the whitelist takes effect after reconnection.

    • To modify a whitelist: Click Edit on the whitelist page to modify the IP addresses or address segments of a whitelist.
    • To delete a whitelist: Click Delete on the whitelist page to delete a whitelist group.
    • To disable a whitelist: Click Disable Whitelist in the left corner of the whitelist tab page. After a whitelist is disabled, IP addresses within the same VPC as the instance can be used to access the instance. To enable the whitelist, click Enable Whitelist.