Updated on 2026-06-16 GMT+08:00

Enabling SSL for a GeminiDB DynamoDB-Compatible Instance

Scenarios

Secure Socket Layer (SSL) is an encryption-based Internet security protocol for establishing an encrypted link between a server and a client. It provides privacy, authentication, and integrity to Internet communications.

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data to prevent it from being intercepted during transfer.
  • Ensures data integrity during transmission.

GeminiDB DynamoDB-Compatible API provides two connection modes: non-SSL and SSL.

  • If SSL is enabled, your connection will be more secure.
  • If SSL is disabled, you can connect to a database using an unencrypted connection.

Usage Notes

  • Enabling or disabling SSL requires rebooting your instance for changes to apply. Existing connections will be interrupted during the reboot. Therefore, reboot the instance during off-peak hours to prevent impact on workloads.
  • Enabling SSL will prolong network connection response and increase CPU usage. So, evaluate impacts on service performance before enabling SSL.
  • GeminiDB DynamoDB-Compatible API supports only TLS 1.2 or later. It does not support TLS 1.0 or TLS 1.1.

Enabling and Disabling SSL

  1. Log in to the Huawei Cloud console.
  2. On the Instances page, click the target instance to go to the Basic Information page.
  3. In the DB Information area, click to enable SSL.

    Figure 1 Enabling SSL

    Alternatively, choose Connections in the navigation pane. In the Basic Information area, click in the SSL field to enable SSL.

    Figure 2 Enabling SSL

  1. Log in to the Huawei Cloud console.
  2. On the Instances page, click the target instance to go to the Basic Information page.
  3. In the DB Information area, click to disable SSL.

    Figure 3 Disabling SSL

    Alternatively, choose Connections in the navigation pane. In the Basic Information area, click in the SSL field to disable SSL.

    Figure 4 Disabling SSL