Help Center/ Database Security Service/ User Guide/ Database Encryption/ Series 2/ Quick Start/ Scenario 2: Proxy Pattern - Pre-release Phase/ Configuring the Proxy Service
Updated on 2026-09-24 GMT+08:00
View PDF
Share

Configuring the Proxy Service

The encryption proxy service is a reverse proxy service for databases; it serves as the primary execution unit responsible for data encryption/decryption and data masking. This service functions as a virtual database; once the encryption proxy service is configured, the database connections of the business system should be directed to this newly added proxy service. The database encryption proxy service intercepts read and write requests from the business database, encrypts the plaintext data sent by the business system to the database, and then decrypts the ciphertext data returned by the database before returning it to the business system. As a result, the business system can implement transparent data encryption and decryption without requiring any code modifications.

The startup and shutdown of both the standard and Pre-Release proxy instances are managed by the Database Encryption Platform. Instances launched under the Encryption Proxy Service mode operate using the standard method, whereas those launched under Project Management> Pre-Release mode operate using the Pre-Release method. When creating a proxy instance, the standard proxy information is automatically synchronized to the Pre-Release mode; these instances share the same port and can only run in one mode at a time.

Prerequisite

Before configuring the proxy service, you must first configure the main server; for instructions on configuring the main server, please refer to Configuring the Main Server.

Procedure

  1. Logging In to the Database Encryption System using the system administrator (sysadmin) account.
  2. Select Encryption Proxy Service from the left navigation tree.
  3. In the right-hand pane, click Add New, then select Add Proxy Service from the pop-up menu, as shown in Figure 1.

    Figure 1 Encrypted proxy service

  4. After clicking Add Proxy Service, configure the corresponding server information in the pop-up window, as shown in Figure 2. For configuring the proxy server, refer to Table 1 for parameter descriptions.

    Figure 2 Creating a proxy service
    Table 1 New proxy service parameter documentation

    Parameter

    Description

    Main Server

    Select the configured main server using the dropdown menu.

    Proxy Service Name

    Custom string - can be filled in according to your specific business requirements; e.g.: ERP Agency Services.

    Port Number

    The port number for the Execution Proxy Service ranges from 2026 to 3036.

    The target database will provide services to applications or O&M tools via this port. For example, if port 2999 is selected, the database connection port for the business system must be changed to 2999.

    Database Type

    Select the required database type; this type should be determined based on the type of the target database in this example, it is MySQL.

    Data Asset

    Select the data assets that have already been configured (these must be configured in advance within the Asset Database module). For instructions on how to configure an Asset Database, please refer to Asset Database.

    Remark

    Optional; you may enter additional notes or information regarding this service.

    Maximum Memory

    The maximum amount of memory that can be allocated by the current proxy service, measured in MB. The maximum allowable memory allocation value cannot exceed the available memory; otherwise, the proxy service cannot be created.

    Available Memory

    The maximum memory available for proxy service allocation across the entire system, measured in MB.

    Maximum Cached Memory

    The percentage of memory allocated to the cache for field information, field encryption rules, parsed SQL statements, and other cached data when assigned to an agent service. This value can be configured between 1 and 50; it depends on the number of fields and whether the system executes a large volume of SQL queries. You may initially set this value to 50 and adjust it later based on your specific business requirements.

  5. Click Confirm to save.
Parent Topic: Scenario 2: Proxy Pattern - Pre-release Phase