Help Center/ Relational Database Service_RDS for PostgreSQL/ User Guide/ Instance Connection/ Overview
Updated on 2026-03-26 GMT+08:00
View PDF
Share

Overview

Before connecting to a DB instance, you must create one first. For details about how to create a DB instance, see Buying an RDS for PostgreSQL DB Instance. You can connect to an RDS for PostgreSQL instance through a command-line interface (CLI), graphical user interface (GUI), Data Admin Service (DAS), or using Java database connectivity (JDBC).

Connection Methods

Table 1 Connection methods

Connection Method

Connection Address

Description

Connecting to an RDS for PostgreSQL Instance Through DAS (Recommended)

Not required

DAS enables you to manage databases on a web-based console and provides you with database development, O&M, and intelligent diagnosis to make it easy to use and maintain your databases. The permissions required for connecting to DB instances through DAS are enabled by default.

Connecting to an RDS for PostgreSQL Instance Through the psql CLI Client

For details, see Connecting to a DB Instance over a Private or Public Network Using a CLI.

In Linux, you need to install a PostgreSQL client on the ECS and connect to the instance through the psql CLI over a private or public network.

  • A floating IP address is provided by default.

    When your applications are deployed on an ECS that is in the same region and VPC as the RDS for PostgreSQL instance, you are advised to use a floating IP address to connect to the instance through the ECS.

  • If you cannot access your RDS for PostgreSQL instance through a floating IP address, bind an EIP to the instance and connect to the instance through the EIP.

Connecting to an RDS for PostgreSQL Instance Through a GUI

EIP for read/write

In Windows, you can use the pgAdmin client to connect to an RDS for PostgreSQL instance.

Connecting to an RDS for PostgreSQL Instance Through JDBC

Floating IP address for read/write or EIP for read/write

RDS for PostgreSQL is compatible with the community ecosystem and does not provide the driver service. You can select a community driver version as required.

If you are connecting to an instance through JDBC, the SSL certificate is optional. For security reasons, you are advised to download the SSL certificate to encrypt the connection.

Connecting to an RDS for PostgreSQL Instance Using Python

Floating IP address for read/write or EIP for read/write

If you are connecting to an instance using Python, an SSL certificate is optional, but using an SSL certificate can improve the security of your data.

Connecting to a DB Instance over a Private or Public Network Using a CLI

Table 2 lists how to use a CLI to connect to an RDS for PostgreSQL instance over a private or public network.

Figure 1 Connecting to a DB instance over a private or public network
Table 2 Connecting to a DB instance over a private or public network

Connection Method

IP Address

Security Group Rules

Description

Private network

Floating IP address
  • If the ECS and RDS DB instance are in the same security group, they can communicate with each other over a private network by default. No security group rules need to be configured.
  • If they are in different security groups, configure security group rules for them, separately.
    • RDS DB instance: Configure an inbound rule for the security group with which the RDS DB instance is associated. For details, see Configuring a Security Group Rule.
    • ECS: The default security group rule allows all outgoing data packets. In this case, you do not need to configure a security group rule for the ECS. If not all outbound traffic is allowed in the security group, you need to configure an outbound rule for the ECS.
  • Secure and high-performance
  • Recommended

Public network

You need to purchase an EIP. For pricing details, see EIP Billing.

To access a DB instance from resources outside the security group that the DB instance is associated with, you need to configure an inbound rule for the security group. For details, see Configuring a Security Group Rule.
  • Less secure
  • To improve data transmission speed and enhance security, you are advised to migrate your application to an ECS deployed in the same VPC as your RDS DB instance and use a floating IP address to access the DB instance.

Explanations for Connection Addresses

  • Floating IP address for read/write

    This IP address is always bound to the primary node. If your applications are deployed on a server that is in the same VPC as your DB instance, you can connect to the DB instance using this IP address to perform read and write operations. If a failover occurs, this IP address will be bound to the new primary node and can still be used for read and write operations. All operations on this IP address will be performed on the primary node.

    Figure 2 Floating IP address
  • EIP for read/write (which needs to be bound to an instance)

    After you buy and bind an EIP to an instance, you can use this IP address to perform read and write operations on the instance. Just like a floating IP address, an EIP is always bound to the primary node for read and write operations. All operations on this IP address will be performed on the primary node.

    Figure 3 EIP
Parent Topic: Instance Connection