Binding an EIP

Scenarios

You can bind an EIP to your cluster instance to allow public network access and can unbind the EIP later if it is not needed.

Binding an EIP directly to the instance increases security risk. If security rules are misconfigured or a vulnerability is exploited, an attacker may obtain your access credentials and perform malicious operations on database resources. If you need to access a DB instance over a public network, you are advised to use a public gateway. For details, see Binding a Public Gateway.

Precautions

• A deleted EIP cannot be unbound.
• Before accessing a DB instance, request an EIP on the VPC console and add an individual IP address or an IP address range that will access the DB instance to the security group's inbound rules. For details, see Configuring Security Group Rules.
• For cluster instances, you can bind EIPs only to dds mongos nodes. To bind a new EIP to a node that is already associated with an EIP, you must first unbind the existing one.
• EIPs need to be purchased separately. For details, see EIP Pricing.

Binding an EIP

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click in the upper left corner of the page and choose Databases > Document Database Service.
4. On the Instances page, click the name of the target cluster instance.
5. In the navigation pane on the left, choose Connections. Click the Public Connection tab. In the Basic Information area, locate the dds mongos node and choose More > Bind EIP in the Operation column.
   Figure 1 Binding an EIP
   

   Alternatively, in the Node Information area on the Basic Information page, locate the dds mongos node and choose More > Bind EIP in the Operation column.

   Figure 2 Binding an EIP
   

6. The displayed dialog box shows EIPs in the Unbound state. Select an EIP and click OK. If no available EIPs are displayed, click View EIP and create one.
   Figure 3 Selecting an EIP
   

7. In the EIP column on the dds mongos tab page, verify that the EIP has been successfully bound.

   If the EIP is no longer needed, unbind the EIP.

Unbinding the EIP

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click in the upper left corner of the page and choose Databases > Document Database Service.
4. On the Instances page, click the name of the cluster instance that contains the node with the bound EIP.
5. In the navigation pane on the left, choose Connections. Click the Public Connection tab. In the Basic Information area, locate the dds mongos node and click More > Unbind EIP in the Operation column.
   Figure 4 Unbinding the EIP
   

   Alternatively, in the Node Information area on the Basic Information page, locate the dds mongos node and choose More > Unbind EIP in the Operation column.

   Figure 5 Unbinding the EIP
   

6. In the displayed dialog box, click OK to unbind the EIP.