Help Center/ GaussDB(for MySQL)/ User Guide/ Security and Encryption/ Configuring SSL for a DB instance
Updated on 2024-11-06 GMT+08:00

Configuring SSL for a DB instance

Secure Socket Layer (SSL) is an encryption-based Internet security protocol for establishing an encrypted link between a server and a client. It provides privacy, authentication, and integrity to Internet communications. SSL:

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data, preventing it from being intercepted during transmission.
  • Ensures data integrity during transmission.

By default, SSL is enabled for new DB instances. Enabling SSL increases the network connection response time and CPU usage, and you are advised to evaluate the impact on service performance before enabling SSL.

You can use a client to connect to your DB instance through a non-SSL or SSL connection.

  • If SSL is enabled for your DB instance, you can connect to your DB instance using SSL, which is more secure.
  • If SSL is disabled, you can only connect to your DB instance using a non-SSL connection.

Enabling or disabling SSL will cause the instance to be rebooted immediately and temporarily unavailable. You are advised to perform this operation during off-peak hours.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and project.
  3. Click in the upper left corner of the page and choose Databases > GaussDB(for MySQL).
  4. On the Instances page, click the instance name to go to the Basic Information page.
  5. In the Instance Information area, click Expand to expand all instance information.
  6. In the Configuration area, click under SSL.
  7. In the displayed dialog box, click OK.
  8. Wait for some seconds and check that SSL has been enabled on the Basic Information page.

    To disable SSL, click . In the displayed dialog box, click OK.