Connecting to a DB Instance over a Private Network

Step 1: Buy an ECS

1. Log in to the management console and check whether there is an ECS available.
   • If there is a Linux ECS, go to 3.
   • If there is a Windows ECS, see Connecting to a DB Instance Through MySQL-Front.
   • If no ECS is available, go to 2.
   Figure 1 ECS
   
2. Buy an ECS and select Linux (for example, CentOS) as its OS.

   To download the mysql client to the ECS, bind an EIP to the ECS. The ECS must be in the same region, VPC, and security group as the DB instance for mutual communications.

   For details about how to purchase a Linux ECS, see Purchasing and Using a Linux ECS (New Edition) in Elastic Cloud Server Getting Started.

3. On the ECS Information page, view the region and VPC of the ECS.
   Figure 2 ECS information
   
4. On the Basic Information page of the DB instance, view the region and VPC of the DB instance.
5. Check whether the ECS and DB instance are in the same region and VPC.
   • If they are in the same region and VPC, go to Step 2: Test Connectivity and Install the mysql Client.
   • If they are in different regions, buy another instance. The ECS and DB instance in different regions cannot communicate with each other. To reduce network latency, deploy your DB instance in the region nearest to your workloads.
   • If they are in different VPCs, change the VPC of the ECS to that of the DB instance. For details, see Changing a VPC.

Step 2: Test Connectivity and Install the mysql Client

1. Log in to the ECS. For details, see Logging In to a Linux ECS Using VNC in the Elastic Cloud Server User Guide.
2. On the Instances page of the TaurusDB console, click the instance name to go to the Basic Information page.
3. In the Network Information area, obtain the private IP address and database port.
   Figure 3 Viewing the private IP address and database port
   
4. On the ECS, check whether the private IP address and database port of the DB instance can be connected.

   curl -kv Floating_IP_address:Port

   Example:

   curl -kv 192.168.6.144:3306

   • If yes, network connectivity is normal.
     Figure 4 Normal network connectivity
     
   • If no, check the security group rules.
     • If in the security group of the ECS, there is no outbound rule with Destination set to 0.0.0.0/0 and Protocol & Port set to All, add the private IP address and port of the DB instance to the outbound rules.
       Figure 5 ECS security group
       

     • If in the security group of the DB instance, there is no inbound rule with Source set to 0.0.0.0/0 and Protocol & Port set to All, add the private IP address and port of the ECS to the inbound rules. For details, see Configuring Security Group Rules.
       Figure 6 Security group of a DB instance
       

5. Import a MySQL client installation package to the ECS using Method 1 or Method 2 and install the client.

Step 3: Connect to the DB Instance Using a CLI

On the Instances page of the TaurusDB console, click the instance name to go to the Basic Information page. Under SSL, check whether SSL is enabled.

• If it is disabled, use a non-SSL connection.
• If it is enabled, use an SSL connection (recommended). SSL encrypts connections to the instance, making in-transit data more secure.

Other Methods for Connecting to a DB Instance

• Connecting to a DB Instance over a Public Network
• Connecting to a DB Instance Through MySQL-Front
• Connecting to a DB Instance Through JDBC
• Connecting to a DB Instance Through Python

FAQs