Updated on 2025-06-24 GMT+08:00

Configuring an SSL Connection

Secure Sockets Layer (SSL) is an encryption-based Internet security protocol for establishing secure links between a server and a client. It provides authenticated Internet connections to ensure the privacy and integrity of online communications. SSL:

  • Authenticates users and servers, ensuring that data is sent to the correct clients and servers.
  • Encrypts data to prevent data theft.
  • Ensures data integrity during transmission.

By default, SSL is disabled for new RDS for MariaDB instances. If your client has no SSL compatibility issues, you can enable SSL by referring to Enabling SSL. Enabling SSL will increase the network connection response time and CPU resource consumption. Before enabling it, evaluate any potential impacts on service performance.

You can connect to a DB instance through a client using an SSL or non-SSL connection.

  • If SSL is disabled (default), use a non-SSL connection.
  • If SSL is enabled, use an SSL connection. SSL encrypts connections to the instance, making in-transit data more secure.

Precautions

Enabling or disabling SSL will cause DB instances to reboot and interrupt connections. Exercise caution when performing this operation.

Enabling SSL

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and a project.
  3. Click in the upper left corner of the page and choose Databases > Relational Database Service.
  4. On the Instances page, click the DB instance name.
  5. On the Overview page, find SSL and click Enable.
  6. In the displayed dialog box, click OK. Wait for some seconds and check that SSL has been enabled on the Overview page.

Disabling SSL

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and a project.
  3. Click in the upper left corner of the page and choose Databases > Relational Database Service.
  4. On the Instances page, click the DB instance name.
  5. On the Overview page, find SSL and click Disable.
  6. In the displayed dialog box, click OK. Wait for some seconds and check that SSL has been disabled on the Overview page.