Connecting to a Replica Set Instance Using Mongo Shell (Public Network)

Choose the corresponding upload method based on whether the ECS runs Linux or Windows.

• In Linux, run the following command:
  scp<IDENTITY_FILE><REMOTE_USER>@<REMOTE_ADDRESS>:<REMOTE_DIR>

  

  • IDENTITY_FILE indicates the directory where the root certificate is stored. Ensure that the directory's access permission is set to 600.
  • REMOTE_USER is the ECS OS user.
  • REMOTE_ADDRESS is the ECS address.
  • REMOTE_DIR is the directory on the ECS where the root certificate is uploaded.
• In Windows, upload the root certificate using a remote connection tool.

• Method 1: Using a public network connection address

  Command format:

  ./mongo "<public-network-connection-address>" --ssl --sslCAFile<FILE_PATH> --sslAllowInvalidHostnames

  The parameters are explained as follows:

  • Public Network Connection Address: On the Instances page, click the instance to switch to the Basic Information page. In the navigation pane on the left, choose Connections. Click the Public Connection tab and obtain the public network connection address.
    Figure 3 Obtaining the public network connection address
    

    The format of the public network connection address is provided below. It uses a fixed account and authentication database. Therefore, the username rwuser and the authentication database admin cannot be changed.

    mongodb://rwuser:<password>@192.168.xx.xx:8635/test?authSource=admin

    Configure the parameters in the address as described in the table below.

    Table 1 Parameter description

    Parameter	Description
    rwuser	Account name, that is, the database username.
    <password>	Password for the database account. Replace it with the actual password. If the password contains at signs (@), exclamation marks (!), dollar signs ($), percent signs (%), or plus signs (+), replace them with hexadecimal URL codes (ASCII) %40, %21, %24, %25, and %2B respectively. For example, if the password is ****@%***!$+, the corresponding URL code is ****%40%25***%21%24%2B.
    192.168.xx.xx:8635	The EIP and port bound to the node of the replica set instance.
    authSource=admin	The authentication database of user rwuser must be admin. authSource=admin is fixed in the command.

  • FILE_PATH is the path where the root certificate is stored.
  • --sslAllowInvalidHostnames: The replica set certificate is generated using the internal management IP address to ensure that internal communication does not occupy resources such as the user IP address and bandwidth. You must add --sslAllowInvalidHostnames when connecting to a replica set instance over a public network using SSL.

  Example command:

  ./mongo "mongodb://rwuser:<password>@192.168.xx.xx:8635/test?authSource=admin" --ssl --sslCAFile /tmp/ca.crt --sslAllowInvalidHostnames

  

  • If you connect to an instance over a public HA address, enclose the connection string in double quotation marks.
  • To improve read and write performance and prevent errors from being reported when data is written from the client after a primary/secondary switchover, connect to an instance in HA mode. For details, see Connecting to a Replica Set Instance for Read and Write Separation and High Availability.
• Method 2: Using an EIP

  Command format:

  ./mongo --host <DB_HOST> --port <DB_PORT> -u <DB_USER> -p --authenticationDatabaseadmin --ssl --sslCAFile<FILE_PATH> --sslAllowInvalidHostnames

  The parameters are explained as follows:

  Table 2 Parameters

  Parameter	Description
  DB_HOST	EIP bound to the instance node to be connected. On the Instances page, click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the displayed page, click the Public Connection tab and find the EIP of the target node. Figure 4 Obtaining the EIP
  DB_PORT	Database port. The default port number is 8635. You can click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the Public Connection tab page, obtain the port number next to the Database Port field in the Basic Information area. Figure 5 Obtaining the port number
  DB_USER	Database account. The default value is rwuser.
  FILE_PATH	Path where the root certificate is stored.
  --sslAllowInvalidHostnames	To ensure that internal communication within the replica set does not consume user IP addresses or bandwidth resources, the replica set instance's certificate is generated using the internal management IP address. You must add --sslAllowInvalidHostnames when connecting to a replica set instance over a public network using SSL.

  Enter the database account password when the following prompt appears:

  Enter password:

  Example command:

  ./mongo --host 192.168.xx.xx --port 8635 -u rwuser -p --authenticationDatabase admin --ssl --sslCAFile /tmp/ca.crt --sslAllowInvalidHostnames

• Method 3: Using the EIP of a public gateway

  Command format:

  ./mongo --host <DB_HOST> --port <DB_PORT> -u <DB_USER> -p --authenticationDatabaseadmin --ssl --sslCAFile<FILE_PATH> --sslAllowInvalidHostnames

  The parameters are explained as follows:

  Table 3 Parameters

  Parameter	Description
  DB_HOST	EIP of the public gateway bound to the instance node to be connected. On the Instances page, click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the displayed page, click the Public Connection tab and find the EIP of the public gateway bound to the target node. Figure 6 Obtaining the EIP of the public gateway
  DB_PORT	Port of the public gateway. Figure 7 Obtaining the port of the public gateway
  DB_USER	Database account. The default value is rwuser.
  FILE_PATH	Path where the root certificate is stored.
  --sslAllowInvalidHostnames	To ensure that internal communication within the replica set does not consume user IP addresses or bandwidth resources, the replica set instance's certificate is generated using the internal management IP address. You must add --sslAllowInvalidHostnames when connecting to a replica set instance over a public network using SSL.

  Enter the database account password when the following prompt appears:

  Enter password:

  Example command:

  ./mongo --host 192.168.xx.xx --port 8635 -u rwuser -p --authenticationDatabase admin --ssl --sslCAFile /tmp/ca.crt --sslAllowInvalidHostnames

• The primary node of the replica set is connected.

  replica:PRIMARY>

• The secondary node of the replica set is connected.

  replica:SECONDARY>

• Method 1: Using a public network connection address

  Command format:

  ./mongo "<Public network address>"

  Public Network Connection Address: On the Instances page, click the instance to switch to the Basic Information page. In the navigation pane on the left, choose Connections. Click the Public Connection tab and obtain the public network connection address.

  Figure 8 Obtaining the public network connection address
  

  The format of the public network connection address is provided below. It uses a fixed account and authentication database. Therefore, the username rwuser and the authentication database admin cannot be changed.

  mongodb://rwuser:<password>@192.168.xx.xx:8635/test?authSource=admin

  Configure the parameters in the address as described in the table below.

  Table 4 Parameter description

  Parameter	Description
  rwuser	Account name, that is, the database username.
  <password>	Password for the database account. Replace it with the actual password. If the password contains at signs (@), exclamation marks (!), dollar signs ($), percent signs (%), or plus signs (+), replace them with hexadecimal URL codes (ASCII) %40, %21, %24, %25, and %2B respectively. For example, if the password is ****@%***!$+, the corresponding URL code is ****%40%25***%21%24%2B.
  192.168.xx.xx:8635	The EIP and port bound to the node of the replica set instance.
  authSource=admin	The authentication database of user rwuser must be admin. authSource=admin is fixed in the command.

  Example command:

  ./mongo "mongodb://rwuser:<password>@192.168.xx.xx:8635/test?authSource=admin"

  

  • If you connect to an instance over a public HA address, enclose the connection string in double quotation marks.
  • To improve read and write performance and prevent errors from being reported when data is written from the client after a primary/secondary switchover, connect to an instance in HA mode. For details, see Connecting to a Replica Set Instance for Read and Write Separation and High Availability.
• Method 2: Using an EIP

  Command format:

  ./mongo --host <DB_HOST> --port <DB_PORT> -u <DB_USER> -p --authenticationDatabase admin

  The parameters are explained as follows:

  Table 5 Parameters

  Parameter	Description
  DB_HOST	EIP bound to the instance node to be connected. On the Instances page, click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the displayed page, click the Public Connection tab and find the EIP of the target node. Figure 9 Obtaining the EIP
  DB_PORT	Database port. The default port number is 8635. You can click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the Public Connection tab page, obtain the port number next to the Database Port field in the Basic Information area. Figure 10 Obtaining the port number
  DB_USER	Database account. The default value is rwuser.

  Enter the database account password when the following prompt appears:

  Enter password:

  Example command:

  ./mongo --host 192.168.xx.xx --port 8635 -u rwuser -p --authenticationDatabase admin

• Method 3: Using the EIP of a public gateway

  Command format:

  ./mongo --host <DB_HOST> --port <DB_PORT> -u <DB_USER> -p --authenticationDatabase admin

  The parameters are explained as follows:

  Table 6 Parameters

  Parameter	Description
  DB_HOST	EIP of the public gateway bound to the instance node to be connected. On the Instances page, click the instance name to go to the Basic Information page. In the navigation pane, choose Connections. On the displayed page, click the Public Connection tab and find the EIP of the public gateway bound to the target node. Figure 11 Obtaining the EIP of the public gateway
  DB_PORT	Port of the public gateway. Figure 12 Obtaining the port of the public gateway
  DB_USER	Database account. The default value is rwuser.

  Enter the database account password when the following prompt appears:

  Enter password:

  Example command:

  ./mongo --host 192.168.xx.xx --port 8635 -u rwuser -p --authenticationDatabase admin

• The primary node of the replica set is connected.

  replica:PRIMARY>

• The secondary node of the replica set is connected.

  replica:SECONDARY>