Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ TaurusDB/ TaurusDB Instance EIP Check
Updated on 2025-08-25 GMT+08:00
View PDF
Share

TaurusDB Instance EIP Check

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

gaussdb-mysql-instance-no-public-ip-check

Identifier

TaurusDB Instance EIP Check

Description

If a TaurusDB instance has an EIP associated, this instance is non-compliant.

Tag

taurusdb

Trigger Type

Configuration change

Filter Type

gaussdbformysql.instance

Rule Parameters

None

Application Scenarios

TaurusDB instances can be connected to over a private network, over a public network, or using Data Admin Service (DAS) or JDBC. For details, see Connection Methods.

You are advised to connect to a TaurusDB instance over a private network. Databases with EIPs can be accessed via the public network, which may increase the risk of attacks such as malicious scanning or attacks through exposed ports. In terms of performance, connecting to a database over the public network may increase the latency. The intranet usually has higher bandwidth and lower latency. For details, see Security Best Practices.

Solution

Unbind EIPs from TaurusDB instances. For details, see Binding or Unbinding an EIP.

Rule Logic

  • If a TaurusDB instance has an EIP bound, this instance is non-compliant.
  • If a TaurusDB instance does not have an EIP bound, this instance is compliant.
Parent topic: TaurusDB