How to manage public endpoints and when to use internal or public endpoints-AnalyticDB(AnalyticDB)-阿里云帮助中心

AnalyticDB for PostgreSQL supports two types of endpoints: internal and public. An internal endpoint is provided by default for access to an AnalyticDB for PostgreSQL instance from within your network. If your application's ECS instance is in a different region or uses a different network type than your AnalyticDB for PostgreSQL instance, you must apply for a public endpoint to access the instance.

Use cases

Scenario	Description
Use an internal endpoint only	Your application runs on an ECS instance in the same region and network type as the AnalyticDB for PostgreSQL instance.
Use a public endpoint only	Your application runs on an ECS instance in a different region from the AnalyticDB for PostgreSQL instance. Your application runs on a system outside Alibaba Cloud.
Use both an internal endpoint and a public endpoint	This scenario applies when application modules are deployed on different ECS instances. Some ECS instances are in the same region and have the same network type as the AnalyticDB for PostgreSQL instance, while other ECS instances are in a different region from the AnalyticDB for PostgreSQL instance. Some of your application's modules run on ECS instances in the same region and network type as your AnalyticDB for PostgreSQL instance, while other modules run on a system outside Alibaba Cloud.

Notes

Before you access your instance, you must add the client IP address or CIDR block to a whitelist. For more information, see Configure an IP address whitelist.
Using a public endpoint reduces instance security. Use it with caution. For faster data transfer and stronger security, migrate your application to an ECS instance in the same region as your AnalyticDB for PostgreSQL instance.

Procedure

Log on to the AnalyticDB for PostgreSQL console.
In the upper-left corner of the console, select a region.
Find the instance that you want to manage and click the instance ID.
In the left-side navigation pane, click Database Connection.
To the right of Public Endpoint, click Apply for Public Endpoint or Release Public Endpoint.

API reference

API	Description
AllocateInstancePublicConnection	Allocates a public endpoint for an instance.
ReleaseInstancePublicConnection	Releases the public endpoint of an instance.