After you create an ApsaraDB for HBase cluster, you must configure a whitelist or add an ECS security group to allow external devices to access the cluster.
Background
For security purposes, newly created clusters are inaccessible by default.
Whitelist methods
Method | Description |
Method 1: Configure a whitelist | Manually add the IP addresses of clients to the ApsaraDB for HBase cluster's whitelist to grant access. |
Method 2: Use an ECS security group | A security group is a virtual firewall for its associated ECS instances. To grant access to multiple ECS instances, bind their security group to the ApsaraDB for HBase cluster. This method simplifies authorization by eliminating the need to add IP addresses manually. |
Method 1: Configure a whitelist
Log on to the ApsaraDB for HBase console.
In the top-left corner, select the region where your cluster is deployed.
On the Clusters page, find the target cluster and click the cluster ID.
In the left-side navigation pane, click Access Control.
On the Whitelist Setting tab, click Modify Whitelist.
In the Modify Whitelist dialog box, enter the IP addresses or CIDR blocks to add to the whitelist, and then click OK.
ImportantIf a whitelist is empty, it contains 127.0.0.1 by default, which blocks access from all external devices.
The IP address 0.0.0.0 and the CIDR block 0.0.0.0/0 allow access from any IP address and pose high security risks to your database. For this reason, you cannot add 0.0.0.0 or 0.0.0.0/0 to a whitelist.
If you use a public IP address to view open-source components, add your public IP address to the whitelist.
Method 2: Use an ECS security group
This method requires the ECS instances and the ApsaraDB for HBase cluster to be in the same network. For example, if they use a virtual private cloud (VPC), both must be in the same VPC.
Log on to the ApsaraDB for HBase console.
In the top-left corner, select the region where your cluster is deployed.
On the Clusters page, find the target cluster and click the cluster ID.
In the left-side navigation pane, click Access Control.
On the Security Group tab, click Add Security Group.
In the OK dialog box, select the security group to add and click OK.