Tair connection prerequisites, Redis connection prerequisites-Tair (Redis® OSS-Compatible)(Tair)-阿里云帮助中心

Establish network connectivity

Network connectivity between your client and the Tair (Redis-compatible) instance is required for a successful connection. Select the appropriate network type based on your client's location.

Client location	Recommended network type	Description
ECS or ACK	VPC	If your client and Tair (Redis-compatible) instance are in the same VPC, they can connect by default. You can then configure the IP whitelist. How do I check if they are in the same VPC? In the ECS or ACK console, click the instance ID to open the instance details page. View the VPC in the Network Information section. In the Tair or Redis console, click the instance ID to open the instance details page. View the VPC in the Basic Information section. Check if the VPCs match. If they are not in the same VPC: If they are in the same region, you can change the VPC of the ECS instance or change the VPC of the Tair instance to match. For cross-account or cross-region connections, use a VPC peering connection.
On-premises client	Internet	First, configure an IP whitelist, and then apply for a public endpoint.
self-managed IDC	Express Connect	Use Express Connect to establish a dedicated physical connection between your self-managed IDC and the Tair instance. This enables private network connectivity between your on-premises and cloud environments.

Note

For more information about network connections, see Plan network connectivity.

Configure an IP whitelist

Only IP addresses in the IP whitelist can access the instance.

Log on to the console and go to the Instances page. In the top navigation bar, select the region in which the instance that you want to manage resides. Then, find the instance and click the instance ID.
In the left-side navigation pane, click Whitelist Settings.
Add IP addresses to the whitelist based on your client's location.
ECS
1. In the default security group, click Modify.
2. For Method to Add IP Address, select Import ECS Internal IP Address. The private IP addresses of ECS instances in the same region appear.
  
  Hover over an IP address to view the ID and name of the corresponding ECS instance.
3. Select the required IP addresses and move them to the box on the right.
4. Click OK.
ACK
1. Next to Whitelist Setting, click the Security Groups tab.
2. Click Add Security Group. In the dialog box that appears, select the security group of your ACK cluster and move it to the box on the right.
  
  To find the ACK security group, go to Cluster Information > Basic Information > Network > Control Plane Security Group.
3. Click OK.
On-premises
1. To find your public IP address, run the following command on your client: curl ifconfig.me.
2. In the default security group, click Modify. Add your client's public IP address.
3. Click OK.
Note
If your client has a dynamic IP address, see How do I configure an IP whitelist for a dynamic IP address?

For more information about IP whitelists, see Configure an IP whitelist.

Note

If you connect to the instance over the Internet, configure the IP whitelist first. Then, apply for a public endpoint in the Connection Information section on the instance details page.

Next, use one of the following methods to connect to your instance:

FAQ

Dynamic IP whitelist

For ECS instances in an auto scaling group, see Automatically add ECS instances to or remove them from the IP whitelist of a Tair instance.
For a fixed range of IP addresses, you can add a block of IP addresses in CIDR notation. For example, 10.23.12.0/24 represents the IP address range from 10.23.12.0 to 10.23.12.255.
If your IP addresses change unpredictably, you can use a script to monitor IP changes and call the ModifySecurityIps API operation to update the IP whitelist.

Establish network connectivity

Configure an IP whitelist

ECS

ACK

On-premises

FAQ

Dynamic IP whitelist