When you use Apache Arrow Flink Connector or Apache Arrow Flight SQL, the client must connect directly to the BE/FE node ports of an ApsaraDB for SelectDB instance within the VPC. You can enable or disable cluster direct connection to control network access to the required BE and FE node ports within the VPC where the instance resides.
Precautions
-
Cluster direct connection takes effect at the VPC level. Enabling it for one instance also enables it for all other ApsaraDB for SelectDB instances in the same VPC.
-
After cluster direct connection is enabled, ports such as the Thrift RPC port can be accessed without authentication within the VPC. To access the instance, you must also configure a whitelist access policy.
Enable cluster direct connection
-
Log on to the ApsaraDB for SelectDB console.
-
In the upper-left corner of the page, select the region where the instance resides.
-
On the Instances page, click the Instance ID of the target instance to go to the Basic Information page.
-
In the Network Information section of the Basic Information page, find VPC ID and click Activate cluster direct connection to the right of it.
-
In the Activate cluster direct connection dialog box, read the description carefully and click OK after you confirm.
After cluster direct connection is enabled, the link to the right of VPC ID changes to Disable cluster direct connection. You must then add the IP address of the client to a whitelist group of the instance before you can connect to the BE or FE node ports. For more information, see Configure a whitelist.
Disable cluster direct connection
If you no longer need cluster direct connection, you can disable it. After it is disabled, machines within the VPC where the instance resides cannot use the full functionality of Arrow Flight or Connector components.
-
Log on to the ApsaraDB for SelectDB console.
-
In the upper-left corner of the page, select the region where the instance resides.
-
On the Instances page, click the Instance ID of the target instance to go to the Basic Information page.
-
In the Network Information section, click Disable cluster direct connection to the right of VPC ID.
-
In the Disable cluster direct connection dialog box, confirm the message and click OK.