ApsaraDB for SelectDB blocks all incoming connections by default. To allow your application servers, workstations, or other clients to connect, add their IP addresses or Classless Inter-Domain Routing (CIDR) blocks to an instance whitelist.
Usage notes
-
The default whitelist group (
default) cannot be deleted. It initially contains only127.0.0.1. You can modify or remove IP addresses within it, but the group itself is permanent. -
An instance supports up to 200 IP addresses and CIDR blocks across all whitelist groups combined.
-
A single whitelist group supports up to 50 IP addresses and CIDR blocks.
-
Changes take about one minute to propagate. If a connection attempt fails immediately after an update, wait one minute and retry before further troubleshooting.
-
Configuring a whitelist does not affect the normal operation of an ApsaraDB for SelectDB instance.
-
After you configure a whitelist, IP addresses in the whitelist can also access related APIs for the instance. For more information, see Open API Overview.
Do not add 0.0.0.0/0 unless absolutely necessary. Adding this entry allows all IP addresses to access the instance, which creates a high security risk and can lead to unauthorized access. Use this setting with caution and remove it as soon as it is no longer needed.
Impact on instances
Configuring a whitelist does not affect the normal operation of the ApsaraDB for SelectDB instance.
Procedure
Log in to the Alibaba Cloud SelectDB console.
In the upper-left corner of the page, select the region where your instance is located.
On the Instance List page, click the target Instance ID.
On the Instance Details page, click Data Security in the left navigation bar.
On the whitelist group page, click Modify in the Actions column of the default group.
NoteYou can also click Create Whitelist Group. In the Create Whitelist Group panel, set Group Name and IP Whitelist.
In the Modify Whitelist Group panel, add an IP address or an IP address block.
NoteThe IP address of a machine within a corporate office network often changes. The displayed IP address may not be the correct one. You can use a professional IP lookup service to determine the originating IP address. For example, see whatsmyip.
Click OK.
After you add the IP addresses or IP address blocks, you can view them on the whitelist group page.