doc-exports/docs/gaussdb_mysql/umn/gaussdb_02_0009.html

Step 3: Connect to a DB Instance Over a Private Network

GaussDB(for MySQL) is fully compatible with the MySQL protocol. You can connect to a DB instance through either a common connection or an SSL connection for enhanced security. SSL connections are encrypted.

Prerequisites

1. Log in to the ECS.

   • For details on how to create and log in to an ECS, see "Creating an ECS" and "Logging In an ECS" in the Elastic Cloud Server User Guide.

   • To connect to a DB instance through an ECS, you must ensure that:
     • The ECS and DB instance are in the same VPC.
     • The ECS must be allowed by the security group to access DB instances.
       • If the security group with which the target DB instance associated is the default security group, you do not need to configure security group rules.
       • If the security group with which the target DB instance associated is not the default security group, check whether the security group rules allow the ECS to connect to the DB instance. For details, see Step 2: Configure Security Group Rules.

         If the security group rules allow the access from the ECS, the ECS can connect to the DB instance.

         If the security group rules do not allow the access from the ECS, you need to add a security group rule. The ECS must be allowed by the security group to access DB instances.

2. Use a database client to connect to the target DB instance.

   You can use a database client to connect to the DB instance in the Linux or Windows OS.

   • In the Linux OS, install the MySQL client on the ECS or other device that can access the DB instance. It is recommended that you download a MySQL client running a version later than that of the DB instance.

     For details about how to obtain and install the MySQL client, see How Can I Install the MySQL Client?

   • In the Windows OS, you can use any common database client to connect to the DB instance in a similar way.

     The database client MySQL-Front is used as an example in Using MySQL-Front to Connect to a DB Instance.

Using MySQL-Front to Connect to a DB Instance

1. Start MySQL-Front.
2. In the displayed dialog box, click New.
   Figure 1 Connection management
   

3. Enter the information of the DB instance to be connected and click Ok, as shown in Figure 2.
   Figure 2 Adding an account
   

   Table 1 Parameter description

   Parameter	Description
   Name	Database connection task name. If you do not set this parameter, it will be the same as that configured for Host by default.
   Host	Private IP address for write of the target DB instance. To view the private address of the target DB instance, perform the following steps: Log in to the GaussDB(for MySQL) console. Select the region in which the DB instance is located. Click the target DB instance to go to the Basic Information page. In the Network Information area, view the private IP address for write.
   Port	Private network port of the DB instance.
   User	Name of the user who accesses the DB instance. The default user is root.
   Password	Password of the DB instance account.

4. In the displayed window, select the connection that you have created and click Open. If the connection information is correct, the DB instance is successfully connected.
   Figure 3 Opening a session
   

SSL Connection

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click Service List. Under Databases, click GaussDB(for MySQL).
4. In the DB Instance Information area on the Basic Information page, click in the SSL field to download the root certificate or certificate bundle.
5. Import the root certificate to the Linux OS on the ECS.

   For details, see How Can I Import the Root Certificate to a Windows or Linux OS?

6. Connect to a DB instance. The Linux OS is assumed in this example.

   mysql -h <hostName> -P <port> -u <userName> -p --ssl-ca=<caName>

   Table 2 Parameter description

   Parameter	Description
   <hostName>	Private IP address for write. To obtain this parameter, go to the Basic Information page of the DB instance and view the private IP address for write in the Network Information area.
   <port>	Database port. By default, the value is 3306. To obtain this parameter, go to the Basic Information page of the DB instance and view the database port in the Network Information area.
   <userName>	Username of the GaussDB(for MySQL) administrator account. The default username is root.
   <caName>	SSL certificate file name, which should be stored in the same directory where the command is executed.

   For example, to connect to a DB instance through an SSL connection as user root, run the following command:

   mysql -h 172.16.0.31 -P 3306 -u root -p --ssl-ca=ca.pem

   Enter the password of the database account as prompted:

   Enter password:

Parent topic: Connecting to a DB instance Over a Private Network