forked from laiweijian4/doc-exports
Wang , Deng Ke
519944c837
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Wang , Deng Ke <wangdengke2@huawei.com> Co-committed-by: Wang , Deng Ke <wangdengke2@huawei.com>
23 lines
2.8 KiB
HTML
23 lines
2.8 KiB
HTML
<a name="dds_01_0008"></a><a name="dds_01_0008"></a>
|
|
|
|
<h1 class="topictitle1">High Security</h1>
|
|
<div id="body1523157563922"><div class="section" id="dds_01_0008__section157471650114110"><h4 class="sectiontitle">Network Isolation</h4><p id="dds_01_0008__p3308128144112">DDS uses Virtual Private Clouds (VPCs) and network security groups to isolate your DB instances. VPCs allow you to configure IP address ranges that are allowed <span class="keyword" id="dds_01_0008__keyword11226140173518">access to DDS</span>. You can run your DB instances in a VPC to improve security. To further enhance database security, you can configure subnets and security groups to control access to DB instances.</p>
|
|
</div>
|
|
<div class="section" id="dds_01_0008__section36087416422"><h4 class="sectiontitle">Access Control</h4><p id="dds_01_0008__p18308482418">VPC security groups can have rules that govern both inbound and outbound traffic of DB instances.</p>
|
|
</div>
|
|
<div class="section" id="dds_01_0008__section05340203433"><h4 class="sectiontitle">Transmission Encryption</h4><p id="dds_01_0008__p830810894115">DDS uses Secure Sockets Layer (SSL) to encrypt transmitted data. You can download a certificate authority (CA) from the DDS console and upload it for authentication when connecting to a database.</p>
|
|
</div>
|
|
<div class="section" id="dds_01_0008__section13931102311470"><h4 class="sectiontitle">Security Protection</h4><p id="dds_01_0008__p43613116165432">DDS provides a multi-layer network protection against various malicious attacks. The protection system consists of VPCs, subnets, security groups, DDoS protection, and SSL.</p>
|
|
<ul id="dds_01_0008__ul32942050165536"><li id="dds_01_0008__li58325462165536">VPC is used to isolate tenants and control access to databases.</li><li id="dds_01_0008__li18619715165536">The SSL connection ensures data security and integrity.</li><li id="dds_01_0008__li31046077165536">Security group rules restrict traffic to specific IP addresses and ports, securing connections between DDS and other services.</li></ul>
|
|
</div>
|
|
<div class="section" id="dds_01_0008__section1305495014142"><h4 class="sectiontitle">Performance Monitoring</h4><p id="dds_01_0008__p3638310511648">DDS monitors instance performance, reducing O&M activities by as much as 60%. It provides real-time monitoring information about CPU utilization, disk usage, IOPS, and number of active connections, allowing you to check instance status at any time.</p>
|
|
<p id="dds_01_0008__p53627552103843">In asynchronous disk scenarios, DDS provides excellent plugin performance and process memory databases. It also provides the secondary index function to meet dynamic query requirements.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="dds_01_0006.html">Product Advantages</a></div>
|
|
</div>
|
|
</div>
|
|
|