Add an AWS instance to the allowlist

If you select the public network connection method when creating a data source or a data migration task with AWS as the cloud provider, you must first add the displayed data source IP address to the allowlist of the MySQL database instance (including Aurora MySQL, RDS MySQL, and self-managed MySQL), Oracle database instance (including RDS Oracle and self-managed Oracle), self-managed OceanBase database instance, Kafka instance (including cloud Kafka and self-managed Kafka), PostgreSQL database instance (including RDS PostgreSQL, Aurora PostgreSQL, and self-managed PostgreSQL), and self-managed TiDB database instance. This ensures the data source can access the target instances.

Obtain the IP address to add to the allowlist

1. Log in to the OceanBase Cloud console.

2. Go to the Create Data Source dialog box.

   This topic uses the operations on the Create Data Source page as an example. You can also click Data Services > Data Migration > Data Migration to obtain the IP address to add to the allowlist on the Create Migration Task page.

   1. In the left-side navigation pane, click Data Services > Data Source.

   2. On the Data Source page, click Create Data Source in the upper-right corner and select the type of data source you want to create.

3. In the Create Data Source dialog box, set Cloud Vendor to AWS, Connection Type to Public IP, and select the appropriate instance type based on your needs.

4. Copy the IP address displayed below the Connection Information text box.

   Note

   The region selected here must match the region where the AWS instance is located.

   

Add an Aurora MySQL/PostgreSQL or RDS MySQL/Oracle/PostgreSQL instance to the allowlist

1. Go to the Security Groups page.

   1. Log in to the Databases page of the Amazon RDS console.

   2. On the Database page, click the Database Identifier of the target database instance.

      

   3. On the Connections and Security tab, click VPC Security Group in the Security section.

      • VPC Security Group for Aurora MySQL/PostgreSQL instances

        

      • VPC Security Group for RDS MySQL/Oracle/PostgreSQL instances

        

2. On the Security Groups page, click Security group ID to go to the details page of the target security group.

   

3. In the Inbound Rules section, click Edit Inbound Rule in the upper-right corner.

   

4. On the Edit Inbound Rules page, click Add Rule and configure the parameters.

   

   Parameter	Description
   Type	Rule type. Select Custom TCP.
   Protocol	Protocol type. Default is TCP.
   Port Range	Enter the corresponding port number.
   Source	Enter the IP address copied from the Create Data Source or Data Migration Task page.
   Description (Optional)	Describe the added rule.

5. Click Save Rule.

Add an allowlist for cloud instance Kafka

1. Go to the Security Groups page.

   1. Log in to the Amazon MSK console.

   2. On the Cluster page, click the name of the target cluster to go to its details page.

   3. Click the Attribute tab. In the Network Settings section, click the ID of the applied security group to jump to the VPC Control Panel > Security Groups page.

2. In the Inbound Rules section of the security group details page, click Edit Inbound Rules in the upper-right corner.

3. On the Edit Inbound Rules page, click Add Rule and configure the parameters.

   Parameter	Description
   Type	Rule type. Select Custom TCP.
   Protocol	Protocol type. Default is TCP.
   Port Range	Enter port 9092.
   Source	Enter the IP address copied from the Create Data Source or Data Migration Task page.
   Description (Optional)	Describe the added rule.

4. Click Save Rule.

Add a self-managed MySQL/Oracle/OceanBase/Kafka/PostgreSQL/TiDB instance to an allowlist

1. Go to the Security Groups page.

   1. Log in to the Instances page of the EC2 console.

   2. On the Instance page, click the Instance ID of your self-managed database instance.

      

   3. On the details page of the target instance, click the name of the Security Groups under the Security tab to go to the security group details page.

      

2. In the Inbound Rules section of the security group details page, click Edit Inbound Rule in the upper-right corner.

   

3. On the Edit Inbound Rule page, click Add Rule and configure the parameters.

   

   Parameter	Description
   Type	Rule type. Select Custom TCP.
   Protocol	Protocol type. Default is TCP.
   Port Range	Enter the corresponding port numbers.
   Source	Enter the IP address copied from the Create Data Source or Data Migration Task page.
   Description (Optional)	Describe the rule.

4. Click Save Rule.