Add an IP address to the allowlist of a database instance in Alibaba Cloud

If you select public network as the connection type when you create a data source or data migration task with Alibaba Cloud as the cloud vendor, you need to add the IP address of the data source to the allowlist of the MySQL database instance (including RDS MySQL, PolarDB MySQL, and self-managed MySQL), the self-managed Oracle database instance, the self-managed OceanBase database instance, and the Kafka instance (including cloud instance Kafka and self-managed Kafka). This ensures that the data source can be accessed.

Obtain the IP address to be added to the allowlist

1. Log in to the OceanBase Cloud console.

2. Access the Create Data Source page.

   Here takes the procedure on the Create Data Source page as an example. You can also click Data Services > Migrations > Migrate Data, and obtain the IP address to be added to the allowlist from the Create Task page.

   1. In the left-side navigation pane, click Data Services > Data Sources.

   2. On the Data Sources page, click Create Data Source in the upper-right corner and select the data source type.

3. On the Create Data Source page, select Alibaba Cloud for Cloud Vendor, Public IP for Connection Method, and the instance type as needed.

4. Copy the IP address displayed below the Connection Information text box.

   Note

   The region selected here must be the same as the region where the Alibaba Cloud instance is located.

Add an IP address to the allowlist of an RDS for MySQL instance

1. Log in to the ApsaraDB RDS console and go to the Instances page.

2. In the upper part of the page, select the region where the target instance is located.

3. Click the name of the target instance to go to its Basic Information page.

4. In the left-side navigation pane, click Whitelist and SecGroup.

5. On the Whitelist Settings tab, click Create Whitelist.

   To add the IP address to an existing allowlist, click Modify next to the target allowlist.

   

6. In the Create Whitelist dialog box, specify Whitelist Name and IP Addresses.

   To modify an existing allowlist, you need to specify IP Addresses only. Enter the IP address copied on the page for creating a data source or data migration task.

7. Click OK.

Add an IP address to the allowlist of a PolarDB for MySQL instance

1. Log in to the PolarDB console and go to the Clusters page.

2. In the upper part of the page, select the region where the target cluster is located.

3. Click the name of the target cluster to go to its Basic Information page.

4. In the left-side navigation pane, choose Settings and Management > Cluster Whitelists.

5. In the IP Whitelists section, click Add IP Whitelist.

   To add the IP address to an existing allowlist, click Configure next to the target allowlist.

   

6. In the Add IP Whitelist dialog box, specify Whitelist Name and IP Addresses in Whitelist.

   To modify an existing allowlist, you need to specify only IP Addresses in Whitelist in the Modify Whitelist dialog box. Enter the IP address copied on the page for creating a data source or data migration task.

7. Click OK.

Add an IP address to the allowlist of a cloud Kafka instance

1. Log in to the Kafka console and go to the Instances page.

2. In the upper part of the page, select the region where the target instance is located.

3. Click the name of the target instance to go to the Instance Details page.

4. In the left-side navigation pane, click Whitelist Management.

5. On the Whitelist tab, click Create Whitelist.

   If you want to add an IP address to an existing allowlist, click Modify next to the target allowlist.

   

6. In the Create Whitelist dialog box, specify the allowlist name and the IP address.

   If you want to modify an allowlist, specify only the IP address. This IP address is the IP address that you copied on the page for creating a data source or data migration task.

7. After you create an allowlist, click OK.

   If you want to modify an allowlist, click Modify.

Add an IP address to the allowlist of a self-managed MySQL/Oracle/OceanBase/Kafka instance

1. Log in to the ECS console and go to the Security Groups page.

2. In the upper part of the page, select the region where the target security group is located.

3. Click the name of the target security group to go to its Security Group Details page.

4. On the Inbound tab in the Access Rule section, click Quick Add.

   You can also click Add Rule to manually add information such as Port Range and Authorization Object.

   

5. In the Quick Add dialog box, enter the IP address copied on the page for creating a data source or data migration task in Authorization Object and specify Port Range.

6. Click OK.