If you select the public network connection method when creating a data source or a data migration task for AWS as the cloud vendor, you must first add the data source IP address displayed on the page to the allowlist of the MySQL database instance (including Aurora MySQL, RDS MySQL, and self-managed MySQL), Oracle database instance (including RDS Oracle and self-managed Oracle), self-managed OceanBase database instance, Kafka instance (including cloud Kafka and self-managed Kafka), PostgreSQL database instance (including RDS PostgreSQL, Aurora PostgreSQL, and self-managed PostgreSQL), and self-managed TiDB database instance. This ensures the data source can access the target instances.
Obtain the IP address to add to the allowlist
Log in to the OceanBase Cloud console.
Go to the Create Data Source dialog box.
This topic uses the operation on the Create Data Source page as an example. You can also click Data Services > Data Migration > Data Migration to obtain the IP address to add to the allowlist on the Create Migration Task page.
In the left-side navigation pane, click Data Services > Data Source.
On the Data Source page, click Create Data Source in the upper-right corner and select the type of data source you want to create based on your actual situation.
In the Create Data Source dialog box, set Cloud Vendor to AWS, Connection Type to Public IP, and select the corresponding instance type based on your requirements.
Copy the IP address displayed below the Connection Information text box.
Note
The region you select here must match the region where the AWS instance is located.
Add an instance of Aurora MySQL/PostgreSQL, RDS MySQL/Oracle/PostgreSQL to the allowlist
Go to the Security Groups page.
Log in to the Databases page of the Amazon RDS console.
On the Database page, click the Database Identifier of the target database instance.
On the Connections and Security tab, click VPC Security Group in the Security section.
VPC Security Group for Aurora MySQL/PostgreSQL instances
VPC Security Group for RDS MySQL/Oracle/PostgreSQL instances
On the Security Groups page, click Security group ID to go to the details page of the target security group.
In the Inbound Rules section, click Edit Inbound Rule in the upper-right corner.
On the Edit Inbound Rule page, click Add Rule and configure the parameters.
ParameterDescriptionType Rule type. Select Custom TCP. Protocol The protocol type. The default value is TCP. Port Range Enter the corresponding port number. Source Enter the IP address copied from the Create Data Source or Data Migration Task page. Description (Optional) Provide a description for the rule. Click Save Rule.
Add an allowlist for a cloud instance Kafka
Go to the Security Groups page.
Log in to the Amazon MSK console.
On the Cluster page, click the name of the target cluster to go to its details page.
Click the Attribute tab. In the Network Settings section, click the ID of the applied security group to navigate to the VPC Control Panel > Security Groups page.
In the Inbound Rules section of the security group details page, click Edit Inbound Rule in the upper-right corner.
On the Edit Inbound Rule page, click Add Rule and configure the parameters.
ParameterDescriptionType The rule type. Select Custom TCP. Protocol The protocol type. The default value is TCP. Port Range Enter port 9092. Source Enter the IP address copied from the Create Data Source or Data Migration Task page. Description (Optional) Provide a description for the rule. Click Save Rule.
Add an allowlist for a self-managed MySQL/Oracle/OceanBase/Kafka/PostgreSQL/TiDB/RocketMQ instance
Go to the Security Groups page.
Log in to the EC2 console and go to the Instances page.
On the Instance page, click the Instance ID of your self-managed database instance.
On the details page of the target instance, click the name of the Security Groups under the Security tab to go to the security group details page.
In the Inbound Rules section of the security group details page, click Edit Inbound Rule in the upper-right corner.
On the Edit Inbound Rule page, click Add Rule and configure the parameters.
ParameterDescriptionType The rule type. Select Custom TCP. Protocol The protocol type. The default value is TCP. Port Range Enter the corresponding port number. Source Enter the IP address copied from the Create Data Source or Data Migration Task page. Description (Optional) Provide a description for the added rule. Click Save Rule.