Configuring Cross-CIDR Access

Precautions

• Only replica set instances support this function.
• During the configuration of cross-CIDR access, services are running properly without interruption or intermittent disconnection.
• If the client and replica set instance are in different VPCs and CIDR blocks, configure a VPC peering connection by referring to VPC Peering Connection in Virtual Private Cloud User Guide.

Procedure

1. Log in to the management console.
2. Click in the upper left corner and select a region and a project.
3. Click Service List. Under Database, click Document Database Service to go to the DDS console.
4. On the Instances page, click the instance name.
5. In the navigation pane on the left, choose Connections.
6. On the Private Connection tab, click Enable to the right of Cross-CIDR Access.
   Note

   Up to 9 CIDR blocks can be configured, and each of them can overlap but they cannot be the same. That is, the source CIDR blocks can overlap but cannot be the same. The CIDR blocks cannot start with 127. The allowed IP mask ranges from 8 to 32.

7. View the change results. After cross-CIDR access is enabled, Enabled is displayed to the right of Cross-CIDR Access.

   If you need to change the client CIDR block, click Change to the right of Cross-CIDR Access.