Connecting to a DB Instance from a Windows ECS
When your applications are deployed on an ECS that is in the same region and VPC as your RDS for SQL Server DB instance, you are advised to use a floating IP address to connect to the DB instance through the ECS.
You can connect to an instance through a Secure Socket Layer (SSL) connection or a non-SSL connection using SQL Server Management Studio. The SSL connection encrypts data and is more secure.
Non-SSL Connection
- Log in to the ECS or device that can access RDS.
- Start SQL Server Management Studio.
- Choose Connect > Database Engine. In the displayed dialog box, enter login information.
Figure 1 Connecting to the server
- Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.
- The IP address is the floating IP address in the Connection Information area on the Basic Information page of the DB instance.
- The port is the database port in the Connection Information area on the Basic Information page of the DB instance.
- Authentication: indicates the authentication mode. Select SQL Server Authentication.
- Login: indicates the RDS database username. The default administrator is rdsuser.
- Password: indicates the password of the RDS database username.
- Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.
- Click Connect to connect to the DB instance.
SSL Connection
- Download the SSL root certificate and then upload it.
- Log in to the management console.
- Click
in the upper left corner and select a region and a project. - Click Service List. Under Database, click Relational Database Service.
- In the DB Information area on the Basic Information page, click
next to the SSL field to download the root certificate or certificate bundle. - Import the root certificate to the Windows ECS. For details, see How Do I Import the SSL Certificate of an RDS Instance to a Windows or Linux Server?Note
- Replace the old certificate before it expires to improve system security.
- After you bind an EIP to a DB instance, you must reboot the instance for the SSL connection to take effect.
- Start SQL Server Management Studio.
- Choose Connect > Database Engine. In the displayed dialog box, enter login information.
Figure 2 Connecting to the server
- Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.
- The IP address is the floating IP address in the Connection Information area on the Basic Information page of the DB instance.
- The port is the database port in the Connection Information area on the Basic Information page of the DB instance.
- Authentication: indicates the authentication mode. Select SQL Server Authentication.
- Login: indicates the RDS database username. The default administrator is rdsuser.
- Password: indicates the password of the RDS database username.
- Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.
- Click Options. On the Connection Properties page, enter related parameters and select Encrypt connection to enable SSL encryption. (By default, Encrypt connection is not selected. You need to select it manually.)
Figure 3 Connection properties
- Click Connect to connect to the DB instance.
- Non-SSL Connection
- SSL Connection