Overview

Connecting to an RDS for MySQL Instance Through the MySQL CLI Client

For details, see Connecting to a DB Instance over a Private or Public Network Using a CLI.

In Linux, you need to install the mysql client on the ECS and connect to the instance through the MySQL CLI over a private or public network.

• A floating IP address is provided by default.

  When your applications are deployed on an ECS that is in the same region and VPC as the RDS for MySQL instance, you are advised to use a floating IP address to connect to the instance from the ECS.

• If you cannot access your RDS for MySQL instance through a floating IP address, bind an EIP to the instance and connect to the instance from the ECS through the EIP.

Connecting to an RDS for MySQL Instance Through the GUI

EIP for read/write

In Windows, you can use any common database client to connect to an RDS for MySQL instance.

Connecting to an RDS for MySQL Instance Through JDBC

Floating IP address for read/write or EIP for read/write

RDS for MySQL is compatible with the community ecosystem and does not provide driver services. You can select a community driver version as required.

If you are connecting to an instance through JDBC, an SSL certificate is optional, but using an SSL certificate can improve the security of your data. SSL is disabled by default for RDS for MySQL instances. You can enable it by referring to Configuring an SSL Connection. SSL encrypts connections to databases but it increases the connection response time and CPU usage. Therefore, you are advised not to enable SSL.

Private network

Floating IP address

• If the ECS and RDS instance are in the same security group, they can communicate with each other over a private network by default. No security group rules need to be configured.
• If they are in different security groups, configure security group rules for them, separately.
  • RDS instance: Configure an inbound rule for the security group with which the RDS instance is associated. For details, see Configuring Security Group Rules.
  • ECS: The default security group rule allows all outgoing data packets. In this case, you do not need to configure a security group rule for the ECS. If not all outbound traffic is allowed in the security group, you need to configure an outbound rule for the ECS.

• Secure and high-performance
• Recommended

Public network

You need to buy an EIP.

To access a DB instance from resources outside the security group that the DB instance is associated with, you need to configure an inbound rule for the security group. For details, see Configuring Security Group Rules.

• Less secure
• To achieve a higher transmission rate and security level, you are advised to migrate your applications to an ECS that is in the same VPC as your RDS instance and use a floating IP address to access the DB instance.