You can change the network type of an ApsaraDB RDS for SQL Server instance based on your business requirements.
To provide more secure cloud network environments and better user experience, Alibaba Cloud no longer provides RDS instances of the classic network type from April 10, 2023. For more information, see [Announcement] The classic network type is no longer supported for new ApsaraDB RDS for SQL Server instances from April 10, 2023.
Network types
Classic network: RDS instances of the classic network type cannot be isolated by using network settings. You can block unauthorized access to the RDS instances of the classic network type only by configuring IP address whitelists or security groups.
Virtual private cloud (VPC): Each VPC is an isolated virtual network. VPCs are more secure than the classic network. We recommend that you select the VPC network type.
You can customize route tables, CIDR blocks, and gateways for a VPC. In addition, you can connect your data center to a VPC by using Express Connect circuits or VPNs. The data center and the VPC comprise a virtual data center. You can use the virtual data center to migrate your workloads to the cloud with no downtime.
You can select the classic or VPC network type and switch your RDS instance between these network types free of charge.
You can change the network type of an RDS instance from classic network to VPC. The change cannot be rolled back. However, you cannot change the network type of an RDS instance from VPC to classic network.
Limits
If your RDS instance runs SQL Server 2008 R2, you cannot change the network type from classic network to VPC.
If your RDS instance is a temporary RDS instance, you cannot change the network type from classic network to VPC. This is because temporary RDS instances support only the classic network type. For more information about how to log on to a temporary instance, see Log on to a temporary ApsaraDB RDS for SQL Server instance.
View the network type
- Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
In the left-side navigation pane, click Database Connection. On the page that appears, view the network type of the RDS instance.
Change the network type from classic network to VPC
- Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
In the left-side navigation pane, click Database Connection.
On the Instance Connection tab, click Switch to VPC.
In the Switch to VPC dialog box, select a VPC and a vSwitch and specify whether to retain the classic network endpoint.
Select a VPC. We recommend that you select the VPC where the Elastic Compute Service (ECS) instance that you want to connect resides. If the ECS instance and the RDS instance reside in different VPCs, these instances cannot communicate over an internal network unless you use Cloud Enterprise Network (CEN) or VPN Gateway to enable network communication between the VPCs of these instances. For more information, see Overview of Alibaba Cloud CEN or Establish IPsec-VPN connections between two VPCs.
Select a vSwitch. If no vSwitches are available in the selected VPC, create one in the same zone where the PolarDB instance is deployed. For more information, see Create a vSwitch.
Clear or select Reserve original classic endpoint.
Operation
Description
Clear Reserve original classic endpoint
The classic network endpoint is not retained and changes to a VPC endpoint.
When you change the network type from classic network to VPC, a transient connection that lasts approximately 30 seconds occurs and ECS instances that reside in the classic network are immediately disconnected from your RDS instance.
Select Reserve original classic endpoint
The classic network endpoint is retained, and a new VPC endpoint is generated. In this case, the RDS instance runs in hybrid access mode. For more information, see Configure the hybrid access solution for an ApsaraDB RDS for SQL Server instance. In hybrid access mode, classic network-type ECS instances and VPC-type ECS instances can connect to the RDS instance over an internal network.
When you change the network type from classic network to VPC, no transient connection occurs. The connection between each classic network-hosted ECS instance and the RDS instance remains available until the classic network endpoint expires.
NoteBefore the classic network endpoint expires, you must add the VPC endpoint to your application that runs on a VPC-type ECS instance. This allows ApsaraDB RDS to migrate your workloads to the selected VPC with no downtime. ApsaraDB RDS sends a text message to the mobile number that is bound to your Alibaba Cloud account every day within seven days before the classic network endpoint expires.
For more information, see Configure the hybrid access solution for an ApsaraDB RDS for SQL Server instance.
Add the private IP address of the required VPC-type ECS instance to an IP address whitelist of the VPC network type on the RDS instance. This way, the ECS instance can access the RDS instance over an internal network. If no IP address whitelists of the VPC network type are available, create one.
Add the VPC endpoint of the RDS instance to the required VPC-type ECS instance.
If you select Reserve original classic endpoint, add the VPC endpoint of your RDS instance to each required VPC-type ECS instance before the classic network endpoint expires.
If you clear Reserve original classic endpoint, the connection between each classic network-hosted ECS instance and the RDS instance over an internal network is immediately closed after the network type is changed. You must add the VPC endpoint of the RDS instance to your application that runs on the required VPC-type ECS instance.
NoteIf the RDS instance resides in a VPC and you want to connect a classic network-hosted ECS instance to the RDS instance over an internal network, you can use ClassicLink to establish a connection. Alternatively, you can migrate the ECS instance to the same VPC as the RDS instance. For more information, see Overview.
Change the VPC of an RDS instance
You can change the VPCs and vSwitches only for RDS instances that run SQL Server 2008 R2 with standard SSDs or enhanced SSDs (ESSDs). For more information, see Switch an ApsaraDB RDS for SQL Server instance to a different vSwitch.
If your RDS instance does not support direct changes in VPCs, perform the following steps: Purchase a new RDS instance that resides in the required VPC. Then, migrate the data of the original RDS instance to the new RDS instance. For more information, see Migrate data between ApsaraDB RDS for SQL Server instances.
Related operations
Operation | Description |
Changes the network type of an instance. |