All Products
Search

This Product

    AnalyticDB:Whitelist

    Document Center

    AnalyticDB:Whitelist

    Last Updated:Jun 16, 2026

    By default, AnalyticDB for MySQL blocks access from all IP addresses. You must configure a whitelist for your AnalyticDB for MySQL cluster before external devices can connect to it.

    Precautions

    • The default whitelist contains only 127.0.0.1, which blocks all external access. Add IP addresses or CIDR ranges to allow access. For example, add 10.10.10.0/24 to allow all addresses in the 10.10.10.X range. Separate multiple entries with commas (,). Do not add spaces before or after a comma.

    • Do not enter 0.0.0.0 or X.X.X.X/0 in the whitelist. If your public IP address changes frequently and you need to allow access from all public IP addresses, submit a ticket for a risk assessment before proceeding.

      Warning

      Allowing access from all public IP addresses means any device on the internet can connect to your cluster. This poses a significant security risk. Proceed with caution.

    • Whitelists are a key security feature. Review and maintain them regularly.

    • Configuring a whitelist does not affect cluster operations. Changes take effect in about one minute.

    Configure a whitelist for Enterprise, Basic, or Lakehouse Edition

    1. Log on to the AnalyticDB for MySQL console. In the upper-left corner of the console, select a region. In the left-side navigation pane, click Clusters. Find the cluster that you want to manage and click the cluster ID.

    2. In the left-side navigation pane, click Cluster Management > Cluster Information.

    3. On the Cluster Information page, in the Data Security - Whitelist Settings section, find the default whitelist group and click Modify.

      Note

      Alternatively, click Create Whitelist to create a custom whitelist group.

    4. In the Edit Whitelist dialog box, delete the default entry 127.0.0.1, enter the IP addresses or IP address ranges to allow, and then click OK.

      Note

      If you need to add your application's client outbound IP address to the whitelist, first identify the IP address. For more information, see Connection.

    Configure a whitelist for Data Warehouse Edition

    1. Log on to the AnalyticDB for MySQL console. In the upper-left corner of the console, select a region. In the left-side navigation pane, click Clusters. Find the cluster that you want to manage and click the cluster ID.

    2. In the left-side navigation pane, click Data Security.

    3. On the Whitelist Settings page, find the default whitelist group and click Modify.

      Note

      Alternatively, click Create Whitelist to create a custom whitelist group.

    4. In the Edit Whitelist dialog box, delete the default entry 127.0.0.1, enter the IP addresses or IP address ranges to allow, and then click OK.

      Note

      If you need to add your application's client outbound IP address to the whitelist, first identify the IP address. For more information, see Connection.