ApsaraDB for ClickHouse supports two types of endpoints: VPC endpoints and public endpoints. Use a VPC endpoint when your client and cluster are in the same virtual private cloud (VPC). If your client is outside the VPC, apply for a public endpoint to connect over the internet.
Public endpoints expose your cluster to the internet. Internet crawlers and scanners that look for public IPs can trigger unexpected traffic and costs. After applying for a public endpoint, restrict access by adding only trusted IP addresses to your whitelist.
Requesting a public IP address requires the Classic Load Balancer (CLB) service and incurs fees, so ensure that you have a sufficient account balance. For billing details, see Billing for dependent services.
Prerequisites
Before you begin, make sure you have:
An ApsaraDB for ClickHouse cluster
A sufficient account balance — applying for a public endpoint requires the Classic Load Balancer (CLB) service and incurs fees. For details, see Billing for dependent services.
Apply for a public endpoint
Log on to the ApsaraDB for ClickHouse console.
In the upper-left corner, select the region where your cluster is located.
On the Cluster List page, select the Instance List for your cluster type, then click your cluster ID.
On the Cluster Information page, under Network Information, click Request Public IP Address.
On the Cluster Information page, go to the Network Information section and click Request Public IP Address.
In the Apply for Public Endpoint dialog box, click OK.
Before connecting over the public endpoint, add your client IP address or IP address range to the cluster whitelist. See Configure a whitelist.
Release a public endpoint
Log on to the ApsaraDB for ClickHouse console.
In the upper-left corner, select the region where your cluster is located.
On the Cluster List page, select the Instance List for your cluster type, then click your cluster ID.
On the Cluster Information page, go to the Network Information section and click Release Public IP Address.
In the Release Public Endpoint dialog box, click OK.
After you release the public endpoint, connections from the internet to the cluster are no longer accepted.
What's next
Configure a whitelist — restrict which IP addresses can connect to your cluster over the public endpoint
Billing for dependent services — understand the CLB fees associated with public endpoints