By default, all IP addresses are blocked from accessing your ApsaraDB for SelectDB instance. Before you connect to an instance, add the required IP addresses or CIDR blocks to the instance's IP address whitelist.
Usage notes
Only IP addresses in an IP address whitelist can access your instance. We recommend that you review and maintain your whitelists regularly.
The default whitelist group (default) cannot be deleted. You can only modify or remove IP addresses within this group. By default, this group contains only the IP address
127.0.0.1.Whitelist limits:
A single instance supports a maximum of 200 IP addresses and CIDR blocks across all whitelist groups.
A single whitelist group can contain a maximum of 50 IP addresses and CIDR blocks.
Changes to an IP address whitelist, such as adding, modifying, or deleting entries, take about one minute to take effect.
Adding the CIDR block
0.0.0.0/0to an IP address whitelist allows access from any IP address. This poses a high security risk and may lead to unauthorized access. Proceed with caution.Once an IP address is added to an IP address whitelist, it is granted access to the related APIs of the ApsaraDB for SelectDB instance. To learn more about these APIs, see OPENAPI OVERVIEW.
Impact on instances
Configuring an IP address whitelist does not affect the normal operation of your ApsaraDB for SelectDB instance.
Procedure
Log on to the ApsaraDB for SelectDB console.
In the upper-left corner, select the region of your instance.
On the Instances page, find the target instance and click its Instance ID.
In the navigation pane on the left of the Instance Details page, click Data Security.
On the whitelist group page, find the group named default and click Modify in the Actions column.
NoteAlternatively, click Create Whitelist. In the Create Whitelist panel, enter a Whitelist Name and add entries to the Whitelist field.
In the Modify Whitelist panel, add IP addresses or CIDR blocks.
NoteAn office network's public IP address can change frequently. The IP address you see may not be the actual public IP. Use an IP lookup service, such as whatsmyip, to confirm your public IP address.
Click OK.
Once saved, the new entries appear on the whitelist group page.
Next steps
To connect to your instance, see Instance connection.
To migrate data, see the following topics:
To query external data sources, see Data lakehouse.