All Products
Search

This Product

    :Add the CIDR blocks of DTS servers to the security settings of on-premises databases

    Document Center

    :Add the CIDR blocks of DTS servers to the security settings of on-premises databases

    Last Updated:Sep 21, 2023

    If your self-managed databases are not deployed on Alibaba Cloud, they may accept connections only from specific IP addresses. In this case, you must configure the security settings of your self-managed databases to allow access from Data Transmission Service (DTS) servers. For example, if you deploy a firewall for a database, you must add the Classless Inter-Domain Routing (CIDR) blocks of DTS servers to the IP whitelist of the firewall.

    Usage notes

    • If the source or destination database instance is an Alibaba Cloud database instance, such as an ApsaraDB RDS for MySQL or ApsaraDB for MongoDB instance, DTS automatically adds the CIDR blocks of DTS servers to the whitelist of the database instance or ECS security group rules. If the source or destination database is a self-managed database that is hosted on Elastic Compute Service (ECS) instances, DTS automatically adds the CIDR blocks of DTS servers to ECS security group rules. You must make sure that you grant access on the self-managed database to ECS. If the source or destination database is a self-managed database on data centers or is from other cloud service providers, you must manually add the CIDR blocks of DTS servers to allow DTS to access the database.

    • If the source or destination database of the DTS instance is connected to Alibaba Cloud through Cloud Enterprise Network (CEN), Express Connect, VPN Gateway, or Smart Access Gateway, add all CIDR blocks and IP addresses of the CIDR blocks to add when an on-premises database is connected to Alibaba Cloud over CEN, Express Connect, VPN Gateway, Smart Access Gateway, or Database Gateway column for the corresponding region in the following table to the following location when you use DTS for the first time and receive DTS whitelist expansion notifications.

    • If the source or destination database of the DTS instance is connected to Alibaba Cloud through Public IP Address, add all CIDR blocks and IP addresses of the CIDR blocks to add when an on-premises database is connected to Alibaba Cloud over the Internet column for the corresponding region in the following table to the following location when you use DTS for the first time and receive DTS whitelist expansion notifications.

    • Make sure that the CIDR blocks and IP addresses have been added to the network environment of the corresponding region for the DTS instance. Otherwise, after a disaster recovery of the DTS task, new devices may not be able to connect to the instance, resulting in task delays or interruptions.

    • If the CIDR blocks of DTS servers are automatically or manually added to a whitelist of the database instance or ECS security group rules, security risks may arise. Therefore, before you use DTS to migrate data, you must understand the potential risks and take preventive measures, including but not limited to the following measures: enhance the security of your account and password, limit the ports that are exposed, authenticate API calls, regularly check the whitelist or ECS security group rules and forbid unauthorized CIDR blocks, and connect the database to DTS by using Express Connect, VPN Gateway, or Smart Access Gateway.

    • After your DTS task is completed or released, we recommend that you detect and remove the added CIDR blocks from the whitelist of the database instance or ECS security group rules.

    Data migration and change tracking

    • Data migration

      If the source and destination databases of a data migration task are of the self-managed database with a public IP address, self-managed database without a public IP address or port number (connected over Database Gateway), self-managed database connected over CEN, or self-managed database connected over Express Connect, VPN Gateway, or Smart Access Gateway database type, you must modify the database security settings. You must add the CIDR blocks of DTS servers that reside in the same region as the source or destination database to the security settings.

      For example, the source database is deployed in the China (Shenzhen) region and the destination database is deployed in the China (Hangzhou) region. In this case, you must add the CIDR blocks of DTS servers in the China (Hangzhou) region to the security settings of the source and destination databases.

    • Manage change tracking tasks

      If the database of a change tracking task is of the self-managed database with a public IP address, self-managed database without a public IP address or port number (connected over Database Gateway), or self-managed database connected over Express Connect, VPN Gateway, or Smart Access Gateway database type, you must modify the database security settings. You must add the CIDR blocks of DTS servers that reside in the same region as the database to the security settings.

    Note

    If your source or destination database is of the self-managed database with a public IP address database type, and the region of your self-managed database is not within the regions of DTS, we recommend that you add the IP address of the DTS server in the China (Hangzhou) region.

    Table 1. CIDR blocks of DTS servers
    Note

    • For more information about the region IDs, see Supported regions.

    • When an on-premises database is connected to Alibaba Cloud over CEN, Express Connect, VPN Gateway, Smart Access Gateway, or Database Gateway, the CIDR block added to the database security settings is a subnet range of the CIDR block of Alibaba Cloud 100.64.0.0/10.

    • If you do not update the whitelist of the self-managed database at the earliest opportunity when new DTS servers are added, DTS may fail to connect to the database. To resolve this issue, we recommend that you directly add 100.104.0.0/16 to the IP whitelist of the self-managed database that can be accessed over an internal network (such as the IP addresses or CIDR blocks of CEN).

    Region

    CIDR blocks to add when an on-premises database is connected to Alibaba Cloud over the Internet

    CIDR blocks to add when an on-premises database is connected to Alibaba Cloud over CEN, Express Connect, VPN Gateway, Smart Access Gateway, or Database Gateway

    China (Hangzhou)

    101.37.149.3,106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,112.124.239.48,112.124.239.49,112.124.239.50,112.124.239.51,112.124.239.52,112.124.239.53,112.124.239.54,112.124.239.55,112.124.239.56,112.124.239.57,112.124.239.58,112.124.6.175,114.55.36.104,116.62.171.194,118.31.243.0/24,118.31.38.161,120.55.12.36,120.55.60.183,120.55.60.232,121.199.28.129,121.40.155.35,121.41.104.73,121.41.50.170,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.96.76.20,47.96.95.82,47.97.106.64,47.97.116.109,47.97.118.150,47.97.119.148,47.97.125.64,47.97.7.33,47.97.98.27,47.98.101.12,47.98.125.188,47.98.39.64,47.98.52.255,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.52.0/24,100.104.61.128/26,100.104.244.64/26,100.104.216.192/26,100.104.85.0/26,100.104.221.128/26,100.104.2.0/26,100.104.251.192/26,100.104.159.64/26,100.104.216.128/26,100.104.148.192/26,100.104.239.64/26,100.104.114.0/26,100.104.0.192/26,100.104.13.192/26

    China (Shanghai)

    101.132.174.63,101.132.223.204,101.132.248.174,101.133.205.192,101.133.205.193,101.133.205.194,101.133.205.195,101.133.205.196,101.133.205.197,101.133.205.198,101.133.205.199,101.226.33.0/26,101.226.33.128/26,101.226.33.64/26,101.226.35.64/26,101.91.139.192/26,101.91.141.0/26,101.91.141.128/26,101.91.141.64/26,106.11.224.0/24,106.11.251.128/26,106.11.251.192/26,106.11.254.128/26,106.11.254.192/26,106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,106.14.105.118,106.14.177.89,106.14.178.118,106.14.4.132,106.15.248.89,106.15.250.190,106.15.75.203,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,112.65.93.0/26,112.65.93.128/26,112.65.93.64/26,116.128.219.0/26,116.128.219.128/26,116.128.219.64/26,117.185.224.0/24,117.185.232.128/26,117.185.232.192/26,117.185.235.0/26,117.185.235.64/26,118.31.243.0/24,139.196.143.11,139.196.209.21,139.196.44.156,139.196.47.137,139.196.48.218,139.196.49.138,139.196.50.106,139.196.51.72,139.196.52.31,139.196.6.124,139.196.92.27,139.224.19.130,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.197.128/26,140.205.197.192/26,140.205.198.0/26,140.205.198.64/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,140.206.221.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,210.51.60.64/26,47.100.137.82,47.100.160.244,47.100.3.196,47.101.109.0/24,47.101.166.207,47.101.175.218,47.101.177.224,47.101.31.25,47.101.61.42,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.103.166.128/26,47.103.166.192/26,47.103.166.64/26,47.103.170.0/26,47.103.170.128/26,47.103.170.192/26,47.103.171.0/26,47.103.171.64/26,47.103.194.109,47.103.197.53,47.103.23.116,59.82.32.0/24,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26,8.132.214.192/26,8.132.215.0/26,8.132.215.128/26,8.132.215.64/26

    100.104.205.0/24,100.104.226.128/26,100.104.149.64/26,100.104.241.128/26,100.104.177.128/26,100.104.203.192/26,100.104.113.0/26,100.104.187.0/26,100.104.17.0/26,100.104.33.192/26,100.104.3.192/26

    China (Qingdao)

    106.11.184.0/24,106.11.185.0/24,106.11.40.64/26,106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,115.28.200.55,115.28.216.250,118.190.133.13,118.190.133.15,118.190.133.30,118.190.157.247,118.190.207.194,118.190.207.25,118.31.243.0/24,120.27.53.203,120.27.72.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.146.128/26,203.119.146.192/26,203.119.147.0/24,203.119.148.0/24,203.119.149.0/24,203.119.150.0/24,203.119.151.0/24,203.119.159.192/26,203.119.182.192/26,203.119.183.0/24,203.119.184.0/24,203.119.185.0/24,203.119.186.0/24,203.119.187.0/24,203.119.188.0/24,203.119.189.0/24,203.119.190.0/24,203.119.191.0/26,203.119.191.128/26,203.119.191.64/26,203.119.240.0/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,39.98.96.0/24,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.104.105.196,47.104.19.209,47.104.97.251,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.72.0/24,100.104.35.192/26,100.104.12.0/26,100.104.111.0/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26

    China (Beijing)

    101.200.116.192/26,101.200.120.94,101.200.141.67,101.200.182.245,101.200.189.99,101.200.192.4,101.200.194.86,101.200.20.0/26,101.200.209.158,101.200.215.53,101.200.235.185,101.200.39.123,101.200.50.74,101.200.72.175,101.201.105.220,101.201.214.152,101.201.214.92,101.201.65.33,101.201.82.221,106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,111.13.119.128/26,111.13.119.192/26,111.13.22.64/26,111.13.246.192/26,111.206.225.128/26,111.206.225.64/26,112.126.111.128/26,112.126.111.192/26,112.126.112.0/26,112.126.112.64/26,114.250.54.0/26,114.250.54.64/26,114.250.62.0/24,118.31.243.0/24,123.56.128.236,123.56.182.66,123.56.186.180,123.56.244.9,123.56.43.201,123.57.136.105,123.57.166.231,123.57.204.36,123.57.205.132,123.57.206.190,123.57.238.231,123.57.5.10,123.57.65.60,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,182.92.0.71,182.92.132.123,182.92.137.0/24,182.92.157.129,182.92.17.128/26,182.92.17.192/26,182.92.196.155,182.92.32.128/26,182.92.32.192/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,39.105.161.255,39.105.58.165,39.106.90.43,39.107.223.0/24,39.107.7.0/26,39.107.7.64/26,39.156.175.0/24,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.93.10.168,47.93.21.67,47.93.21.70,47.93.22.174,47.93.236.163,47.93.24.154,47.94.167.117,47.94.2.56,47.94.210.30,47.94.212.10,47.94.240.86,47.94.246.43,47.94.47.65,47.94.94.233,47.95.241.173,49.7.152.0/24,49.7.153.0/24,59.110.155.242,59.110.37.222,59.110.38.253,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26,60.205.112.5,60.205.146.14,60.205.157.173,60.205.157.204,60.205.165.226,60.205.166.109,60.205.186.2,60.205.222.185,60.205.243.19,8.131.132.24,8.131.132.25,8.131.132.26,8.131.132.27,8.131.132.28,8.131.132.29,8.131.132.3,8.131.132.30,8.131.132.31,8.131.132.4,8.131.132.48,8.131.132.5,8.131.132.51,8.131.132.61

    100.104.11.64/26,100.104.128.192/26,100.104.143.0/26,100.104.183.0/24,100.104.200.64/26,100.104.201.0/26,100.104.213.64/26,100.104.227.192/26,100.104.232.128/26,100.104.236.128/26,100.104.247.64/26,100.104.29.0/26,100.104.84.128/26

    China (Zhangjiakou)

    106.11.184.0/24,106.11.185.0/24,106.11.40.64/26,106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.146.128/26,203.119.146.192/26,203.119.147.0/24,203.119.148.0/24,203.119.149.0/24,203.119.150.0/24,203.119.151.0/24,203.119.159.192/26,203.119.182.192/26,203.119.183.0/24,203.119.184.0/24,203.119.185.0/24,203.119.186.0/24,203.119.187.0/24,203.119.188.0/24,203.119.189.0/24,203.119.190.0/24,203.119.191.0/26,203.119.191.128/26,203.119.191.64/26,203.119.240.0/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,39.98.96.0/24,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.144.128/26,100.104.175.0/24,100.104.180.192/26,100.104.249.0/26,100.104.32.64/26,100.104.52.0/26,100.104.84.128/26

    China (Hohhot)

    39.104.29.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,39.104.78.173,39.104.79.122,39.104.86.0,39.104.62.152,39.104.72.87

    100.104.72.0/24,100.104.145.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.122.128/26,100.104.158.192/26

    China (Ulanqab)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,121.89.103.128/26,121.89.103.192/26,121.89.103.64/26,121.89.104.0/26,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,39.101.0.128/26,39.101.0.192/26,39.101.0.64/26,39.101.5.0/26,39.101.7.0/24,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,59.82.126.0/24,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26,8.130.121.252,8.130.122.110,8.130.48.34,8.130.69.168,8.130.69.173

    100.104.182.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26,100.104.205.192/26,100.104.152.128/26,100.104.199.192/26,100.104.120.0/26

    China (Shenzhen)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,112.74.44.248,118.31.243.0/24,120.24.177.221,120.77.195.128/26,120.77.195.192/26,120.77.195.64/26,120.77.61.108,120.78.179.12,120.79.68.184,120.79.71.173,120.79.72.217,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.106.37.166,47.106.63.0/24,47.112.83.192/26,47.112.84.0/26,47.112.84.128/26,47.112.84.64/26,47.112.86.0/26,47.113.183.128/26,47.113.183.192/26,47.113.76.192,47.113.76.193,47.113.76.194,47.113.76.195,47.113.76.196,47.113.76.197,47.113.76.198,47.113.76.199,47.115.161.93,47.120.88.0/26,47.120.88.64/26,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.75.64/26,100.104.235.192/26,100.104.205.0/24,100.104.41.64/26,100.104.171.128/26,100.104.161.192/26,100.104.172.192/26,100.104.168.0/26,100.104.160.128/26,100.104.179.128/26,100.104.98.192/26,100.104.168.128/26

    China (Heyuan)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.113.157.128/26,47.113.157.192/26,47.113.157.64/26,47.113.158.0/26,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.147.192/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26,100.104.48.128/26

    China (Guangzhou)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26,8.134.0.128/26,8.134.0.192/26,8.134.0.64/26,8.134.5.0/26,8.134.79.141,8.134.79.143

    100.104.132.64/26,100.104.240.128/26,100.104.122.128/26,100.104.233.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26

    China (Chengdu)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.108.45.128/26,47.108.45.192/26,47.108.47.0/26,47.108.47.64/26,47.109.5.31,47.109.5.32,47.109.5.33,47.109.5.34,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26,8.137.26.128/26,8.137.26.192/26,8.137.26.64/26,8.137.29.0/26

    100.104.76.192/26,100.104.145.64/26,100.104.235.192/26,100.104.127.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.149.128/26,100.104.177.0/26

    China (Hong Kong)

    106.11.73.128/26,106.11.73.192/26,106.11.76.0/26,106.11.76.64/26,110.75.130.128/26,110.75.130.192/26,110.75.230.0/24,110.75.235.0/24,110.76.0.0/24,110.76.11.0/24,110.76.2.0/24,110.76.8.0/26,110.76.8.64/26,110.76.9.0/24,118.31.243.0/24,140.205.108.0/26,140.205.108.128/26,140.205.108.64/26,140.205.196.0/24,140.205.197.0/26,140.205.41.192/26,140.205.41.64/26,140.205.47.0/24,140.205.80.64/26,203.119.159.192/26,203.209.225.128/26,203.209.225.192/26,203.209.247.128/26,203.209.247.192/26,47.102.181.128/26,47.102.181.192/26,47.102.234.0/26,47.102.234.64/26,47.243.0.32,47.243.0.33,47.243.0.34,47.243.0.35,47.244.92.128/26,47.244.92.192/26,47.52.111.182,47.52.166.98,47.52.23.184,47.52.25.202,47.56.45.0/24,47.89.12.225,47.89.39.119,47.90.24.0/26,47.90.24.64/26,47.90.37.175,47.90.38.29,47.91.155.181,47.91.228.249,59.82.46.128/26,59.82.46.192/26,59.82.46.64/26,59.82.47.0/26

    100.104.233.0/24,100.104.177.192/26,100.104.158.192/26,100.104.180.192/26,100.104.120.0/26,100.104.2.64/26,100.104.242.64/26,100.104.187.64/26

    Singapore

    47.88.235.0/24,47.88.139.0/24,161.117.146.128/26,161.117.146.192/26,161.117.164.0/26,161.117.164.64/26,161.117.234.42,47.241.209.7,47.241.217.237,10.88.51.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,161.117.172.0/24

    100.104.188.0/24,100.104.207.128/26,100.104.12.0/26,100.104.179.64/26,100.104.41.64/26,100.104.59.64/26,100.104.91.64/26,100.104.111.64/26,100.104.44.0/26,100.104.238.64/26

    Australia (Sydney)

    47.91.49.0/24,47.91.50.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24

    100.104.233.0/24,100.104.3.128/26,100.104.193.128/26,100.104.153.64/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26

    Malaysia (Kuala Lumpur)

    47.254.212.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.250.34.128/28

    100.104.5.0/24,100.104.36.0/26,100.104.234.192/26,100.104.76.192/26,100.104.69.0/26,100.104.87.192/26,100.104.158.192/26,100.104.250.0/26

    Indonesia (Jakarta)

    149.129.228.0/24,149.129.229.0/24,147.139.156.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,147.139.165.206,147.139.133.46,147.139.179.168,147.139.132.101,8.215.147.0/28

    100.104.175.0/24,100.104.35.192/26,100.104.235.192/26,100.104.12.0/26,100.104.111.0/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26

    Philippines (Manila)

    112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,147.139.156.0/24

    100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26

    Thailand (Bangkok)

    8.213.163.0/26,8.213.162.64/26,8.213.162.192/26,8.213.162.128/26

    100.104.150.192/26,100.104.75.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26

    India (Mumbai)

    149.129.164.0/24,147.139.21.0/24,147.139.23.0/24,149.129.165.192/26,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24

    100.104.8.0/24,100.104.127.0/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.69.0/26

    Japan (Tokyo)

    47.91.9.0/24,47.91.13.0/24,47.91.27.0/24,47.245.18.0/24,47.245.51.0/24,47.91.0.192/26,47.91.0.128/26,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.245.51.128/26,47.245.51.192/26,8.209.192.160/28

    100.104.112.0/24,100.104.117.192/26,100.104.12.0/26,100.104.166.64/26,100.104.179.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26

    US (Silicon Valley)

    198.11.174.0/24,198.11.175.0/24,47.89.244.175/32,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.88.1.17,47.88.6.196,47.88.10.217,47.88.15.174,47.88.52.0/24,47.88.54.0/24,47.89.250.0/24,47.88.61.0/24,47.88.19.0/24,47.88.98.0/26,47.88.98.64/26,47.88.98.128/26,47.88.98.192/26,118.31.243.0/24

    100.104.175.0/24,100.104.48.128/26,100.104.166.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26

    US (Virginia)

    47.89.170.0/24,47.88.98.0/24,47.250.29.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.253.64.0/28,118.31.243.0/24

    100.104.233.0/24,100.104.240.128/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.122.128/26,100.104.87.192/26,100.104.179.64/26

    Germany (Frankfurt)

    47.254.185.0/24,47.91.82.0/24,47.91.83.0/24,47.91.84.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.254.180.0/26,47.254.180.128/26,47.254.180.192/26,47.254.180.64/26,47.245.155.0/28

    100.104.5.0/24,100.104.193.128/26,100.104.161.64/26,100.104.89.128/26,100.104.177.0/26,100.104.224.0/26,100.104.92.128/26,100.104.62.64/26,100.104.216.192/26

    UK (London)

    8.208.17.0/24,8.208.72.0/24,47.91.82.0/24,47.91.83.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24,47.88.98.0/26,47.88.98.128/26,47.88.98.192/26,47.88.98.64/26

    100.104.133.64/26,100.104.207.128/26,100.104.87.192/26,100.104.145.64/26,100.104.235.192/26,100.104.75.64/26,100.104.132.64/26

    UAE (Dubai)

    47.91.102.0/24,47.91.103.0/24,112.124.140.0/24,120.55.129.0/24,47.102.181.0/24,47.102.234.0/24,47.101.109.0/24

    100.104.205.0/24,100.104.161.0/26,100.104.53.0/26,100.104.111.128/26,100.104.248.128/26

    South Korea (Seoul)

    149.129.13.0/26,149.129.13.64/26,149.129.14.128/26,149.129.14.192/26

    100.104.119.128/26,100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26

    SAU (Riyadh)

    8.213.0.128/26,8.213.0.192/26,8.213.5.0/26,8.213.5.64/26

    100.104.76.192/26,100.104.210.128/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26,100.104.145.64/26

    Data synchronization

    If the source and destination databases of a data synchronization task are of the self-managed database with a public IP address, self-managed database connected over CEN, or self-managed database connected over Express Connect, VPN Gateway, or Smart Access Gateway database type, you must modify the database security settings based on the following business requirements:

    • If you want to allow DTS to access the source database, you must modify the security settings of the source database. You must add the CIDR blocks of DTS servers that reside in the same regions as the source and destination databases to the security settings of the source database.

      For example, the source database is deployed in the China (Shenzhen) region and the destination database is deployed in the China (Hangzhou) region. In this case, you must add the CIDR blocks of DTS servers in both regions to the security settings of the source database.

    • If you want to allow DTS to access the destination database, you must modify the security settings of the destination database. You must add the CIDR blocks of DTS servers that reside in the same region as the destination database to the security settings of the destination database.

      For example, the source database is deployed in the China (Shenzhen) region and the destination database is deployed in the China (Hangzhou) region. In this case, you must add the CIDR blocks of DTS servers in the China (Hangzhou) region to the security settings of the destination database.

    Note

    • Data synchronization does not support databases of the self-managed database with a public IP address database type.

    • When an on-premises database is connected to Alibaba Cloud over CEN, Express Connect, VPN Gateway, Smart Access Gateway, or Database Gateway, the CIDR block added to the database security settings is a subnet range of the CIDR block of Alibaba Cloud 100.64.0.0/10.

    Table 2. CIDR blocks of DTS servers

    Region

    CIDR blocks to add when an on-premises database is connected to Alibaba Cloud over CEN, Express Connect, VPN Gateway, Smart Access Gateway, or Database Gateway

    China (Hangzhou)

    100.104.52.0/24,100.104.61.128/26,100.104.244.64/26,100.104.216.192/26,100.104.85.0/26,100.104.221.128/26,100.104.2.0/26,100.104.251.192/26,100.104.159.64/26,100.104.216.128/26,100.104.148.192/26,100.104.239.64/26,100.104.114.0/26,100.104.0.192/26,100.104.13.192/26

    China (Shanghai)

    100.104.205.0/24,100.104.226.128/26,100.104.149.64/26,100.104.241.128/26,100.104.177.128/26,100.104.203.192/26,100.104.113.0/26,100.104.187.0/26,100.104.17.0/26,100.104.33.192/26,100.104.3.192/26

    China (Qingdao)

    100.104.72.0/24,100.104.35.192/26,100.104.12.0/26,100.104.111.0/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26

    China (Beijing)

    100.104.11.64/26,100.104.128.192/26,100.104.143.0/26,100.104.183.0/24,100.104.200.64/26,100.104.201.0/26,100.104.213.64/26,100.104.227.192/26,100.104.232.128/26,100.104.236.128/26,100.104.247.64/26,100.104.29.0/26,100.104.84.128/26

    China (Zhangjiakou)

    100.104.144.128/26,100.104.175.0/24,100.104.180.192/26,100.104.249.0/26,100.104.32.64/26,100.104.52.0/26,100.104.84.128/26

    China (Hohhot)

    100.104.72.0/24,100.104.145.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26,100.104.122.128/26,100.104.158.192/26

    China (Ulanqab)

    100.104.182.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.78.128/26,100.104.205.192/26,100.104.152.128/26,100.104.199.192/26,100.104.120.0/26

    China (Shenzhen)

    100.104.75.64/26,100.104.235.192/26,100.104.205.0/24,100.104.41.64/26,100.104.171.128/26,100.104.161.192/26,100.104.172.192/26,100.104.168.0/26,100.104.160.128/26,100.104.179.128/26,100.104.98.192/26,100.104.168.128/26

    China (Heyuan)

    100.104.147.192/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26,100.104.48.128/26

    China (Guangzhou)

    100.104.132.64/26,100.104.240.128/26,100.104.122.128/26,100.104.233.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26

    China (Chengdu)

    100.104.76.192/26,100.104.145.64/26,100.104.235.192/26,100.104.127.0/26,100.104.166.64/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26,100.104.149.128/26,100.104.177.0/26

    China (Hong Kong)

    100.104.233.0/24,100.104.177.192/26,100.104.158.192/26,100.104.180.192/26,100.104.120.0/26,100.104.2.64/26,100.104.242.64/26,100.104.187.64/26

    Singapore

    100.104.188.0/24,100.104.207.128/26,100.104.12.0/26,100.104.179.64/26,100.104.41.64/26,100.104.59.64/26,100.104.91.64/26,100.104.111.64/26,100.104.44.0/26,100.104.238.64/26

    Australia (Sydney)

    100.104.233.0/24,100.104.3.128/26,100.104.193.128/26,100.104.153.64/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26

    Malaysia (Kuala Lumpur)

    100.104.5.0/24,100.104.36.0/26,100.104.234.192/26,100.104.76.192/26,100.104.69.0/26,100.104.87.192/26,100.104.158.192/26,100.104.250.0/26

    Indonesia (Jakarta)

    100.104.175.0/24,100.104.35.192/26,100.104.235.192/26,100.104.12.0/26,100.104.111.0/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26

    Philippines (Manila)

    100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.158.192/26,100.104.37.128/26,100.104.218.128/26,100.104.250.0/26

    Thailand (Bangkok)

    100.104.150.192/26,100.104.75.64/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26

    India (Mumbai)

    100.104.8.0/24,100.104.127.0/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.69.0/26

    Japan (Tokyo)

    100.104.112.0/24,100.104.117.192/26,100.104.12.0/26,100.104.166.64/26,100.104.179.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26

    US (Silicon Valley)

    100.104.175.0/24,100.104.48.128/26,100.104.166.64/26,100.104.108.128/26,100.104.100.128/26,100.104.136.192/26,100.104.16.64/26

    US (Virginia)

    100.104.233.0/24,100.104.240.128/26,100.104.132.64/26,100.104.177.192/26,100.104.12.0/26,100.104.111.0/26,100.104.122.128/26,100.104.87.192/26,100.104.179.64/26

    Germany (Frankfurt)

    100.104.5.0/24,100.104.193.128/26,100.104.161.64/26,100.104.89.128/26,100.104.177.0/26,100.104.224.0/26,100.104.92.128/26,100.104.62.64/26,100.104.216.192/26

    UK (London)

    100.104.133.64/26,100.104.207.128/26,100.104.87.192/26,100.104.145.64/26,100.104.235.192/26,100.104.75.64/26,100.104.132.64/26

    UAE (Dubai)

    100.104.205.0/24,100.104.161.0/26,100.104.53.0/26,100.104.111.128/26,100.104.248.128/26

    South Korea (Seoul)

    100.104.119.128/26,100.104.153.64/26,100.104.76.192/26,100.104.246.192/26,100.104.106.192/26,100.104.210.128/26

    SAU (Riyadh)

    100.104.76.192/26,100.104.210.128/26,100.104.48.128/26,100.104.69.0/26,100.104.87.192/26,100.104.145.64/26

    References