By default, a newly created ApsaraDB for HBase cluster is inaccessible. To allow client access, add the client's IP address to the cluster's IP address whitelist, or associate the cluster with the Elastic Compute Service (ECS) security groups that your clients belong to.
Prerequisites
Before you begin, ensure that you have:
An ApsaraDB for HBase cluster
Choose a method
| Method | Best for |
|---|---|
| IP address whitelist | Allowing access from specific IP addresses or CIDR blocks |
| ECS security groups | Allowing access from multiple ECS instances without managing individual IP addresses |
Add an IP address whitelist
Log on to the ApsaraDB for HBase console.
In the top navigation bar, select the region where your cluster is deployed.
On the Clusters page, find the cluster and click its ID.
In the left-side navigation pane, click Access Control.
On the Whitelist Setting tab, click Modify Whitelist.
In the Modify Whitelist dialog box, enter the IP addresses or CIDR blocks to allow, then click OK.
Keep the following in mind when configuring the whitelist:
The default whitelist contains only
127.0.0.1, which blocks all external clients. Replace it with the IP addresses of your clients.Do not enter
0.0.0.0or0.0.0.0/0. These values allow access from all IP addresses and pose a high security risk.To access open source components over the internet, enter the public IP address of your client.
Add ECS security groups as whitelists
Associating security groups with your cluster allows all ECS instances in those groups to connect, without requiring you to manage individual IP addresses. For more information about security groups, see Overview.
The ECS instances in the specified security groups must have the same network type as the cluster. If the cluster is deployed in a virtual private cloud (VPC), the ECS instances must be in the same VPC.
Log on to the ApsaraDB for HBase console.
In the top navigation bar, select the region where your cluster is deployed.
On the Clusters page, find the cluster and click its ID.
In the left-side navigation pane, click Access Control.
On the Security Group tab, click Add Security Group.
In the Join Security Group dialog box, select the security groups to add, then click OK.