All Products
Search

This Product

    ApsaraDB RDS:Request or release a public endpoint

    Document Center

    ApsaraDB RDS:Request or release a public endpoint

    Last Updated:Jun 02, 2026

    ApsaraDB RDS provides an internal endpoint by default. To access your instance over the Internet, request a public endpoint.

    Public endpoint management for other database engines:

    Internal and public endpoints

    Address Type

    Description

    Internal endpoint

    • Provided by default. Cannot be released. You can switch the network type.

    • If your application runs on an ECS instance in the same region and network type as your RDS instance, the instances connect over the internal network. No public endpoint is needed.

    • Internal access provides high security and optimal performance.

    Public endpoint

    • Must be manually requested. Can be released when no longer needed.

    • Request a public endpoint when internal access is unavailable:

      • The ECS and RDS instances are in different regions or use different network types.

      • A device outside Alibaba Cloud needs to access the RDS instance.

    Important

    • A public endpoint reduces instance security. Use with caution.

    • For faster data transfer and higher security, migrate your application to an ECS instance in the same region and network type as your RDS instance, then use the internal endpoint.

    Billing

    Public endpoints are free. Internet traffic (inbound and outbound) through the public endpoint is also free of charge.

    Precautions

    • If you release and re-request a public endpoint, the new endpoint differs from the previous one. Update your application configuration immediately.

    • If SSL encryption is enabled for the public endpoint, disable SSL before releasing the endpoint. Disabling SSL restarts the instance. Perform this during off-peak hours.

    Request or release a public endpoint

    1. Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.

    2. In the navigation pane on the left, click Database Connection.

      Note

      For Cluster Edition instances, you can also manage the public endpoint from the topology graph on the Basic Information page.

    3. Request or release the endpoint:

      • To request a public endpoint, click Apply for Public Endpoint.

      • To release a public endpoint, click Disable Public Endpoint.

    4. In the dialog box that appears, click OK.

      Warning

      Adding 0.0.0.0/0 to the whitelist poses a security risk. After testing, configure the whitelist again.

      To connect over the Internet, run the curl ipinfo.io/ip command to obtain your client's public IP address, then add the IP address to the RDS whitelist.

    FAQ

    What is the bandwidth limit? Is traffic billed?

    ApsaraDB RDS does not limit bandwidth. All traffic (internal and Internet, inbound and outbound) is free of charge.

    Can I set a fixed IP address for an endpoint?

    No. The IP address may change after a primary/secondary failover or configuration change. Use the endpoint instead of the IP address to minimize service disruption.

    Related operations