Connecting to a DB Instance Through a Public Network

You can connect to a DB instance through a non-SSL connection or an SSL connection. The SSL connection encrypts data and is more secure.

Preparations

  1. Install the Microsoft SQL Server client.

    For details, see section How Can I Install SQL Server Management Studio?

  2. Bind an EIP to the target DB instance and configure security group rules.

    1. Bind an EIP to the target DB instance.

      For details about how to bind an EIP, see section Binding an EIP.

    2. Obtain the IP address of the local device.

    3. Configure security group rules.

      Add the IP address obtained in 2.b and the instance port to the inbound rule of the security group.

      For details about how to configure a security group rule, see section Configuring Security Group Rules.

    4. Run the ping command to connect the EIP that has been bound to the target DB instance in 2.a to check that the local device can connect to the EIP.

Non-SSL Connection

  1. Start SQL Server Management Studio.

  2. Choose Connect > Database Engine. In the displayed dialog box, enter login information.

    **Figure 1** Connecting to the server

    Figure 1 Connecting to the server

    • Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.

      • The IP address is the EIP that has been bound to the DB instance.

      • The port is the database port in the Connection Information area on the Basic Information page of the DB instance.

    • Authentication: indicates the authentication mode. Select SQL Server Authentication.

    • Login: indicates the RDS database username. The default administrator is rdsuser.

    • Password: indicates the password of the RDS database username.

  3. Click Connect to connect to the DB instance.

    Note

    If the connection fails, ensure that preparations have been correctly made in Preparations and try again.

SSL Connection

  1. Download the SSL root certificate and then upload it.

    1. In the DB Information area on the Basic Information page, click image1 in the SSL field to download the root certificate or certificate bundle.

    2. Upload the root certificate to the ECS to be connected to the DB instance.

    3. Import the root certificate to the Windows OS on the ECS. For details, see How Can I Import the Root Certificate to a Windows or Linux OS?

      Note

      • Replace the old certificate before it expires to improve system security.

      • After you bind an EIP to a DB instance, you must reboot the instance for the SSL connection to take effect.

  2. Start SQL Server Management Studio.

  3. Choose Connect > Database Engine. In the displayed dialog box, enter login information.

    **Figure 2** Connecting to the server

    Figure 2 Connecting to the server

    • Server name: indicates the IP address and port of the DB instance. Use a comma (,) to separate them. For example: x.x.x.x,8080.

      • The IP address is the EIP that has been bound to the DB instance.

      • The port is the database port in the Connection Information area on the Basic Information page of the DB instance.

    • Authentication: indicates the authentication mode. Select SQL Server Authentication.

    • Login: indicates the RDS database username. The default administrator is rdsuser.

    • Password: indicates the password of the RDS database username.

  4. On the Connection Properties page, enter related parameters and select Encrypt connection to enable SSL encryption. (By default, Encrypt connection is not selected. You need to select it manually.)

    **Figure 3** Connection properties

    Figure 3 Connection properties

  5. Click Connect to connect to the DB instance.

    Note

    If the connection fails, ensure that preparations have been correctly made in Preparations and try again.

last updated: 2024-04-25 00:03