If you select public network as the connection type when you create a data source or data migration task with Huawei Cloud as the cloud vendor, you need to add the IP address of the data source to the allowlist of the MySQL database instance (including RDS MySQL and self-managed MySQL), the self-managed Oracle database instance, the self-managed OceanBase database instance, the Kafka instance (including cloud instance Kafka and self-managed Kafka), the PostgreSQL database instance (including RDS PostgreSQL and self-managed PostgreSQL), and the self-managed TiDB database instance. This ensures that the data source can access these instances.
Obtain the IP address to be added to the allowlist
Log in to the OceanBase Cloud console.
Access the Create Data Source page.
Here takes the procedure on the Create Data Source page as an example. You can also click Data Services > Migrations > Migrate Data, and obtain the IP address to be added to the allowlist from the Create Task page.
In the left-side navigation pane, click Data Services > Data Sources.
On the Data Sources page, click Create Data Source in the upper-right corner and select the data source type.
On the Create Data Source page, select Huawei Cloud for Cloud Vendor, Public IP for Connection Method, and the instance type as needed.
Copy the IP address displayed below the Connection Information text box.
Note
The region selected here must be the same as the region where the Huawei Cloud instance is located.
Add an IP address to the allowlist of an RDS for MySQL/PostgreSQL instance
If you need to modify the security group rules of the target instance, perform the following operations:
Access the details page of the security group associated with the RDS for MySQL or PostgreSQL instance.
Log in to the Huawei Cloud console and go to the Instances page of RDS.
In the upper-left corner, select the region where the target instance is located.
Click the name of the target instance to go to its Basic Information page.
In the left-side navigation pane, click Connectivity & Security.
In the Security Group Rules section, click the name of the security group whose rules are to be modified.
On the details page of the security group, click the Inbound Rules tab.
Click Add Rule.
In the Add Inbound Rule dialog box, configure the parameters.
ParameterDescriptionPriority Value range: 1 to 100. Default value: 1, indicating the highest priority. Action Select Allow. Type The IP address type. Select IPv4. Protocol & Port Enter the custom TCP port 3306 for an RDS MySQL instance. Enter the custom TCP port 5432 for an RDS PostgreSQL instance. Source Enter the IP address copied on the page for creating a data source or data migration task. Description The description of the rule to be added. Click OK.
If you need to modify the allowlist of a security group, perform the following steps:
Log in to the Huawei Cloud console.
In the left-side navigation pane, select Access Control > Security Groups.
Click Configure Rules in the upper-right corner of the page that appears after you select the target security group.
On the Inbound Rules tab, click Add Rule.
In the Add Inbound Rule dialog box, configure the parameters.
ParameterDescriptionPriority Optional value is 1 to 100. Default value is 1, which indicates the highest priority. Action Select Allow. Type The type of the IP address, for example, IPv4. Protocol & Port Enter the custom TCP port 3306 for an RDS MySQL instance. Enter the custom TCP port 5432 for an RDS PostgreSQL instance. Source Enter the IP address copied on the page for creating a data source or data migration task. Description The description of the rule to be added. Click OK.
Add an IP address to the allowlist of a cloud Kafka instance
Go to the security group page associated with the Kafka instance.
Log in to the Kafka instance page of the distributed message service Kafka edition.
In the upper-left corner of the page, select the region where the target instance is located.
Click the name of the target instance to go to the Basic Information page.
In the Networking section, click the name of the security group associated with the instance.
On the details page of the security group, click Inbound Rules.
Click Add Rule.
In the Add Inbound Rule dialog box, configure the parameters.
ParameterDescriptionPriority The value can be 1 to 100. The default value is 1, which indicates the highest priority. Action Select Allow. Type The type of the IP address. Select IPv4. Protocol & Port Enter the custom TCP port 9092. Source Enter the IP address copied from the page for creating a data source or data migration task. Description The description of the added rule. Click OK.
Add an IP address to the allowlist of a self-managed MySQL/Oracle/OceanBase/Kafka/PostgreSQL/TiDB instance
Log in to the Huawei Cloud console and go to the Elastic Cloud Server page of Cloud Server Console.
Click the name of the cloud server to go to its details page. Then, click the Security Groups tab.
On the Security Groups tab, click Manage Rule next to the target security group.
On the Inbound Rules tab, click Add Rule.
In the Add Inbound Rule dialog box, configure the parameters.
ParameterDescriptionPriority Value range: 1 to 100. Default value: 1, indicating the highest priority. Action Select Allow. Type The IP address type. Select IPv4. Protocol & Port Select TCP. Enter the port number 3306 for a self-managed MySQL, TiDB, or OceanBase Database instance. Enter the port number 1521 for a self-managed Oracle instance. Enter the port number 9092 for a self-managed Kafka instance. Enter the port number 5432 for a self-managed PostgreSQL instance. Source Enter the IP address copied on the page for creating a data source or data migration task. Description The description of the rule to be added. Click OK.