This topic introduces the common errors and provides answers to some commonly asked questions about the IP address whitelist settings of an ApsaraDB RDS for MySQL instance.
Common errors
| Error | Description | Solution |
|---|---|---|
| No IP address whitelists are configured. This means that your RDS instance has only one default IP address whitelist, and this whitelist contains only the default IP address 127.0.0.1. | The 127.0.0.1 IP address indicates that no devices can access your RDS instance. | Add the IP addresses of the devices that require access to your RDS to an IP address whitelist. |
| The 0.0.0.0 IP address is added to an IP address whitelist during a connectivity test. | The IP address format is invalid. | Add the 0.0.0.0/0 Classless Inter-Domain Routing (CIDR) block to the IP address whitelist. Important The 0.0.0.0/0 CIDR block indicates that all IP addresses are granted access to your RDS instance. We recommend that you add this CIDR block only for a connectivity test. When you run online workloads, do not add this CIDR block to an IP address whitelist. |
| The public IP addresses in the configured IP address whitelist are inaccessible. |
| For more information, see Why am I unable to connect to my ApsaraDB RDS for MySQL or ApsaraDB RDS for MariaDB instance from a local server over the Internet? |
| The IP addresses of the devices that require access to your RDS instance are added to an enhanced IP address whitelist, and the network type of this whitelist differs from the network types of the devices. | In enhanced whitelist mode, ApsaraDB RDS distinguishes between the classic network and virtual private networks (VPCs). | Add the IP addresses to an IP address whitelist whose network type is the same as the network types of the devices. For example, if an IP address is added to an IP address whitelist of the VPC network type, you can connect to your RDS instance from the IP address only over a VPC. |
FAQ
- Can I configure both IP address whitelists and security groups for my RDS instance?
Yes, you can configure both IP address whitelists and security groups for your RDS instance. All the IP addresses in the configured IP address whitelists and all the Elastic Compute Service (ECS) instances in the configured security groups are granted access to your RDS instance.
- After I configure an IP address whitelist for my RDS instance, does the IP address whitelist immediately take effect?
After you configure an IP address whitelist for your RDS instance, the IP address whitelist requires about 1 minute to take effect.
- What are the IP address whitelists labeled ali_dms_group and hdm_security_ips?
When you connect to your RDS instance from Data Management (DMS) and Database Autonomy Service (DAS), the system generates IP address whitelists for DMS and DAS upon your authorization. The IP address whitelist labeled ali_dms_group is generated for DMS. The IP address whitelist labeled hdm_security_ips is generated for DAS. Do not modify or delete the IP address whitelists. If you modify or delete the IP address whitelists, these services cannot access your RDS instance. These services do not perform operations on your business data.
Important If an RDS instance is created after December 2020, the IP address whitelist that is labeled hdm_security_ips is invisible to users. This prevents the IP address whitelist from being unintentionally modified or deleted.