After you create an anti-ransomware policy for a database, you must precheck the connectivity between not only the database and Object Storage Service (OSS) but also the database and the control network. If the precheck succeeds, you can back up the data in the database. Anti-ransomware for databases is available only for MySQL databases, Oracle databases, and SQL Server databases that are deployed on Elastic Compute Service (ECS) instances. This topic describes how to precheck database instances.
Background information
If you want to back up data in MySQL databases, Oracle databases, or SQL Server databases that are deployed on ECS instances, you need to pay attention to the database versions and backup features that are supported by each version. For more information, see Overview (ECS-hosted databases).Procedure
- Log on to the Security Center console. In the top navigation bar, select the region of the asset that you want to manage. You can select China or Outside China.In the left-side navigation pane, choose .
- In the anti-ransomware policy list of the Database extortion virus protection tab, find the anti-ransomware policy that you create and click Pre-check in the Actions column.
- In the Pre-check dialog box, click Starting.
- Check items for a MySQL database
Check item Description OSS connectivity Checks whether the MySQL database is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The instance and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database. Control network connectivity Checks whether the MySQL database is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database. Versions of databases that support full backup Checks whether the version of the MySQL database supports full backup. Note MySQL 8.0 does not support incremental backup.Binary log check Checks whether the binary log configuration of the MySQL database is valid. If the check fails, you cannot back up or restore data in the database. - Check items for an Oracle database
Check item Description OSS connectivity Checks whether the Oracle database instance is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The instance and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database. Control network connectivity Checks whether the Oracle database instance is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database. Status of the Oracle database instance Checks whether the Oracle database instance runs as expected. If the instance does not run as expected, you cannot back up or restore data in the database. Oracle database status Checks whether all Oracle databases in the Oracle database instance run as expected. If a database in the instance does not run as expected, you cannot back up or restore data in the database. Archive mode Checks whether the archive mode can be enabled for the Oracle database instance. If the check fails, you cannot back up or restore data in the database. For more information about how to enable the archive mode, see Enable archive mode for an Oracle database. - Check items for a SQL Server database
Check item Description OSS connectivity Checks whether the SQL Server database is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The database and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database. Control network connectivity Checks whether the SQL Server database is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database. Recovery model Checks the recovery model of the SQL database. If the check fails, you cannot perform incremental backups or log backups in the database. Important- Due to the limits of SQL Server, databases that fail the check support only the SIMPLE recovery model. You cannot perform log backups on these databases.
- You can perform only full backups on master databases. If you perform an incremental backup or log backup for a master database, the system automatically implements full backup instead.
- For more information about how to change the recovery model, see SQL Server documentation.
SQL Server database status Checks whether the SQL Server database runs as expected. If the database does not run as expected, you cannot back up or restore data in the database.
The pre-check takes about 1 minute.
If an item fails the precheck, follow the on-screen instructions to check whether the failure affects the backup and restoration operations in the database. If the failure affects the backup and restoration operations, we recommend that you handle the issue at the earliest opportunity based on this topic.
- Check items for a MySQL database