tencent cloud

Feedback

Overview

Last updated: 2022-09-21 17:24:21

    Overview

    When creating a migration, sync, or subscription task, you need to select different access types based on the deployment conditions of your source database. This document describes how to select an access type and prepare accordingly.

    Prerequisites

    Note:

    Determine the access type in advance. For the same source and target databases, if an access type such as Public Network is selected and the connectivity verification is passed, you cannot switch to another access type such as Direct Connect; otherwise, an error will be reported during connectivity verification.

    • If the source database is an IDC-based self-built database or a third-party cloud database, you can select Public Network generally. If you require a higher transfer performance, you can select VPN Access, Direct Connect, or CCN based on your actual network conditions.
    • If the source database is a TencentDB instance, select Database.
    • If the source database is a CVM-based self-built database, select Self-Build on CVM.
    Access TypeUse CaseOperation Guide
    Public Network
  • The source database can be accessed through a public IP.
  • The public network option cannot guarantee the transfer bandwidth and is applicable to scenarios with low requirements for the transfer performance.
  • Manually add the SNAT IP of the DTS server to the allowlist (generally the firewall) of the self-built database as instructed in Adding DTS IP Address to Database Allowlist to connect the source database and DTS instance.
    Direct Connect/VPN Access
    • The source database can be interconnected with VPCs through VPN Connections or Direct Connect.
    • The network bandwidth of Direct Connect is guaranteed.
    CCN The source database can be interconnected with VPCs through CCN.
    Self-Build on CVM The source database is deployed in a CVM instance. Manually add the SNAT IP of the DTS server to the security group of the CVM instance as instructed in Adding DTS IP Address to Database Allowlist to connect the source database and DTS instance.
    VPC The source and target databases are both deployed in Tencent Cloud VPCs. Manually add the SNAT IP address of the DTS server to the security group of the source database as instructed in Adding DTS IP Address to Database Allowlist.
    To use the VPC access type, submit a ticket for application.
    Database The source database is a TencentDB instance.
    • If the source database is a TencentDB for MySQL, TencentDB for PostgreSQL, TDSQL-C for PostgreSQL, TDSQL for TDStore, TDSQL for PostgreSQL, or TDSQL-A for PostgreSQL instance, DTS will automatically add the SNAT IP address of the DTS server to the security group rule of the source database.
    • For other database types, you need to do so manually as instructed in Adding DTS IP Address to Database Allowlist.
    Note:

    • Manually or automatically adding the SNAT IP address of the DTS server to the security group or allowlist of the source database may cause certain security risks to the source database. Therefore, you should enhance security protection measures when performing such operations; for example, you can standardize account password management, require authentication for API communication, and restrict unnecessary IP ranges. By using DTS, you acknowledge the existence of risks. If you have high security requirements, we recommend you use Direct Connect, VPN, or VPC for access.
    • After using DTS, we recommend you delete the DTS IP address from the security group or firewall promptly.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support