To use CCN access, users must first use VPN/Direct Connect to connect their local IDC database to Tencent Cloud VPC (e.g., VPC1) through nearby access, and then use CCN to interconnect VPC1 and access VPC2.
In this scenario, you may select CCN under the DTS task account (i.e., the root account of the target database), or under a different account. Using another account's CCN feature is suitable for resource sharing between multiple companies. For example, if the CCN resources belong to the parent company's root account A, and the user's DTS and target database resources belong to subsidiary's root account B, and account B does not have CCN resources, you may use the CCN resources under account A to connect to the self-built database and then carry out the DTS task.
CCN only provides bandwidth below 10 Kbps between all regions free of charge. However, DTS requires a higher bandwidth. Therefore, bandwidth configuration in the link is required.
DTS Task Configuration
1. Purchasing a DTS Task
When purchasing a DTS task, select the region where the VPC (VPC2) is located as the Source Instance Region, that is, region B. Select the region where the target database is located as the Target Instance Region, that is, region C.
2. Configuring a DTS Task
Source Database Settings
Select CCN as Access Type. Select My Account as CCN Instance Account. Select "VPC2" as CCN Associated VPC and choose a subnet as Subnet2. In Target database settings, select Database as Access Type.
CCN-associated VPC refers to the VPC that is connected to DTS through CCN. You need to select a VPC other than the one used for source database access from all VPCs connected through CCN.
When selecting a subnet, if it can't be retrieved, it might be an account issue. The account for CCN-associated VPC and the DTS task account need to be consistent. For instance, to migrate a database instance from account A to account B, you need to create the task with account B. Therefore, CCN Associated VPC must be under account B.
VPC Region: No need to configure, but it's required that the source instance region selected by the user when purchasing a task remains consistent with the VPC region selected in the CCN Associated VPC above. If inconsistent, DTS will modify the region to be consistent.
Target Database Settings
Access type: Select Database.
3. Connectivity Test
If the database and its associated network have configured security access rules, such as security groups, firewall, IP access restrictions, etc., it is necessary to allow DTS IP address, otherwise, connectivity test may fail.
Allow DTS Service IP
1. When the connectivity test fails, follow the instructions in the popup to access "DTS Service IP".
2. Sequentially check if the database has set the following network rules, and if so, allow DTS IP address in the corresponding rules.
Check if the database-associated network layer has set network ACLs or security groups.
Check if the server layer where the database resides has set up a firewall (e.g., iptables rules for Linux systems).
Check if the source database layer has set IP access restrictions.
