Docs

RDS for MySQL

Managing connection endpoints

Enabling or disabling public network access

MySQL supports accessing MySQL instances through the public network. This topic describes the steps to enable public network access.

Billing

A public network address is associated with an Elastic IP Address (EIP). You will be charged for the EIP based on its billing standards. For more information on public IP billing, refer to Public IP billing overview.

Precautions

Since new and old public IPs cannot coexist, for an endpoint with carrier-provided public network access enabled, you must release the carrier's public IP before associating an EIP. To do this: on the target endpoint, first disable the carrier-provided public network access, and then re-enable public network access and associate an EIP.

After you disable public network access, the public network address is deleted and the associated Elastic IP Address (EIP) is automatically disassociated. Disassociated EIPs will be retained and billing will continue.

After disabling public network access, you will not be able to access the database through the public network, and the established public network connection will also be disrupted, proceed with caution.

A pay-as-you-go EIP enters the Closed status and stops providing services after 2 hours of arrears. If your MySQL instance is associated with a pay-as-you-go EIP, monitor your account balance and top it up promptly when it is low. RDS for MySQL triggers an "EIP status abnormal" event when the EIP status is abnormal. You can configure an event policy for this event to receive timely notifications. For more information about configuring event policies, refer to Creating event policy.

Prerequisites

The instance has been created and is in the Running status. For specific operations, refer to Creating an instance.

A database and an account have been created. For details, refer to Creating a database and Creating an account.

An allowlist has been configured. For details, refer to Associating an allowlist with an instance.

Procedure

Log on to the RDS for MySQL console.

In the upper-left corner of the top menu bar, select the project and region for the instance.

tip

If the project to which the instance belongs is not set, this operation should select the project as All resources.

Click Instances in the left-side navigation bar.

Click the name of the target instance on the Instances page to go to the Summary page.

On the Connectivity tab, under Endpoints, click Edit in the Actions column of the target connection endpoint. In the Modify endpoint dialog box that appears, complete the following steps to enable or disable public network access.

Enable public network access

On the Modify endpoint page, click the Enable public network access button to go to the Enable public network access page.

On the Enable public network access page, you can select and associate an available EIP. If no EIP is available, click Apply for public IP to go to the Apply for public IP page to apply for a new EIP, and then associate it. For more information about applying for an EIP, refer to Applying for public IP.

After selecting the target EIP, click OK.

Disable public network access

On the Modify endpoint page, click the Disable public network access button.

In the pop-up Are you sure to disbale public network access? In the dialog box, after confirming the impact of disabling public network access, click Disable button.

tip

After modifying public network access, the instance state changes to Network changing. After public network access is enabled or disabled, the instance state changes to Running.

Related API

API	Description
CreateDBEndpointPublicAddress	Call the CreateDBEndpointPublicAddress API to create a public network address.
DeleteDBEndpointPublicAddress	Call the DeleteDBEndpointPublicAddress API to delete a public endpoint address.

Last updated: 2025.09.28 16:49:37