RDS for PostgreSQL
RDS for PostgreSQL
Document
- Documentation
RDS for PostgreSQL User guideData securityConfiguring SSL encryptionEnabling SSL encryption
Copy page
Download PDFConfiguring SSL encryption
Enabling SSL encryption
Copy pageDownload PDFEnabling SSL encryption
To enhance the security of the link, RDS for PostgreSQL provides SSL (Secure Sockets Layer) encryption service. This topic introduces how to set up SSL encryption for a PostgreSQL instance in the console.
Background information
SSL (Secure Sockets Layer) is a security protocol specifically designed for secure communication and data security. It encrypts network connections at the transport layer, which improves the security of communication data while ensuring the integrity of the data. After SSL 3.0, it was renamed TLS (Transport Layer Security).
RDS for PostgreSQL supports TLS versions 1.2 and 1.3.
Prerequisites
Instances have been created and the instance is in Running state, for more details please see Creating an instance.
Precautions
- Since enabling SSL encryption will increase the network response time of the PostgreSQL service, it is recommended to enable SSL encryption only when encryption is required (for example, when connecting to a PostgreSQL instance via the public network).
- Modifying the SSL configuration of an instance will restart the instance. Please proceed with caution.
- The Database Workshop currently does not support operations on instances with SSL encryption enabled. If you rely on using the database workbench, please enable this feature with caution.
- After enabling SSL encryption, be sure to update the SSL certificate in a timely manner. The validity period of the SSL certificate is one year from the time SSL encryption is enabled.
Procedure
- Login to the RDS for PostgreSQL console.
- In the upper-left corner of the top menu bar, select the project and region for the instance.
tip
If the project of the instance has not been set, the project should be selected as All resources.
- On the Instances page, click the target instance name.
- On the instance details page, click the Security tab.
- On the Security tab, click the SSL tab.
- On the right side of the SSL tab, click the state button of the SSL feature.
- In the pop-up dialog box, click OK to Enable the instance’s SSL encryption feature.
tip
After clicking OK, the instance will restart. After the instance completes restarting and you refresh the page, you can view the instance’s protected address.
Subsequent Steps
Related APIs
Last updated: 2025.11.17 16:15:15
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
