How-to guides

• 1: DB Service Manage
• 2: Backing up and restoring the database
• 3: Configure Read Replica
• 4: MariaDB(DBaaS) Server Connection

1 - DB Service Manage

Users can manage MariaDB (DBaaS) through the Samsung Cloud Platform Console.

Managing Parameters

Provides a feature that enables easy viewing and modification of database configuration parameters.

Query Parameter

To view configuration parameters, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. Click the resource whose parameters you want to view or modify on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the Parameter Management button. The Parameter Management popup opens.
5. In the Parameter Management popup, click the Search button. The Search Notification popup opens.
6. Lookup Notification When the popup window opens, click the Confirm button. Retrieval may take a short amount of time.

Modify Parameter

To modify the configuration parameters, follow the steps below.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. Click the resource whose parameters you want to view or modify on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the Parameter Management button. The Parameter Management popup window opens.
5. Parameter Management in the popup window, click the Search button. The Search Notification popup window opens.
6. Lookup Notification When the popup window opens, click the Confirm button. Retrieving the data may take a short time.
7. If a modification is needed, click the Edit button and enter the changes in the custom value field of the Parameter to be edited.
8. When the input is complete, click the Complete button.

SQL> SHOW COLLATION WHERE Charset = 'character set name';

Managing DB Users

Provides management functions to retrieve DB user information and modify status information.

Query DB users

To view DB users, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource for which you want to view the DB user. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the DB User Management button. You will be taken to the DB User Management page.
5. DB User Management page, click the Search button. It may take a short time to retrieve the data.

Changing DB User Status

To change the status of the retrieved DB user, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. Click the MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource whose DB user you want to modify. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button and then click the DB User Management button. You will be taken to the DB User Management page.
5. DB User Management page, click the Search button. Retrieving the data may take a short while.
6. If a correction is needed, click the Edit button, then change the status field value or enter remarks.
7. When the input is complete, click the Complete button.

Managing DB Access Control

Provides IP-based DB user access control management functionality. Users can directly specify the IPs that may access the database, configuring it so that only authorized IPs are allowed.

Query DB Access Control

Follow these steps to query DB users with IP access control enabled.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. Click the resource you want to manage access control for on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button and then click the DB Access Control Management button. You will be taken to the DB Access Control Management page.
5. On the DB Access Control Management page, click the Search button. The query may take a moment.

Add DB access control

To add IP access control, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource for which you want to add IP access control. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button and then click the DB Access Control Management button. You will be taken to the DB Access Control Management page.
5. On the DB Access Control Management page, click the Search button. Retrieving the data may take a moment.
6. After the query completes, click the Add button. The Add DB Access Control popup opens.
7. Add DB Access Control In the popup window, select the DB username and enter the IP address.
8. When the input is complete, click the Complete button.

Delete DB access control

To delete IP access control, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. You will be taken to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page, click the resource for which you want to delete IP access control. MariaDB(DBaaS) Details page will be opened.
4. Click the More button and then click the DB Access Control Management button. You will be taken to the DB Access Control Management page.
5. DB Access Control Management page, click the Search button. Retrieving the data may take a short time.
6. When the query is complete, click the Delete button. The Delete popup window opens.
7. Delete Click the Confirm button in the popup window.

Managing Archives

Provides the ability to configure Archive mode and set the retention period for Archive logs, allowing users to flexibly configure Archive log management policies to suit their operational environment. Additionally, we provide a feature that allows manual deletion of Archive logs, enabling you to clean up unnecessary log data and manage system resources effectively.

Configure Archive mode

To set the Archive mode, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page, click the resource you want to set Archive mode for. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button and then click the Archive Settings Management button. You will be taken to the Archive Settings Management page.
5. On the Archive Settings Management page, click the Search button. The query may take a short time.
6. Click the Edit button and select the usage status and retention period.
7. When the edit is complete, click the Done button.

Delete Archive file

To delete the Archive file, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page, click the resource you want to set Archive mode for. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the Archive Settings Management button. You will be taken to the Archive Settings Management page.
5. On the Archive Settings Management page, if you want to delete all Archive files, click the Delete All Archives button; if you only want to delete the backed‑up Archive files, click the Delete Backed-up Archive button.

Modify Audit Settings

You can change the Audit log storage settings of MariaDB (DBaaS).

To change the Audit log storage settings of MariaDB(DBaaS), follow the steps below.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Go to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page, click the resource to view the service status. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the Edit icon of Audit Settings at the bottom of the detailed information. The Edit Audit Settings popup window opens.
5. Modify Audit Settings After changing the usage in the popup window, click the Confirm button.
   • When Use is selected, the Audit log feature is enabled. Enabling the Audit log may degrade DB performance.
   • If you disable it, the Audit log storage file will be deleted. Back up the Audit log file separately before disabling.

Export DB Log

Supports exporting log data that requires long-term retention among audit logs to Object Storage. Users can directly configure the log types to be stored, the target bucket for export, and the export interval. Based on the configured criteria, logs are copied to the specified Object Storage for retention. Additionally, to efficiently manage disk space, we also provide an option that exports logs to Object Storage while automatically deleting the original log files. By using this option, you can effectively free up storage capacity while safely retaining the necessary log data for long-term storage.

Setting DB Log Export Mode

To set the DB Log export mode, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource you want to export the DB Log from. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the DB Log Export button. You will be taken to the DB Log Export page.
5. On the DB Log Export page, click the Register button. You will be taken to the DB Log Export Register page.
6. After entering the required information on the DB Log Export Registration page, click the Complete button.

   Category	Required	Detailed description
   Log type	Required	Log type to be saved
   Save bucket name	Required	Object Storage bucket name to be saved
   Authentication key > Access key	Required	Access key for accessing the Object Storage you want to store
   Authentication key > Secret key	Required	Secret key for accessing the Object Storage you want to store
   File creation cycle	Required	File creation interval in Object Storage
   Whether to delete the original log	Selection	Whether to delete the original logs when exporting to Object Storage

   Table. MariaDB (DBaaS) DB Log Export Configuration Items

Managing DB Log Export

To modify, cancel, or immediately export the DB Log export settings, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Go to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource you want to manage DB Log export for. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the DB Log Export button. You will be taken to the DB Log Export page.
5. On the DB Log Export page, depending on the log type you want to manage, click the More button and then click the Export Now, Edit, or Cancel button.
   • Export Immediately: The selected logs are exported to the bucket of the previously configured Object Storage.
   • Edit: Modify the DB Log export mode setting.
   • Cancel: Disables the DB Log export mode setting.

Minor Version Upgrade

We provide version upgrade functionality for some feature improvements and security patches. Only Minor version upgrades within the same Major version are supported.

To upgrade the Minor Version, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. You will be taken to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource to upgrade the version. Navigate to the MariaDB(DBaaS) Details page.
4. Click the Edit icon of the Image version item. The Version Upgrade popup window opens.
5. Version Upgrade In the popup, select the updated version and whether to enable backup, then click the Confirm button.
6. Version Upgrade Notification Click the Confirm button in the popup window.

Configure Migration

Provides a Migration feature that synchronizes in real time with the live database and replicates using a Replication method without service interruption.

To configure Migration, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. You will be taken to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page, click the resource to migrate. MariaDB(DBaaS) Details page will be opened.
4. Click the More button, then click the Migration configuration button. The Migration configuration popup opens.
5. Migration configuration In the popup window, check the instructions and click the Confirm button. You will be taken to the Migration configuration page.
6. On the Migration configuration page, after entering the required information, click the Check connection button.
7. When the connection is complete, click the Complete button.

   Category	Required	Detailed description
   Source DB Database name	Required	Database name of the source DB to be migrated
   Source DB IP	Required	IP of the Source DB that is the migration target
   Source DB Port	Required	Port of the Source DB to be migrated
   Source DB username	Required	User name of the source DB for migration
   Source DB password	Required	Password of the source DB that is the migration target

   Table. MariaDB (DBaaS) migration configuration items

Promote Migration Cluster to Master Cluster

You can promote a fully configured Migration Cluster to a Master Cluster.

To promote the Migration Cluster to Master, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource to promote to Master. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the Master Promotion button. The Master Promotion Notification popup opens.
5. In the Master Promotion Notification popup, click the Confirm button.

Upgrade OS Kernel

The OS Kernel can be upgraded to improve the functionality of the running database and apply security patches.

To upgrade the OS Kernel, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource to upgrade the OS Kernel. You will be taken to the MariaDB(DBaaS) Details page.
4. Click the More button, then click the OS(Kernel) Upgrade button. The OS(Kernel) Upgrade Notification popup window opens.
5. OS(Kernel) Upgrade Notification In the popup window, review the instructions and click the Confirm button.

2 - Backing up and restoring the database

Users can set up backups for MariaDB (DBaaS) through the Samsung Cloud Platform Console and restore from the backed‑up files.

Backing up MariaDB (DBaaS)

PostgreSQL (DBaaS) provides data backup functionality based on its own backup commands. Additionally, it provides an optimized backup environment for data protection and management through backup history verification and backup file deletion features.

Configure backup

Refer to MariaDB(DBaaS) Creating for how to configure backups for MariaDB (DBaaS).

To modify the backup settings of the created resource, follow the steps below.

1. All Services > Database > MariaDB(DBaaS) Click the menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB(DBaaS) List page: click the resource you want to configure a backup for. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the Edit button of the backup item. 4. Backup Settings The popup window opens.
5. When setting up a backup, click Use in the Backup Settings popup, select retention period, backup start time, and Archive backup interval, then click the Confirm button.
   • If you want to stop the backup configuration, deselect Use in the Backup Settings popup and authenticate via the logged-in user’s mobile phone.
     Once user authentication is completed, the backup configuration is disabled and backup execution stops.

Check backup history

To check the backup history, follow these steps.

1. All Services > Database > MariaDB(DBaaS) Click the menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB (DBaaS) List page: click the resource to view the backup history. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the Backup History button. 4. Backup History the popup window opens.
5. Backup History In the popup window, you can view the backup status, version, backup start time, backup completion time, and size.

Delete backup files

To delete the backup file, follow these steps.

1. All Services > Database > MariaDB(DBaaS) Click the menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. Navigate to the MariaDB(DBaaS) List page.
3. MariaDB (DBaaS) List page: click the resource to view the backup history. 3. MariaDB(DBaaS) Details Navigate to the page.
4. Click the Backup History button. 4. Backup History popup opens.
5. Backup History In the popup window, check the files you want to delete, then authenticate via the logged-in user’s mobile phone.
   • When user authentication is completed, the backup file is deleted.

Recover MariaDB(DBaaS)

If a backup file must be restored due to a failure or data loss, you can recover to a specific point in time using the recovery feature. When performing a MariaDB(DBaaS) recovery, a new server is created with the OS image from the initial provisioning point, the DB is installed with the version from the backup point, and the recovery proceeds with the DB’s configuration information and data.

To recover MariaDB (DBaaS), follow these steps.

1. All Services > Database > MariaDB(DBaaS) Click the menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. MariaDB (DBaaS) List Go to the page.
3. On the MariaDB (DBaaS) List page, click the resource you want to recover. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the Database Recovery button. 4. Go to the Database Recovery page.
5. After entering information in the Database recovery configuration area, click the Complete button.

   Category	required status	Detailed description
   Recovery Type	Required	Set the point in time the user wants to recover Backup point (recommended): Recover based on the backup file. Select from the list of backup points displayed in the list Custom point: Recover to a user‑desired point within the range where backup is possible. The recoverable period depends on the Archive backup cycle setting, allowing recovery from the start of the first backup up to 1 hour/30 minutes/10 minutes/5 minutes before the current time. Select the date and time to back up
   Server name prefix	Required	Server name of the recovery DB Start with a lowercase English letter and use lowercase letters, numbers, and special characters (-) to input 3 to 16 characters Based on the server name, a postfix such as 001, 002 is appended to generate the actual server name
   Cluster name	Required	Cluster name of the recovery DB Enter using English letters, 3 ~ 20 characters A cluster is a unit that groups multiple servers
   Service Type > Server Type	Essential	Server type for the recovery DB installation Standard: commonly used standard specification High Capacity: large-capacity server with 24vCore or more (to be provided later)
   Service Type > Planned Compute	Selection	Status of resources with Planned Compute configured In Use: Number of resources with Planned Compute configured that are currently in use Configured: Number of resources with Planned Compute configured Coverage Preview: Amount applied per resource by Planned Compute Create Planned Compute Service: Navigate to the Planned Compute service application page For more details, see Planned Compute 신청하기
   Service Type > Block Storage	Required	Block Storage settings used by the recovery DB Basic OS: Area where the DB engine is installed DATA: Storage area for table data, archive files, etc. Applied identically with the storage type set in the source cluster Enter capacity as a multiple of 8 within the range 16 to 5,120 Additional: Storage area for DATA, Archive, TEMP, Backup data Applied identically with the storage type set in the source cluster In the recovery DB, only DATA, TEMP, and Archive purposes can be added After selecting Use, enter the storage purpose and capacity To add storage, click the Add button; to delete, click the x button Capacity can be entered as a multiple of 8 within the range 16 to 5,120, and up to 9 can be created
   Database username	Required	Database username configured in the source DB
   Database Port number	Required	Database port number set in the source DB
   IP access control	Selection	IP address for accessing the recovery DB IP format (e.g., 192.168.10.1) or CIDR format (e.g., 192.168.10.1/32, 192.168.10.1/32) and click the Add button To delete an entered IP, click the x button next to the entered IP
   maintenance period	Select	Database maintenance window If you select Use, set the day of week, start time, and duration It is recommended to set a maintenance window for stable DB management. Patch operations will be performed at the scheduled time, causing service interruption If set to unused, Samsung SDS is not responsible for issues arising from unapplied patches.
   tag	Select	Add Tag After clicking the Add Tag button, enter or select Key, Value values

   Table. MariaDB (DBaaS) recovery configuration items

3 - Configure Read Replica

Users can enter the required information for a Read Replica through the Samsung Cloud Platform Console and create the service using detailed options.

Configure Replica

Through replica configuration, you can create replica servers for read-only or disaster recovery purposes. You can create up to 5 replicas per database.

To configure a Replica, follow these steps.

1. All Services > Database > MariaDB (DBaaS) Click the menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. MariaDB (DBaaS) List page is accessed.
3. On the MariaDB (DBaaS) List page, click the resource to configure a Replica. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the Replica configuration button. 4. Replica configuration Navigate to the page.
5. After entering information in the Replica configuration area, click the Complete button.

   Category	required status	Detailed description
   Region	Required	Region to configure the Replica Replica configuration (Other Region) is displayed only when selected
   Replica count	Required	Number of Replicas to configure Up to 5 can be configured per cluster If you select more than one value, additionally enter the Replica name and service type information
   Replica name	Required	Replica server name must start with a lowercase English letter, and use lowercase letters, numbers, and special characters (-) to enter 3 to 19 characters The entered Replica name is displayed as the cluster name in the list
   Service Type > Server Type	Essential	Replica server type Standard: standard specification commonly used High Capacity: large-capacity server with 24vCore or more (to be provided later)
   Service Type > Planned Compute	Select	Status of resources with Planned Compute configured In Use: Number of resources with Planned Compute configured that are currently in use Configured: Number of resources with Planned Compute configured Coverage Preview: Amount applied per resource by Planned Compute Create Planned Compute Service: Navigate to the Planned Compute service application page For more details, see Planned Compute 신청하기
   Service Type > Block Storage	Required	Block Storage configuration using Replica DB Basic OS: Area where the DB engine is installed DATA: Storage area for table data, archive files, etc. Applied identically with the storage type set in the source cluster Capacity cannot be set Additional: DATA, Archive, TEMP, Backup data storage area Applied identically with the storage type set in the source cluster In a Replica, only DATA and TEMP can be added After selecting Use, input the storage purpose and capacity To add storage, click the Add button, and to delete, click the x button Capacity can be entered in multiples of 8 within the range 16–5,120, and up to a maximum of 9 can be created, including the number set in the source cluster
   IP access control	Selection	Service Access Policy Configuration Since the access policy is set for the IP entered on the page, a separate Security Group policy configuration is not required Enter in IP format (example: 192.168.10.1) or CIDR format (example: 192.168.10.0/24, 192.168.10.1/32) and click the Add button To delete an entered IP, click the x button next to the entered IP
   maintenance period	Select	Database maintenance window If you select Use, set the day of week, start time, and duration It is recommended to set a maintenance window for stable management of the DB. Patch operations will be performed at the scheduled time, causing service interruptions If set to unused, we are not responsible for issues arising from patches not being applied.
   tag	Select	Add Tag after clicking the Add Tag button, Key, Value enter or select

   Table. MariaDB (DBaaS) Replica configuration items

Reconfigure Replica

If a network outage or replication delay with the Master Cluster occurs, you can use the Replica reconstruction function to replicate the Master Cluster’s data again.

To reconfigure the Replica, follow these steps.

1. Click the All Services > Database > MariaDB(DBaaS) menu. 1. Go to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource to reconfigure the Replica. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the Replica Reconstruction button. 4. Replica Reconfiguration Notice A popup window opens.
5. Replica Reconfiguration Notification In the popup window, click the OK button.

Promote Replica Cluster to Master Cluster

You can promote a fully configured Replica Cluster to a Master Cluster.

To promote a Replica Cluster to Master, follow these steps.

1. All Services > Database > MariaDB(DBaaS) Click the menu. 1. Navigate to the Service Home page of MariaDB (DBaaS).
2. On the Service Home page, click the MariaDB(DBaaS) menu. 2. Navigate to the MariaDB(DBaaS) List page.
3. On the MariaDB(DBaaS) List page, click the resource to promote to Master. 3. MariaDB(DBaaS) Details Go to the page.
4. Click the More button and then click the Master Promotion button. 4. Master Promotion Notification The popup window opens.
5. Master Promotion Notification in the popup window, click the Confirm button.

4 - MariaDB(DBaaS) Server Connection

Scenario Overview

MariaDB(DBaaS) Server Connection scenario involves creating a Bastion host(Virtual Server) and a Database service, and accessing the DB service through the Bastion host. To reliably connect to MariaDB(DBaaS) in the Samsung Cloud Platform environment, you need to create a Bastion host and establish network connectivity using it. To maintain stability and a high level of security, it is recommended to configure the Database service in a Private Subnet environment and set up the Bastion host in a restricted Public Subnet environment.

This scenario primarily describes creating a Bastion host and a Database service, configuring the network environment for Bastion host and Database access, and connecting through a DB client.

Scenario components

You can build the scenario using the following services.

Scenario setup method

Create the services needed to build the scenario by following the steps below.

Configure Network

Describes the process of configuring the network environment for accessing the Bastion Host and Database services.

1-1. Create VPC

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. Click the Create VPC button on the Service Home page. You will be taken to the Create VPC page.
3. On the VPC creation page, enter the information required to create the service.
   • Enter the IP range as 192.168.x.0/16 .
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • Once creation is complete, check the created resources on the VPC List page.

1-2. Create Subnet

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. On the Service Home page, click the Subnet menu. You will be taken to the Subnet List page.
3. Click the Create Subnet button. You will be taken to the Create Subnet page.
4. On the Subnet Creation page, enter the information required to create the service.
   • Select the Subnet type as General.
   • Select a pre‑created VPC.
   • Enter the IP range as 192.168.x.0/24.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resources on the Subnet list page.

1-3. Create Internet Gateway

1. Click the All Services > Networking > VPC menu. You will be taken to the VPC Service Home page.
2. On the Service Home page, click the Internet Gateway menu. You will be taken to the Internet Gateway List page.
3. Click the Create Internet Gateway button. Navigate to the Create Internet Gateway page.
4. On the Internet Gateway Creation page, enter the required information needed to create the service.
   • Select a pre‑created VPC.
   • In the Firewall usage item, select Use.
5. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • Once creation is complete, verify the created resource on the Internet Gateway List page.

1-4. Create Public IP

1. Click the All Services > Networking > VPC menu. Navigate to the VPC’s Service Home page.
2. Click the Public IP menu on the Service Home page. You will be taken to the Public IP List page.
3. Click the Public IP reservation button. You will be taken to the Public IP reservation page.
4. Public IP reservation page, enter the required information needed to reserve the service.
5. In the Summary panel, verify the detailed information and estimated billing amount, and click the Complete button.
   • After creation is complete, check the created resources on the Public IP List page.

1-5. Create Security Group

1. Click the All Services > Networking > Security Group menu. Go to the Service Home page of Security Group.
2. Click the Create Security Group button on the Service Home page. You will be taken to the Create Security Group page.
3. On the Security Group creation page, enter the required information needed to create the service.
4. Check the input information and click the Complete button.
   • Once creation is complete, check the created resources on the Security Group List page.

Create bastion host

Describes the process of configuring a Bastion Host where the Database access client must be installed.

2-1. Create Server Keypair

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Keypair menu. You will be taken to the Keypair List page.
3. Click the Create Keypair button. You will be taken to the Create Keypair page.
4. Enter the required information needed to create a service on the Keypair creation page.
5. Check the creation information and click the Complete button.
   • The key can be downloaded only once, and reissuance is not available.
   • Please store the downloaded key in a secure location.

2-2. Create Bastion host

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Virtual Server Creation button. You will be taken to the Virtual Server Creation page.
3. On the Virtual Server Creation page, enter the required information to create the service.
   • Select Windows for the image.
   • Select the pre‑created VPC and Subnet.
   • Click Use NAT, and select the Public IP you reserved from 1-4. Create Public IP.
   • Connect the Keypair created in 2-1. 서버 Keypair 생성하기.
4. In the Summary panel, verify the detailed information and estimated billing amount, then click the Complete button.
   • When creation is complete, check the created resources on the Virtual Server List page.

2-3. Verify Bastion host login ID and password

1. Click the All Services > Compute > Virtual Server menu. Navigate to the Service Home page of Virtual Server.
2. On the Service Home page, click the Virtual Server menu. You will be taken to the Virtual Server List page.
3. On the Virtual Serve List page, click the resource you created in [2-2. Bastion host Creation]. You will be taken to the detailed information page for that resource.
4. On the detail information page, click the RDP password view button in the Keypair name field. The RDP password view popup window will open.
5. In the RDP password lookup popup window, attach the keypair file downloaded from 2-1. 서버 Keypair 생성하기.
6. After attaching, click the Password Check button. The ID and Password required to access the resource are displayed.
   • The ID and password will be used later as credentials to connect to the Bastion host in 5-1. Bastion host Connecting.

Create Database

Describes the process of creating a Database service.

3-1. MariaDB(DBaaS) Create Service

1. Click the All Services > Database > MariaDB(DBaaS) menu. Navigate to the Service Home page of MariaDB(DBaaS).
2. On the Service Home page, click the Create MariaDB (DBaaS) button. You will be taken to the Create MariaDB (DBaaS) page.
3. MariaDB(DBaaS) Creation page: enter the required information for service creation.
   • Connect by selecting the pre‑created VPC and Subnet.
   • Enter the database-related creation details on the required information input screen.
   • Add the Bastion host IP in the IP access control settings.
   • The Database Port defaults to 2866, but the user can also specify it.
4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Complete button.
   • After creation is complete, check the created resource on the MariaDB(DBaaS) list page.

Configuring Rules

It describes the process of configuring rules for users to access the Bastion host and rules for accessing the Database from the Bastion host.

4-1. Add security rules to Security Group

1. Click the All Services > Networking > Security Group menu. Go to the Service Home page of Security Group.
2. Click the Security Group menu on the Service Home page. You will be taken to the Security Group List page.
3. Select the Security Group resource created in 1-5. Creating a Security Group. Navigate to the detailed information page for that resource.
4. Click the Rules tab on the detail information page. You will be taken to the Rules tab.
5. Click the Add Rule button on the Rules tab. It navigates to the Add Rule popup.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   direction	Remote	Target address	Protocol	Port	Explanation
   Inbound	CIDR	User PC IP	TCP	3389 (RDP)	Bastion access PC → Bastion host
   Outbound	CIDR	DB IP	TCP	Database Port (manual entry)	Bastion host → Database

   Table: Security Group rules that need to be added

4-2. Adding IGW Firewall Rules

1. Click the All Services > Networking > Firewall menu. Navigate to the Service Home page of Firewall.
2. On the Service Home page, click the Firewall menu. You will be taken to the Firewall List page.
3. On the Firewall List page, select the Internet Gateway Resource Name created in 1-3. Internet Gateway 생성하기. You will be taken to the detailed information page for that resource.
4. Click the Rules tab on the detail information page. You will be taken to the Rules tab.
5. Click the Add Rule button on the Rules tab. You will be taken to the Add Rule popup.
6. Add Rule In the popup window, enter the rule below, and click the Confirm button.

   origin address	Destination address	Protocol	Port	Operation	direction	Explanation
   Bastion connection PC IP	Bastion host IP	TCP	3389(RDP)	Allow	Inbound	User PC → Bastion host

   Table. Internet Gateway Firewall rules that need to be added

Connect to Database

Describes the process of a user accessing the database via a DB client program.

This guide explains how to connect using MySQL Workbench. Since there are various database client programs and CLI utilities, you may install and use the tool that best fits your needs.

5-1. Connecting to Bastion host

1. In the Windows environment of the PC that will connect to the Bastion host, run Remote Desktop Connection, then enter the NAT IP of the Bastion Host and click the Connect button.
2. When the remote desktop connection succeeds, the user credential input window opens. Enter the ID and Password verified in 2-3. Bastion host Access ID and PW Verification and click the Confirm button.

5-2. Install DB connection client program (MySQL Workbench) on the Bastion host

1. Visit the official MySQL page and download the MySQL Workbench program.
   • MySQL Workbench program download path: https://dev.mysql.com/downloads/workbench
2. Connect the user’s PC hard drive to upload the file to the Bastion host.
3. In the Local Resources tab of the Remote Desktop Connection, click the Details button of the Local Devices and Resources item.
4. Select the local disk of the location where the file was downloaded on the drive, and click the OK button.
5. Copy the downloaded file, upload it to the Bastion Host, and click the MySQL Workbench installer to install.

5-3. Connect to the Database using the DB client program (MySQL Workbench)

1. Launch MySQL Workbench and click Database > Manage connections. The Manage Server Connection popup appears.
2. In the Manage Server Connection popup, click the New button at the lower left, enter the Database server information created in 3-1. MariaDB(DBaaS) 서비스 생성하기, and click the Test Connection button. A Password popup will appear.

   Required input field	input value
   Connection Name	Custom (e.g., service name)
   Host name	Database server IP
   Port	Database Port
   Username	Database username

   Table. DB connection client program input fields
3. In the Password popup window, enter the password you set in 3-1. MariaDB(DBaaS) Service Creation and click the OK button. When the operation succeeds, click the OK button in the Manage Server Connection popup window.
4. Click Database > Connect to Database. The Connect to Database popup window appears.
5. Select the Connection Name registered in Stored Connection to connect to the Database. After connecting, you can try simple queries, etc.