This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

How-to guides

1: Managing DB Service
2: DB Backup and Restore
3: Configuring Read Replica
4: MariaDB(DBaaS) Server Connection

Users can create MariaDB(DBaaS) by entering required information and selecting detailed options through the Samsung Cloud Platform Console.

Creating MariaDB(DBaaS)

You can create and use MariaDB(DBaaS) service through the Samsung Cloud Platform Console.

Notice

Before creating a service, configure the VPC Subnet type as General.
- If the Subnet type is Local, the Database service cannot be created.
When loading large capacity data of 2 TB or more, backup may be performed for a long time or the performance of the DB itself may deteriorate. To prevent this, from an operational perspective, it is necessary to consider cleaning up unnecessary data or migrating old data to a statistical collection environment.

To create MariaDB(DBaaS), follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the Create MariaDB(DBaaS) button. It moves to the Create MariaDB(DBaaS) page.

On the Create MariaDB(DBaaS) page, enter the information required for service creation and select detailed options.

Select the required information in the Image and Version Selection area.
Classification
Required
Detailed Description
Image Version Required Provides version list of MariaDB(DBaaS)
Table. MariaDB(DBaaS) Image and Version Selection Items

Classification	Required	Detailed Description
Image Version	Required	Provides version list of MariaDB(DBaaS)

Enter or select the required information in the Service Information Entry area.

Classification	Required	Detailed Description
Server Name Prefix	Required	Server name where DB will be installed Start with lowercase English letters, enter 3 to 13 characters using lowercase letters, numbers, and special characters (`-`) Actual server name is created with a postfix like 001, 002 based on the server name
Cluster Name	Required	Cluster name where DB servers are configured Enter 3 to 20 characters using English Cluster is a unit that bundles multiple servers
Service Type > Server Type	Required	Server type where DB will be installed Standard: Standard specification commonly used High Capacity: Large capacity server with 24 vCore or more For more information on server types provided by MariaDB(DBaaS), see MariaDB(DBaaS) Server Type
Service Type > Planned Compute	Optional	Resource status with Planned Compute set In Use: Number of resources with Planned Compute set that are in use Settings: Number of resources with Planned Compute set Coverage Preview: Amount applied by resource-based Planned Compute Create Planned Compute Service: Move to Planned Compute service application page For more information, see Apply for Planned Compute
Service Type > Block Storage	Required	Block Storage setting used by DB according to purpose Basic OS: Area where DB engine is installed DATA: Storage area for table data and archive files, etc. Select storage type then enter capacity. (For more information by Block Storage type, see Creating Block Storage) SSD: High-performance general volume HDD: General volume SSD_KMS, HDD_KMS: Additional encrypted volume using Samsung Cloud Platform KMS (Key Management System) encryption key Set Storage type is applied equally to additional storage Enter capacity in multiples of 8 within the range of 16 to 5,120 Since service interruption may occur due to large Sort such as SQL execution or monthly batch, separate TEMP storage must be allocated and used Additional: DATA, Archive, TEMP, Backup data storage area Select Use then enter Purpose and Capacity of storage Storage type is applied equally to the type set in DATA, and capacity can be entered in multiples of 8 within the range of 16 to 5,120 To add storage, click the + button, and to delete, click the x button. Can add up to 9 Before transferring backup data, temporarily store backup data in BACKUP storage If backup data exceeds 100 GB and data changes are frequent, it is recommended to add separate BACKUP storage for stable backup. It is recommended to set backup capacity to about 60% of DATA capacity If BACKUP storage is not added, `/tmp` area is used, and backup fails if capacity is insufficient Only one Block Storage is allocated per service for Archive, TEMP, BACKUP storage
Redundancy Configuration	Optional	Redundancy configuration If using redundancy configuration, DB instances are configured as Active DB and Standby DB
Network > Common Settings	Required	Network settings where servers created in the service are installed Select if you want to apply the same settings to all installed servers Select pre-created VPC and Subnet, IP, Public NAT Only automatic IP generation is possible Public NAT function is only available when VPC is connected to Internet Gateway. If you check Use, you can select from IPs reserved in Public IP of VPC product. For more information, see Creating Public IP
Network > Per Server Settings	Required	Network settings where servers created in the service are installed Select if you want to apply different settings for each installed server Select pre-created VPC and Subnet, IP, Public NAT Enter IP for each server Public NAT function is only available when VPC is connected to Internet Gateway. If you check Use, you can select from IPs reserved in Public IP of VPC product. For more information, see Creating Public IP
IP Access Control	Optional	Service access policy setting Since access policy is set for the IP entered on the page, you don’t need to set Security Group policy separately Enter in IP format (example: `192.168.10.1`) or CIDR format (example: `192.168.10.0/24`, `192.168.10.1/32`) and click the Add button To delete the entered IP, click the x button next to the entered IP
Maintenance Period	Optional	DB maintenance period If selecting Use, set day of week, start time, and duration It is recommended to set the maintenance period for stable DB management. Patch work is performed at the set time and service interruption occurs If set to not used, Samsung SDS is not responsible for problems caused by not applying patches.

Table. MariaDB(DBaaS) Service Information Entry Items

Enter or select the required information in the Database Configuration Required Information Entry area.

Classification	Required	Detailed Description
Database Name	Required	Server name applied when DB is installed Start with English, enter 3 to 20 characters using English and numbers
Database Username	Required	DB user name Account with that name is also created in OS Enter 2 to 20 characters using lowercase English letters Limited Database usernames can be checked in Console
Database Password	Required	Password to use when accessing DB Enter 8 to 30 characters including English letters, numbers, and special characters (excluding `"` `’`)
Database Password Confirmation	Required	Re-enter password to use when accessing DB identically
Database Port Number	Required	Port number required for DB connection Enter DB port within the range of 1200 to 65535
Backup > Use	Optional	Backup usage Select Use to set backup file retention period, backup start time, and Archive backup cycle
Backup > Retention Period	Optional	Backup retention period Select backup retention period. File retention period can be set from 7 days to 35 days Separate fees are charged for backup files depending on capacity
Backup > Backup Start Period	Optional	Backup start time Select backup start time The minutes when backup is performed are set randomly, and backup end time cannot be set
Backup > Archive Backup Cycle	Optional	Archive backup cycle Select Archive backup cycle 1 hour is recommended for Archive backup cycle. When selecting 5 minutes, 10 minutes, 30 minutes, it may affect DB performance
Audit Log Setting	Optional	Audit Log storage Select Use to set Audit Log function User access information recording is stored Users can specify event types to Audit through `server_audit_events` parameter, and can modify through Parameter screen For details on that parameter, see MariaDB documentation DB performance may deteriorate when Audit is set
ServiceWatch Log Collection	Optional	ServiceWatch log collection Select Use to set ServiceWatch log collection function For details on collected logs, see ServiceWatch Metrics Provided free up to 5 GB for all services in Account, and fees are charged depending on storage capacity when exceeding 5 GB When collecting, log group and log stream are automatically created, and cannot be deleted until resource is deleted To prevent exceeding 5 GB, directly deleting log data or shortening retention period is recommended
Parameter	Required	Parameters to use for DB Click the View button to check detailed information of parameters After DB creation is complete, parameter modification is possible, and DB must be restarted after modification
DB Character Set	Required	Character encoding method to use for DB As a character set used when storing text data, DB is created with default setting to selected Encoding
Time Zone	Required	Standard time zone where Database will be used

Table. MariaDB(DBaaS) Database Configuration Items

Enter or select the required information in the Additional Information Entry area.
Classification
Required
Detailed Description
Tags Optional Add tags
Can add up to 50 per resource
Click the Add Tag button then enter or select Key, Value values
Table. MariaDB(DBaaS) Additional Information Entry Items

In the Summary panel, review the detailed information and estimated charges, and click the Create button.
- Once creation is complete, check the created resource on the Resource List page.

Classification	Required	Detailed Description
Tags	Optional	Add tags Can add up to 50 per resource Click the Add Tag button then enter or select Key, Value values

Checking MariaDB(DBaaS) Detailed Information

MariaDB(DBaaS) service allows you to check and modify the entire resource list and detailed information. The MariaDB(DBaaS) Details page consists of Detailed Information, Tags, Operation History tabs, and for DBs with Replica configured, Replica Information tab is additionally configured.

To check the detailed information of MariaDB(DBaaS) service, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.

On the MariaDB(DBaaS) List page, click the resource to check detailed information. It moves to the MariaDB(DBaaS) Details page.

At the top of the MariaDB(DBaaS) Details page, status information and additional function information are displayed.

Classification	Detailed Description
Cluster Status	Cluster status where DB is installed Creating: Cluster is being created Editing: Cluster is changing to Operation execution state Error: State where error occurred while cluster is performing operation If it occurs continuously, contact administrator Failed: State where cluster failed during creation process Restarting: State where cluster is being restarted Running: State where cluster is operating normally Starting: State where cluster is starting Stopped: State where cluster is stopped Stopping: State where cluster is in stop state Synchronizing: State where cluster is synchronizing Terminating: State where cluster is being deleted Unknown: State where cluster status is unknown If it occurs continuously, contact administrator Upgrading: State where cluster is changing to upgrade execution state
Cluster Control	Buttons to change cluster status Start: Start stopped cluster Stop: Stop running cluster Restart: Restart running cluster Switch-Over: Switch Standby cluster to Active
More Additional Functions	Cluster-related management buttons Sync Service Status: Check real-time DB service status Backup History: If backup is set, check backup normal execution status and history Database Recovery: Recover DB based on specific point in time Parameter Management: Check and modify DB configuration parameters Replica Configuration: Configure Replica which is read-only cluster Replica Configuration (Other-Region): Configure disaster recovery replica in different region, button is disabled if no region configured in that Account DB User Management: Check and manage DB account (user) information registered in DB DB Access Control Management: Allows registration and termination of access allowed IP based on DB accounts registered in DB Archive Setting Management: Archive file retention period setting and Archive mode setting are possible DB Log Export: Logs stored through Audit settings can be exported to user’s Object Storage Migration Configuration: Provides Migration function of Replication method OS(Kernel) Upgrade: OS Kernel version upgrade

Service Termination	Button to terminate service

Table. MariaDB(DBaaS) Status Information and Additional Functions

Detailed Information

On the MariaDB(DBaaS) List page, you can check the detailed information of the selected resource and modify information if necessary.

Classification	Detailed Description
Server Information	Server information configured in the cluster Category: Server type (Active, Standby, Replica) Server Name: Server name IP:Port: Server IP and port Status: Server status
Service	Service name
Resource Type	Resource type
SRN	Unique resource ID in Samsung Cloud Platform For DB service, means cluster SRN
Resource Name	Resource name For DB service, means cluster name
Resource ID	Unique resource ID in the service
Creator	User who created the service
Creation Date	Date and time when the service was created
Modifier	User who modified the service information
Modification Date	Date and time when the service information was modified
Image Version	Installed DB image and version information If version upgrade is needed, click the Edit icon to set For more information, see Upgrading Minor Version
Cluster Type	Cluster type (Master Cluster, Replica Cluster, Migration Cluster)
Cluster Name	Cluster name where DB servers are configured
Master Cluster Name	Master cluster name of Replica Available when it is detailed information of Replica
Database Name	Server name applied when DB is installed
Database Username	DB user name
Planned Compute	Resource status with Planned Compute set For more information, see Apply for Planned Compute
Maintenance Period	DB maintenance period status If maintenance period setting is needed, click the Edit icon to set
Backup	Backup setting status If backup setting is needed, click the Edit icon to set For details on backup, see Backing up MariaDB(DBaaS)
Audit Log Setting	Audit Log setting status If Audit Log setting is needed, click the Edit icon to set For details, see Modifying Audit Setting
ServiceWatch Log Collection	ServiceWatch log collection setting status If log collection setting is needed, click the Edit icon next to log collection to set
DB Character Set	Character encoding method to use for DB
Time Zone	Standard time zone where Database will be used
VIP	Virtual IP information Only available when high availability is set
Network	Network information where DB is installed (VPC, Subnet, VIP, NAT IP(VIP))
IP Access Control	Service access policy setting If IP addition and deletion are needed, click the Edit icon to set
Active & Standby	Active/Standby server type, Basic OS, Additional Disk information If server type modification is needed, click the Edit icon next to server type to set. For server type modification procedure, see Changing Server Type If server type is modified, server restart is needed If storage expansion is needed, click the Edit icon next to storage capacity to expand. For storage expansion procedure, see Expanding Storage If storage addition is needed, click the Disk Add button next to additional Disk to add. For storage addition procedure, see Adding Storage

Table. MariaDB(DBaaS) Database Detailed Information Items

Replica Information

The Replica Information tab is activated only when Replica is configured in the cluster. Through the Replica Information tab, you can check Master cluster name, replica count, and Replica status.

Classification	Detailed Description
Master Information	Name of Master cluster
Replica Count	Number of Replicas created in Master cluster
Replica Status	Replica server status created in Master cluster Can check about server name, status inquiry, status details, status check time To inquire Replica status, click the Status Inquiry button While inquiring, cluster maintains Synchronizing status, and when inquiry is complete, cluster changes to Running status

Classification

Detailed Description

Master Information

Name of Master cluster

Replica Count

Number of Replicas created in Master cluster

Replica Status

Replica server status created in Master cluster

Can check about server name, status inquiry, status details, status check time

To inquire Replica status, click the Status Inquiry button
- While inquiring, cluster maintains Synchronizing status, and when inquiry is complete, cluster changes to Running status

Table. Replica Information Tab Detailed Information Items

Classification	Detailed Description
Tag List	Tag list Can check Key, Value information of tags Can add up to 50 tags per resource When entering tags, search and select from existing Key and Value lists

Operation History

You can check the operation history of the selected resource on the MariaDB(DBaaS) List page.

Classification	Detailed Description
Operation History List	Resource change history Check operation date, resource ID, resource name, operation details, event topic, operation result, operator information

Table. Operation History Tab Detailed Information Items

Managing MariaDB(DBaaS) Resources

If you need to change existing configuration options of created MariaDB(DBaaS) resources or perform recovery, Replica configuration, you can perform operations on the MariaDB(DBaaS) Details page.

Controlling Operation

If changes occur in running MariaDB(DBaaS) resources, you can start, stop, or restart. Also, if configured with HA, you can switch Active-Standby servers through Switch-over.

To control MariaDB(DBaaS) operation, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, click the resource to control operation. It moves to the MariaDB(DBaaS) Details page.
Check MariaDB(DBaaS) status and complete changes through the control buttons below.
- Start: DB service installed server and DB service will run (Running).
- Stop: DB service installed server and DB service will stop (Stopped).
- Restart: Only DB service will restart.
- Switch Over: Can switch Active server and Standby server of DB.

Syncing Service Status

You can sync the real-time service status of MariaDB(DBaaS).

To check MariaDB(DBaaS) service status, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, click the resource to check service status. It moves to the MariaDB(DBaaS) Details page.
Click the Sync Service Status button. While retrieving, the cluster changes to Synchronizing status.
When retrieval is complete, the status is updated in the server information item, and the cluster changes to Running status.

Changing Server Type

You can change the configured server type.

Caution

If you modify the server type, server restart is needed. Please check SW license modification matters or SW settings and application due to server specification change separately.

To change the server type, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, click the resource to change server type. It moves to the MariaDB(DBaaS) Details page.
Click the Edit icon of the server type you want to change at the bottom of detailed information. The Edit Server Type popup window opens.
In the Edit Server Type popup window, select the server type and click the OK button.

Adding Storage

If data storage space of 5TB or more is needed, you can add storage. For DB configured with redundancy, both redundancy servers are added simultaneously.

Caution

It is applied equally to the Storage type selected when creating the service.
For DB configured with redundancy, when adding storage, it is applied simultaneously to storage of Active DB and Standby DB.
When Replica exists, storage of Master cluster cannot be smaller than storage of Replica. Expand Replica storage first then expand Master cluster storage.
When adding Archive/Temp storage, DB restarts and is temporarily unavailable.

To add storage, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, click the resource to add storage. It moves to the MariaDB(DBaaS) Details page.
Click the Disk Add button at the bottom of detailed information. The Additional Storage Request popup window opens.
In the Additional Storage Request popup window, after entering purpose and capacity, click the OK button.

Expanding Storage

Storage added as data area can be expanded up to maximum 5 TB based on the initially allocated capacity. For DB configured with redundancy, both redundancy servers are expanded simultaneously.

To expand storage capacity, follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, click the resource to change server type. It moves to the MariaDB(DBaaS) Details page.
Click the Edit icon of the additional Disk you want to expand at the bottom of detailed information. The Edit Additional Storage popup window opens.
In the Edit Additional Storage popup window, after entering expansion capacity, click the OK button.

Terminating MariaDB(DBaaS)

You can reduce operating costs by terminating unused MariaDB(DBaaS). However, if you terminate the service, the running service may stop immediately, so you should proceed with termination after fully considering the impact caused by service interruption.

Caution

For DB configured with Replica, even if Master DB is terminated, Replica is not deleted together. If you also want to delete Replica, terminate separately from the resource list.
If you terminate DB, stored data and backup data are all deleted even if backup was set.

To terminate MariaDB(DBaaS), follow these steps:

Click the All Services > Database > MariaDB(DBaaS) menu. It moves to the Service Home page of MariaDB(DBaaS).
On the Service Home page, click the MariaDB(DBaaS) menu. It moves to the MariaDB(DBaaS) List page.
On the MariaDB(DBaaS) List page, select the resource to terminate and click the Terminate Service button.
When termination is complete, check if the resource is terminated on the MariaDB(DBaaS) List page.

1 - Managing DB Service

Users can manage MariaDB(DBaaS) through Samsung Cloud Platform Console.

Managing Parameter

Provides functionality to easily view and modify database configuration parameters.

Viewing Parameters

Follow these steps to view configuration parameters.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view or modify parameters on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Parameter Management button. Parameter Management popup window will open.
Click View button in the Parameter Management popup window. View Notification popup window will open.
Click Confirm button when the View Notification popup window opens. It will take some time to view.

Modifying Parameters

Follow these steps to modify configuration parameters.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view or modify parameters on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Parameter Management button. Parameter Management popup window will open.
Click View button in the Parameter Management popup window. View Notification popup window will open.
Click Confirm button when the View Notification popup window opens. It will take some time to view.
If modification is needed, click Modify button and enter the modification in the custom value area of the Parameter to be modified.
When input is complete, click Complete button.

Note

If you change the character_set_server value, first check the collation that matches the character set with the following command:

SQL> SHOW COLLATION WHERE Charset = 'character set name';

Set the parameter values character-set-server, collation-server, and init_connect with the confirmed collation.

Item	Description	Restart Required
`character-set-server`	Specify default character set	Restart required
`collation-server`	Specify default collation	Restart required
`init_connect`	SQL statement executed when Client connects to database	Restart not required

Table. Parameter Setting Items

Managing DB Users

Provides management functionality to view DB user information and change status information.

Viewing DB Users

Follow these steps to view DB users.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view DB users on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB User Management button. You will be taken to the DB User Management page.
Click View button on the DB User Management page. It will take some time to view.

Changing DB User Status

Follow these steps to change the status of viewed DB users.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to modify DB users on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB User Management button. You will be taken to the DB User Management page.
Click View button on the DB User Management page. It will take some time to view.
If modification is needed, click Modify button and change the status area value or enter note content.
When input is complete, click Complete button.

Managing DB Access Control

Provides IP-based DB user access control management functionality. Users can directly specify IPs that can access the database, setting it so that only allowed IPs can access.

Notice

Before setting DB access control, perform DB user view. For DB user view, please refer to Managing DB Users.

Viewing DB Access Control

Follow these steps to view DB users with IP access control set.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to manage access control on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB Access Control Management button. You will be taken to the DB Access Control Management page.
Click View button on the DB Access Control Management page. It will take some time to view.

Adding DB Access Control

Follow these steps to add IP access control.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to add IP access control on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB Access Control Management button. You will be taken to the DB Access Control Management page.
Click View button on the DB Access Control Management page. It will take some time to view.
When viewing is complete, click Add button. DB Access Control Add popup window will open.
Enter DB username selection and IP Address in the DB Access Control Add popup window.
When input is complete, click Complete button.

Deleting DB Access Control

Follow these steps to delete IP access control.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to delete IP access control on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB Access Control Management button. You will be taken to the DB Access Control Management page.
Click View button on the DB Access Control Management page. It will take some time to view.
When viewing is complete, click Delete button. Delete popup window will open.
Click Confirm button in the Delete popup window.

Managing Archive

Provides Archive mode setting and Archive Log retention period setting functionality, allowing users to flexibly set Archive log management policies according to their operating environment. Additionally, it provides functionality to manually delete Archive logs, enabling effective management of system resources by cleaning up unnecessary log data.

Notice

When creating a service, the default setting is Archive mode enabled and retention period is 3 days.

Setting Archive Mode

Follow these steps to set Archive mode.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to set Archive mode on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Archive Setting Management button. You will be taken to the Archive Setting Management page.
Click View button on the Archive Setting Management page. It will take some time to view.
Click Modify button and select usage and retention period.
When modification is complete, click Complete button.

Deleting Archive Files

Follow these steps to delete Archive files.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to set Archive mode on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Archive Setting Management button. You will be taken to the Archive Setting Management page.
To delete all Archive files on the Archive Setting Management page, click Delete All Archives, and to delete only backed up Archive files, click Delete Backed Up Archives button.

Modifying Audit Settings

You can change MariaDB(DBaaS)’s Audit log storage settings.

Follow these steps to change MariaDB(DBaaS)’s Audit log storage settings.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view service status on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Modify icon in Audit Settings at the bottom of the detail information. Audit Settings Modify popup window will open.
Modify usage in the Audit Settings Modify popup window and click Confirm button.
- When Use is selected, Audit log functionality is set. When Audit log is set, DB performance may degrade.
- When Use is disabled, the Audit log storage file is deleted. Back up the Audit log file separately before disabling use.

Exporting DB Log

Supports exporting audit (Audit) logs that require long-term preservation to Object Storage. Users can directly set the log type to be stored, the target Bucket to export to, and the cycle for exporting logs. Logs are copied and stored to the specified Object Storage according to the set criteria. Additionally, for efficient management of disk space, it also provides an option to automatically delete the original log file while exporting the log to Object Storage. By using this option, you can effectively secure storage capacity while safely storing necessary log data for the long term.

Notice

To use the DB Log Export functionality, Object Storage creation is required. For Object Storage creation, please refer to Object Storage User Guide.
Please be sure to check the expiration date of the authentication key. If the authentication key expires, logs will not be stored in the Bucket.
Please be careful not to expose authentication key information to the outside.

Setting DB Log Export Mode

Follow these steps to set DB Log Export mode.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to export DB Log on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB Log Export button. You will be taken to the DB Log Export page.
Click Register button on the DB Log Export page. You will be taken to the DB Log Export Register page.

Enter the corresponding information on the DB Log Export Register page and click Complete button.

Category	Required	Description
Log Type	Required	Log type to store
Storage Bucket Name	Required	Object Storage Bucket name to store
Authentication Key > Access key	Required	Access key to access the Object Storage to store
Authentication Key > Secret key	Required	Secret key to access the Object Storage to store
File Creation Cycle	Required	Cycle for creating files in Object Storage
Original Log Deletion	Optional	Whether to delete the original log while exporting to Object Storage

Table. MariaDB(DBaaS) DB Log Export Configuration Items

Managing DB Log Export

Follow these steps to modify, cancel, or immediately export DB Log Export settings.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to manage DB Log Export on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click DB Log Export button. You will be taken to the DB Log Export page.
On the DB Log Export page, click More button according to the log type you want to manage and click Immediate Export, Modify, or Cancel button.
- Immediate Export: Selected logs are exported to the previously set Object Storage’s Bucket.
- Modify: Modifies DB Log Export mode settings.
- Cancel: Cancels DB Log Export mode settings.

Upgrading Minor Version

Provides version upgrade functionality according to some feature improvements and security patches. Only Minor version upgrade functionality within the same Major version is supported.

Warning

Please check the service status first through service status synchronization, then perform version upgrade.
Please set backup before proceeding with version upgrade. If backup is not set, some data may not be recoverable if a problem occurs during upgrade.
In a DB where Replica is configured, the Master DB version cannot be higher than the Replica version. First check the Replica version and perform version upgrade if necessary.
Backed up data is automatically deleted after version upgrade is complete.

Follow these steps to upgrade Minor Version.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to upgrade version on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Modify icon in the Image Version item. Version Upgrade popup window will open.
Select the modification version and backup setting in the Version Upgrade popup window, then click Confirm button.
Click Confirm button in the Version Upgrade Notification popup window.

Configuring Migration

Provides Migration functionality that replicates in real-time with a running database using Replication method without service interruption.

Notice

For detailed Migration configuration guide, please refer to Architecture Center > Migration Guide.

Follow these steps to configure Migration.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to migrate on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Migration Configuration button. Migration Configuration popup window will open.
Confirm the guidelines in the Migration Configuration popup window and click Confirm button. You will be taken to the Migration Configuration page.
Enter the corresponding information on the Migration Configuration page and click Connection Check button.

When connection is complete, click Complete button.

Category	Required	Description
Source DB Database Name	Required	Database name of the Source DB to be migrated
Source DB IP	Required	IP of the Source DB to be migrated
Source DB Port	Required	Port of the Source DB to be migrated
Source DB Username	Required	Username of the Source DB to be migrated
Source DB Password	Required	Password of the Source DB to be migrated

Table. MariaDB(DBaaS) Migration Configuration Items

Promoting Migration Cluster to Master Cluster

You can promote a configured Migration Cluster to Master Cluster.

Warning

When promoting to Master, synchronization with the Source DB to be migrated is stopped.

Follow these steps to promote Migration Cluster to Master.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to promote to Master on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Master Promotion button. Master Promotion Notification popup window will open.
Click Confirm button in the Master Promotion Notification popup window.

Upgrading OS Kernel

You can upgrade the OS Kernel to improve running database functionality and apply security patches.

Warning

Service is interrupted while OS upgrade is in progress.
Upgrade time may vary depending on the version, and if upgrade fails, it will revert to the previous configuration.
Cannot recover to the previous OS after upgrade is complete.

Follow these steps to upgrade OS Kernel.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to upgrade OS Kernel on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click OS(Kernel) Upgrade button. OS(Kernel) Upgrade Notification popup window will open.
Confirm the guidelines in the OS(Kernel) Upgrade Notification popup window and click Confirm button.

2 - DB Backup and Restore

Users can set up MariaDB(DBaaS) backup and restore using backed up files through Samsung Cloud Platform Console.

Backing up MariaDB(DBaaS)

MariaDB(DBaaS) provides data backup functionality based on its own backup command. Additionally, it provides an optimized backup environment for data protection and management through backup history verification and backup file deletion functionality.

Setting up Backup

For MariaDB(DBaaS) backup configuration method, please refer to Creating MariaDB(DBaaS).

Follow these steps to modify the backup settings of the created resource.

Warning

For stable backup, it is recommended to add a separate BACKUP storage or sufficiently increase storage capacity. Especially if backup target data exceeds 100 GB and there is a lot of data change, please secure additional storage corresponding to approximately 60% of the data capacity. For storage addition and capacity increase methods, please refer to Adding MariaDB(DBaaS) Storage, Expanding MariaDB(DBaaS) Storage guides.
If backup is set, backup is performed at the specified time after the set time, and additional charges occur according to backup capacity.
If backup setting is changed to Not Set, backup execution is immediately stopped and stored backup data is deleted and can no longer be used.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to set up backup on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Modify button in the backup item. Backup Setting popup window will open.
To set up backup, click Use in the Backup Setting popup window, select retention period, backup start time, Archive backup cycle, and click Confirm button.
- To stop backup setting, uncheck Use in the Backup Setting popup window and click Confirm button.

Viewing Backup History

Notice

To set notifications for backup success and failure, you can set through Notification Manager product. For detailed user guide on notification policy setting, please refer to Creating Notification Policy.

Follow these steps to view backup history.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view backup history on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Backup History button. Backup History popup window will open.
In the Backup History popup window, you can view backup status, version, backup start date/time, backup completion date/time, and capacity.

Deleting Backup Files

Follow these steps to delete backup files.

Warning

Backup files cannot be restored after deletion. Please be sure to confirm that it is unnecessary data before deletion.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to view backup history on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Backup History button. Backup History popup window will open.
Check the file you want to delete in the Backup History popup window and click Delete button.

Restoring MariaDB(DBaaS)

In case of failure or data loss, you can restore based on a specific point in time using the restore functionality. When MariaDB(DBaaS) restore is performed, a new server is created with the OS image at the time of initial provisioning, DB is installed with the version of that backup point, and restore is performed with the DB’s configuration information and data.

Warning

At least twice the capacity of the data type Disk is required to perform restore. If Disk capacity is insufficient, restore may fail.

Follow these steps to restore MariaDB(DBaaS).

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to restore on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Database Restore button. You will be taken to the Database Restore page.

Enter information in the Database restore configuration area and click Complete button.

Category	Required	Description
Restore Type	Required	Set the point in time the user wants to restore Backup Point (Recommended): Restore based on backup file. Select from the list of backup file points displayed User-Specified Point: Restore to the point in time the user wants within the range where backup is possible. The restorable period depends on the Archive backup cycle setting value, and can restore from the initial backup start point to 1 hour/30 minutes/10 minutes/5 minutes before the current time. Select the date and time to backup
Server Name Prefix	Required	Server name of restore DB Enter 3-16 characters starting with English lowercase letters, using lowercase letters, numbers, and special characters (`-`) Actual server name is created with postfix like 001, 002 based on server name
Cluster Name	Required	Cluster name of restore DB Enter 3-20 characters using English Cluster is a unit that groups multiple servers
Service Type > Server Type	Required	Server type where restore DB will be installed Standard: Standard specifications commonly used High Capacity: Large capacity server with 24vCore or more (to be provided later)
Service Type > Planned Compute	Optional	Resource status with Planned Compute set In Use: Number of resources in use among those with Planned Compute set Set: Number of resources with Planned Compute set Coverage Preview: Amount applied with Planned Compute per resource Planned Compute Service Create: Move to Planned Compute service application page For details, refer to Applying for Planned Compute
Service Type > Block Storage	Required	Block Storage settings used by restore DB Basic OS: Area where DB engine is installed DATA: Storage area for table data, archive files, etc. Applied identically with the Storage type set in the original cluster Capacity is entered in multiples of 8 within the 16-5,120 range Additional: DATA, Archive, TEMP, Backup data storage area Applied identically with the Storage type set in the original cluster In restore DB, only DATA, TEMP, Archive purposes can be added Select Use and enter storage purpose and capacity To add storage, click + button, to delete, click x button Capacity can be entered in multiples of 8 within the 16-5,120 range, and can create up to 9
Database Username	Required	Database username set in the original DB
Database Port Number	Required	Database Port number set in the original DB
IP Access Control	Optional	IP address to access restore DB Enter in IP format (example: `192.168.10.1`) or CIDR format (example: `192.168.10.1/32`, `192.168.10.1/32`) and click Add button To delete entered IP, click x button next to the entered IP
Maintenance Window	Optional	DB maintenance window If Use is selected, set day of week, start time, duration For stable DB management, set maintenance window is recommended. Patching is performed at the set time and service interruption occurs If set to Not Used, problems caused by not applying patching are not the responsibility of Samsung SDS.
Tag	Optional	Add tag Click Add Tag button and enter or select Key, Value values

Table. MariaDB(DBaaS) Restore Configuration Items

3 - Configuring Read Replica

Users can enter required information for Read Replica through Samsung Cloud Platform Console and create the service through detailed options.

Configuring Replica

Through Replica configuration, you can create replica servers for read-only or disaster recovery purposes. You can create up to 5 Replicas per Database.

Notice

To configure a Replica for disaster recovery, please create it through Replica Configuration (Other Region).

Follow these steps to configure Replica.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to configure Replica on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Replica Configuration button. You will be taken to the Replica Configuration page.

Enter information in the Replica configuration area and click Complete button.

Category	Required	Description
Region	Required	Region to configure Replica Only exposed when Replica Configuration (Other Region) is selected
Replica Count	Required	Number of Replicas to configure Can configure up to 5 per cluster If selecting a value of 2 or more, additionally enter Replica name and service type information
Replica Name	Required	Replica server name Enter 3-19 characters starting with English lowercase letters, using lowercase letters, numbers, and special characters (`-`) The entered Replica name is exposed as cluster name in the list
Service Type > Server Type	Required	Replica server type Standard: Standard specifications commonly used High Capacity: Large capacity server with 24vCore or more (to be provided later)
Service Type > Planned Compute	Optional	Resource status with Planned Compute set In Use: Number of resources in use among those with Planned Compute set Set: Number of resources with Planned Compute set Coverage Preview: Amount applied with Planned Compute per resource Planned Compute Service Create: Move to Planned Compute service application page For details, refer to Applying for Planned Compute
Service Type > Block Storage	Required	Block Storage settings used by Replica DB Basic OS: Area where DB engine is installed DATA: Storage area for table data, archive files, etc. Applied identically with the Storage type set in the original cluster Capacity setting not possible Additional: DATA, Archive, TEMP, Backup data storage area Applied identically with the Storage type set in the original cluster In Replica, only DATA, TEMP purposes can be added Select Use and enter storage purpose and capacity To add storage, click + button, to delete, click x button Capacity can be entered in multiples of 8 within the 16-5,120 range, and can create up to 9 including the number set in the original cluster
IP Access Control	Optional	Service access policy setting Since access policy is set for IPs entered on the page, separate Security Group policy setting is not required Enter in IP format (example: `192.168.10.1`) or CIDR format (example: `192.168.10.0/24`, `192.168.10.1/32`) and click Add button To delete entered IP, click x button next to the entered IP
Maintenance Window	Optional	DB maintenance window If Use is selected, set day of week, start time, duration For stable DB management, set maintenance window is recommended. Patching is performed at the set time and service interruption occurs If set to Not Used, problems caused by not applying patching are not the responsibility of the company.
Tag	Optional	Add tag Click Add Tag button and enter or select Key, Value values

Table. MariaDB(DBaaS) Replica Configuration Items

Reconfiguring Replica

In case of network failure or Replication delay with Master Cluster, you can replicate Master Cluster’s data again through Replica reconfiguration functionality.

Follow these steps to reconfigure Replica.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to reconfigure Replica on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click Replica Reconfiguration button. Replica Reconfiguration Notification popup window will open.
Click Confirm button in the Replica Reconfiguration Notification popup window.

Promoting Replica Cluster to Master Cluster

You can promote a configured Replica Cluster to Master Cluster.

Warning

When promoting to Master, synchronization with the existing Master Cluster is stopped.

Follow these steps to promote Replica Cluster to Master.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) menu on the Service Home page. You will be taken to the MariaDB(DBaaS) List page.
Click the resource for which you want to promote to Master on the MariaDB(DBaaS) List page. You will be taken to the MariaDB(DBaaS) Detail page.
Click More button and click Master Promotion button. Master Promotion Notification popup window will open.
Click Confirm button in the Master Promotion Notification popup window.

4 - MariaDB(DBaaS) Server Connection

Scenario Overview

The MariaDB(DBaaS) Server Connection scenario involves creating a Bastion host (Virtual Server) and Database service, and accessing the DB service through the Bastion host. To securely connect to MariaDB(DBaaS) in the Samsung Cloud Platform environment, you need to create a Bastion host and configure network connections through it. We recommend configuring the Database service in a Private Subnet environment and the Bastion host in a restricted Public Subnet environment to maintain stability and high security levels.

This scenario explains the process of creating a Bastion host and Database service, configuring the network environment for Bastion host and Database access, and connecting through a DB access client.

Figure. MariaDB(DBaaS) Server Connection Architecture

Scenario Components

You can configure this scenario using the following services:

Service Group	Service	Description
Networking	VPC	Service that provides an independent virtual network in the cloud environment
Networking	VPC > Subnet	Service that subdivides the network according to user’s purpose/scale within VPC
Networking	VPC > Public IP	Service that reserves a public IP to assign to and release from Compute resources
Networking	VPC > Internet Gateway	Service that connects VPC resources to the internet
Networking	Security Group	Virtual firewall that controls server traffic
Database	MariaDB(DBaaS)	Service that allows easy creation and management of MariaDB in a web environment
Compute	Virtual Server	Virtual server optimized for cloud computing
Compute	Virtual Server > Keypair	Encrypted file used to connect to Virtual Server

Table. Scenario Component List

Note

The default policy of Security Group is Deny All, so you must register only allowed IPs.
The All Open (Any IP, Any Port) policy for In/Outbound can expose cloud resources to external threats.
- Setting policies by specifying necessary IPs and Ports can enhance security.

Scenario Configuration Method

Create the services required to configure the scenario through the following procedure.

1. Configure Network

This section explains the process of configuring the network environment for Bastion Host and Database service access.

1-1. Create VPC

For detailed creation methods, refer to Networking > VPC > How-to guides guide.

Click All Services > Networking > VPC menu. You will be taken to the VPC’s Service Home page.
Click VPC Create button on the Service Home page. You will be taken to the VPC Create page.
Enter the information required for service creation on the VPC Create page.
- Enter the IP range as 192.168.x.0/16.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the VPC List page.

1-2. Create Subnet

For detailed creation methods, refer to Networking > VPC > How-to guides > Subnet guide.

Click All Services > Networking > VPC menu. You will be taken to the VPC’s Service Home page.
Click Subnet menu on the Service Home page. You will be taken to the Subnet List page.
Click Subnet Create button. You will be taken to the Subnet Create page.
Enter the information required for service creation on the Subnet Create page.
- Select Subnet type as General.
- Select the previously created VPC.
- Enter the IP range as 192.168.x.0/24.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the Subnet List page.

1-3. Create Internet Gateway

For detailed creation methods, refer to Networking > VPC > How-to guides > Internet Gateway guide.

Click All Services > Networking > VPC menu. You will be taken to the VPC’s Service Home page.
Click Internet Gateway menu on the Service Home page. You will be taken to the Internet Gateway List page.
Click Internet Gateway Create button. You will be taken to the Internet Gateway Create page.
Enter the required information for service creation on the Internet Gateway Create page.
- Select the previously created VPC.
- Select Use for Firewall usage item.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the Internet Gateway List page.

1-4. Create Public IP

For detailed creation methods, refer to Networking > VPC > How-to guides > Public IP guide.

Click All Services > Networking > VPC menu. You will be taken to the VPC’s Service Home page.
Click Public IP menu on the Service Home page. You will be taken to the Public IP List page.
Click Public IP Reserve button. You will be taken to the Public IP Reserve page.
Enter the required information for service reservation on the Public IP Reserve page.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the Public IP List page.

1-5. Create Security Group

For detailed creation methods, refer to Networking > Security Group > How-to guides guide.

Click All Services > Networking > Security Group menu. You will be taken to Security Group’s Service Home page.
Click Security Group Create button on the Service Home page. You will be taken to the Security Group Create page.
Enter the required information for service creation on the Security Group Create page.
Review the entered information and click Complete button.
- When creation is complete, verify the created resource on the Security Group List page.

2. Create Bastion Host

This section explains the process of configuring a Bastion Host where a DB access client should be installed.

2-1. Create Server Keypair

For detailed creation methods, refer to Compute > Virtual Server > How-to guides > Keypair guide.

Click All Services > Compute > Virtual Server menu. You will be taken to Virtual Server’s Service Home page.
Click Keypair menu on the Service Home page. You will be taken to the Keypair List page.
Click Keypair Create button. You will be taken to the Keypair Create page.
Enter the required information for service creation on the Keypair Create page.
Review the creation information and click Complete button.
- Key download is available only for the first time, and reissuance is not provided.
- Please save the downloaded key in a safe place.

2-2. Create Bastion Host

For detailed creation methods, refer to Compute > Virtual Server > How-to guides guide.

Click All Services > Compute > Virtual Server menu. You will be taken to Virtual Server’s Service Home page.
Click Virtual Server Create button on the Service Home page. You will be taken to the Virtual Server Create page.
Enter the required information for service creation on the Virtual Server Create page.
- Select Windows for Image.
- Select the previously created VPC and Subnet.
- Click Use NAT and select the Public IP reserved in 1-4. Create Public IP.
- Connect the Keypair created in 2-1. Create Server Keypair.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the Virtual Server List page.

2-3. Verify Bastion Host Access ID and PW

Click All Services > Compute > Virtual Server menu. You will be taken to Virtual Server’s Service Home page.
Click Virtual Server menu on the Service Home page. You will be taken to the Virtual Server List page.
Click the resource created in 2-2. Create Bastion Host on the Virtual Server List page. You will be taken to the resource’s detail information page.
Click RDP password query button in the Keypair name item on the detail information page. RDP password query popup window will open.
Attach the keypair file downloaded in 2-1. Create Server Keypair in the RDP password query popup window.
After attaching, click Password Check button. The ID and Password for accessing the resource will be displayed.
- The ID and Password will be used as information for accessing the Bastion host later in 5-1. Access Bastion Host.

3. Create Database

This section explains the process of creating a Database service.

3-1. Create MariaDB(DBaaS) Service

For detailed creation methods, refer to Database > MariaDB(DBaaS) > How-to guides guide.

Click All Services > Database > MariaDB(DBaaS) menu. You will be taken to MariaDB(DBaaS)’s Service Home page.
Click MariaDB(DBaaS) Create button on the Service Home page. You will be taken to the MariaDB(DBaaS) Create page.
Enter the required information for service creation on the MariaDB(DBaaS) Create page.
- Select and connect the previously created VPC and Subnet.
- Enter Database-related creation information on the required information input screen.
- Add Bastion host IP in IP access control item.
- Database Port defaults to 2866, but users can specify it.
Review the detailed information and estimated billing amount on the Summary panel, and click Complete button.
- When creation is complete, verify the created resource on the MariaDB(DBaaS) list page.

4. Configure Rules

This section explains the process of setting rules for users to access the Bastion host and rules for the Bastion host to access the Database.

4-1. Add Security Group Security Rules

For detailed creation methods, refer to Networking > Security Group > How-to guides guide.

Click All Services > Networking > Security Group menu. You will be taken to Security Group’s Service Home page.
Click Security Group menu on the Service Home page. You will be taken to the Security Group List page.
Select the Security Group resource created in 1-5. Create Security Group. You will be taken to the resource’s detail information page.
Click Rules tab on the detail information page. You will be taken to the Rules tab.
Click Add Rule button on the Rules tab. You will be taken to the Add Rule popup window.
Enter the following rules in the Add Rule popup window and click Confirm button.
Direction Remote Destination Address Protocol Port Description
Inbound CIDR User PC IP TCP 3389 (RDP) Bastion Access PC → Bastion host
Outbound CIDR DB IP TCP Database Port (Direct Input) Bastion host → Database
Table. Security Group Security Rules to Add

Direction	Remote	Destination Address	Protocol	Port	Description
Inbound	CIDR	User PC IP	TCP	3389 (RDP)	Bastion Access PC → Bastion host
Outbound	CIDR	DB IP	TCP	Database Port (Direct Input)	Bastion host → Database

4-2. Add IGW Firewall Rules

For detailed creation methods, refer to Networking > Firewall > How-to guides guide.

Click All Services > Networking > Firewall menu. You will be taken to Firewall’s Service Home page.
Click Firewall menu on the Service Home page. You will be taken to the Firewall List page.
Select the Internet Gateway Resource Name created in 1-3. Create Internet Gateway on the Firewall List page. You will be taken to the resource’s detail information page.
Click Rules tab on the detail information page. You will be taken to the Rules tab.
Click Add Rule button on the Rules tab. You will be taken to the Add Rule popup window.
Enter the following rules in the Add Rule popup window and click Confirm button.
Source Address Destination Address Protocol Port Action Direction Description
Bastion Access PC IP Bastion host IP TCP 3389(RDP) Allow Inbound User PC → Bastion host
Table. Internet Gateway Firewall Rules to Add

Source Address	Destination Address	Protocol	Port	Action	Direction	Description
Bastion Access PC IP	Bastion host IP	TCP	3389(RDP)	Allow	Inbound	User PC → Bastion host

5. Access Database

This section explains the process of users accessing Database through a DB access client program.

This guide explains how to connect using MySQL Workbench. Since various Database client programs and CLI utilities are available, users can install and use the tool that suits them best.

5-1. Access Bastion Host

Run Remote Desktop Connection in the Windows environment of the PC from which you want to access the Bastion host, enter the Bastion Host’s NAT IP, and click Connect button.
When Remote Desktop Connection is successful, User Credential Input Window will open. Enter the ID and Password verified in 2-3. Verify Bastion Host Access ID and PW and click Confirm button.

5-2. Install DB Access Client Program (MySQL Workbench) Inside Bastion Host

Go to the MySQL official page and download the MySQL Workbench program.
- MySQL Workbench program download path: https://dev.mysql.com/downloads/workbench
Connect your PC’s hard drive to upload the file to the Bastion host.
Click Details button in the local devices and resources item on the Local Resources tab of Remote Desktop Connection.
Select the local disk of the location where the file was downloaded and click Confirm button.
Copy the downloaded file and upload it to the Bastion Host, then click the MySQL Workbench installation file to install it.

5-3. Access Database Using DB Access Client Program (MySQL Workbench)

Run MySQL Workbench and click Database > Manage connections. Manage Server Connection popup window will appear.
Click New button at the bottom left of the Manage Server Connection popup window, enter the Database server information created in 3-1. Create MariaDB(DBaaS) Service, and click Test Connection button. Password popup window will appear.
Required Input Item Input Value
Connection Name User specified (ex. Service Name)
Host name Database Server IP
Port Database Port
Username Database Username
Table.DB Access Client Program Input Items
Enter the password set in 3-1. Create MariaDB(DBaaS) Service in the Password popup window and click OK button. When success is complete, click OK button in the Manage Server Connection popup window.
Click Database > Connect to Database. Connect to Database popup window will appear.
Select the Connection Name registered in Stored Connection to perform Database access. After connection, you can perform simple queries, etc.

Required Input Item	Input Value
Connection Name	User specified (ex. Service Name)
Host name	Database Server IP
Port	Database Port
Username	Database Username