MySQL(DBaaS) server connection

Scenario Overview

The MySQL(DBaaS) server connection scenario is a scenario where a Bastion host (Virtual Server) and Database service are created, and the DB service is accessed through the Bastion host. To connect to MySQL(DBaaS) stably in the Samsung Cloud Platform environment, it is necessary to create a Bastion host and use it for network connection. To maintain a stable and high level of security, it is recommended to configure the Database service in a Private Subnet environment and configure the Bastion host in a limited Public Subnet environment.

This scenario largely describes the process of creating a Bastion host and Database service, and configuring the network environment for Bastion host and Database connection, so that it can be accessed through a DB connection client.

Scenario Components

You can configure the scenario using the following services.

Scenario composition method

To configure the scenario, create the necessary services through the following procedure.

1. Configuring the Network

This explains the process of configuring the network environment for Bastion Host and Database service connection.

1-1. Creating a VPC

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. On the Service Home page, click the Create VPC button. It moves to the Create VPC page.
3. VPC Creation page, please enter the information needed to create the service.
   • IP range should be entered as 192.168.x.0/16.
4. In the Summary panel, review the detailed information and estimated charge, then click the Complete button.
   • Once the creation is complete, check the created resource on the VPC list page.

1-2. Creating a Subnet

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Service Home page, click the Subnet menu. It moves to the Subnet list page.
3. Click the Subnet Creation button. It moves to the Subnet Creation page.
4. Subnet creation page where you enter the information needed to create a service.
   • Subnet type should be selected as General.
   • Please select a pre-created VPC.
   • IP range should be entered as 192.168.x.0/24.
5. In the Summary panel, review the detailed information and estimated charges, then click the Complete button.
   • After creation is complete, check the created resource on the Subnet list page.

1-3. Creating an Internet Gateway

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Service Home page, click the Internet Gateway menu. It moves to the Internet Gateway list page.
3. Click the Create Internet Gateway button. It moves to the Create Internet Gateway page.
4. Internet Gateway creation page, please enter the required information necessary for service creation.
   • Please select a pre-created VPC.
   • Select use in the Firewall usage item.
5. In the Summary panel, review the detailed information and estimated charges, then click the Complete button.
   • Once the creation is complete, check the created resource on the Internet Gateway list page.

1-4. Creating a Public IP

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Click the Public IP menu on the Service Home page. It moves to the Public IP list page.
3. Public IP Reservation button, click. Move to the Public IP Reservation page.
4. Public IP Reservation page where you enter the required information necessary for service reservation.
5. Check the detailed information generated in the Summary panel and the expected bill amount, and click the Complete button.
   • After creation is complete, check the created resource on the Public IP List page.

1-5. Creating a Security Group

1. Click the menu for all services > Networking > Security Group. It moves to the Service Home page of Security Group.
2. Click the Security Group Creation button on the Service Home page. It moves to the Security Group Creation page.
3. Security Group creation page where you enter the required information necessary for service creation.
4. Check the input information and click the Complete button.
   • Once creation is complete, check the created resource on the Security Group list page

2. Creating a Bastion Host

This describes the process of configuring the Bastion Host where the database connection client should be installed.

2-1. Creating a Server Keypair

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Click the Keypair menu on the Service Home page. It moves to the Keypair list page.
3. Keypair creation button should be clicked. It moves to the Keypair creation page.
4. Keypair creation page, please enter the required information necessary for service creation.
5. Check the creation information and click the Complete button.
   • The key can only be downloaded for the first time, and re-issuance is not provided.
   • Please keep the downloaded key in a safe place.

2-2. Creating a Bastion Host

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Click the Virtual Server Creation button on the Service Home page. It moves to the Virtual Server Creation page.
3. Virtual Server Creation page, please enter the required information necessary for service creation.
   • The image is Windows, please select.
   • Please select the pre-created VPC and Subnet.
   • Click NAT Use and select the Public IP reserved in 1-4. Creating Public IP.
   • 2-1. Creating a server Keypair Connect the Keypair created from
4. Summary panel, check the detailed information generated and the expected billing amount, and click the Complete button.
   • Once creation is complete, check the created resource on the Virtual Server list page.

2-3. Check Bastion host connection ID and PW

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Service Home page, click the Virtual Server menu. Move to the Virtual Server list page.
3. Virtual Serve list page, click on the resource created in 2-2. Creating a Bastion host. It moves to the detailed information page of the corresponding resource.
4. Click the RDP password inquiry button in the Keypair item on the detailed information page. The RDP password inquiry popup window opens.
5. RDP password inquiry popup window, attach the keypair file downloaded from 2-1. Creating a server keypair.
6. After attaching, click the Password Check button. The ID and password required to access the resource will be displayed.
   • The ID and Password will be used as information to access the Bastion host later in 5-1. Bastion host 접속하기.

3. Creating a Database

It describes the process of creating a database service.

3-1. Creating a MySQL (DBaaS) Service

1. Click on the menu for all services > Database > MySQL(DBaaS). It moves to the Service Home page of MySQL(DBaaS).
2. On the Service Home page, click the Create MySQL(DBaaS) button. It moves to the Create MySQL(DBaaS) page.
3. MySQL(DBaaS) creation page, please enter the required information needed for service creation.
   • Select and connect the pre-created VPC and Subnet.
   • Enter database-related creation information on the required information input screen.
   • Add the Bastion host IP to the IP access control item.
   • Database Port is 2866 by default, but you can specify it as you want.
4. In the Summary panel, review the detailed information and estimated charges, then click the Complete button.
   • Once the creation is complete, check the created resource on the MySQL(DBaaS) list page.

4. Setting Rules

This explains the process of setting rules for users to access the Bastion host and rules for the Bastion host to access the Database.

4-1. Adding Security Group Security Rules

1. Click the menu for all services > Networking > Security Group. It moves to the Service Home page of Security Group.
2. Service Home page, click the Security Group menu. Move to the Security Group list page.
3. 1-5. Creating a Security Group Select the Security Group resource created from. It will move to the detailed information page of the corresponding resource.
4. Click the Rules tab on the detailed information page. It moves to the Rules tab.
5. Click the Rule tab and click the Add Rule button. It moves to the Add Rule popup window.
6. Add Rule popup window, enter the rules below, and click the OK button

4-2. Adding IGW Firewall Rules

1. Click All services > Networking > Firewall menu. It moves to the Service Home page of Firewall.
2. Service Home page, click the Firewall menu. It moves to the Firewall list page.
3. Firewall list page, select the Internet Gateway resource name created in 1-3. Creating Internet Gateway, and move to the detailed information page of the corresponding resource.
4. Click the Rules tab on the detailed information page. It moves to the Rules tab.
5. Click the Rule tab and click the Add Rule button. It moves to the Add Rule popup window.
6. Add Rule In the popup window, enter the rules below and click the OK button.

5. Connect to Database

This describes the process of a user accessing the Database through a DB connection client program.

This guide provides instructions on how to connect using MySQL Workbench. There are various database client programs and CLI utilities, so you can install and use the tools that suit you.

5-1. Connecting to the Bastion host

1. Run Remote Desktop Connection in the Windows environment of the PC you want to access the Bastion host, enter the NAT IP of the Bastion Host, and click the Connect button.
2. After a successful remote desktop connection, the User Credential Input Window opens. Enter the ID and Password confirmed in 2-3. Checking Bastion Host Access ID and PW and click the Confirm button.

5-2. Install DB connection client program (MySQL Workbench) on the Bastion host

1. Go to the official MySQL page and download the MySQL Workbench program.
   • MySQL Workbench program download path: https://dev.mysql.com/downloads/workbench
2. Connect the hard drive of the user’s PC to upload the file to the Bastion host.
3. Click the Details button for local devices and resources entries in the Local Resources tab of Remote Desktop Connection.
4. Select the local disk where the file was downloaded to the drive and click the Confirm button.
5. Copy the downloaded file and upload it to the Bastion Host, then click the MySQL Workbench installation file to install it.

5-3. Using DB connection client program (MySQL Workbench) to connect to the Database

1. Run MySQL Workbench and click Database > Manage connections. The Manage Server Connection popup window will appear.
2. Manage Server Connection popup window, click the New button at the bottom left and enter the database server information created in 3-1. MySQL(DBaaS) service creation, then click the Test Connection button. A Password popup window will appear.

   Required Input Element Items	Input Value
   Connection Name	Custom (ex. Service Name)
   Host name	Database server IP
   Port	Database Port
   Username	Database username

   DB connection client program input items
3. Password popup window, enter the password set in 3-1. MySQL(DBaaS) service creation and click the OK button. When the success is complete, click the OK button in the Manage Server Connection popup window.
4. Database > Connect to Database should be clicked. The Connect to Database popup window will appear.
5. Select the Connection Name registered in Stored Connection to perform database connection. After connection, you can try simple queries, etc.