Product Solutions Support
Try MemSQL

Managing Security Groups

This topic describes how to create, modify, and apply Security Groups in MemSQL Cloud.

For security reasons, a new MemSQL Cloud cluster blocks all incoming connections from the internet. To access a cluster from a MySQL-compliant client, driver, or third-party service, you must create and then assign a Security Group to the cluster. A Security Group is a set of one or more allowed IP address ranges. Any connection requests originating from an allowed IP address will be routed to the cluster, otherwise the traffic will be blocked.

Creating a Security Group

The following steps describe how to create a new Security Group. Security Groups can only be created in the MemSQL Cloud Console.

  1. Go to the MemSQL Cloud Console and sign in.
  2. From the MemSQL Cloud Console, click Settings on the left menu.
  3. From the Settings menu, click Security Groups.
  4. From the Security Groups pane, click the Create Group button on the top-right of the page. The Create Security Group dialog appears.
  5. In the Create Security Group dialog, enter a name and optional description for the Security Group. Then click Create.
  6. The new Security Group is created, but it doesn’t contain any IP address ranges. Before you can assign the Security Group to your cluster, you need to provide these ranges. Click the Edit button for the Security Group.
  7. Two fields can now be populated with an IP Range and Description. First, provide a description for the IP address range. Then, enter the desired range using Classless Inter-Domain Routing (CIDR) notation. For example, to specify a single IP address, you might enter 192.168.100.0/0, where the /0 specifies an exclusive address that includes no other addresses. To include more addresses, specify the desired number of bits following the IP address, such as 192.168.100.0/22, which encompasses all addresses up to 192.168.103.255.
  8. After entering a description and IP address range, click Add. If you have no other IP address ranges, click Done.

The Security Group has now been configured and can be assigned to a cluster. To assign a Security Group to a cluster, see the section below.

Assigning a Security Group to a Cluster

You can assign a Security Group to a cluster while the cluster is being deployed or when it is a running state. When a Security Group is assigned to a cluster, it may take a few minutes to apply the changes. The Cluster Overview page for any given cluster will display the current status of this process.

To assign a Security Group during cluster creation

  1. In the final step of the cluster creation process, the While you’re waiting… dialog provides an option to assign a Security Group to the cluster. From the dialog, click the Select security groups button. The Select Security Groups page appears.
  2. Select one or more of your desired Security Groups from the list and click the Apply button on the bottom-right of the page.

To assign a Security Group to a deployed cluster

  1. Click Clusters and then the name of your desired cluster from the left menu. The Cluster Overview page appears.
  2. From the Cluster Overview page, click Manage beneath the Security Groups heading. The Select Security Groups page appears.
  3. Select one or more of your desired Security Groups from the list and click the Apply button on the bottom-right of the page.
Was this article useful?