Connection Parameters

Overview

To connect to a SkySQL service:

  • The service must be "Healthy"

  • The client's IP address must be added to the service's IP Allowlist

  • The client must be configured with service details (such as host, port, username, and password) which can be retrieved using the SkySQL Portal or by API

These instructions use the SkySQL Portal to retrieve service information. Alternatively, you can use the SkySQL DBaaS API.

Your Services

  1. Login to the SkySQL Portal.

  2. Access the list of "Your services". This is the default view when logging-in to the SkySQL Portal, but can also be accessed as "Your Services" in the main menu.

Service Status

Service status is shown on the "Your services" page.

To connect to a SkySQL service, status must be "Healthy".

You cannot connect to services in a "Pending", "Stopped", or "Deleting" status.

Host and Port

Hostname and Port are shown on the "Your services" page. Expand the Service Details view (using the arrow icon next to the service name) to see this information.

Hostname is listed as the "Fully Qualified Domain Name".

TCP Port is listed as "Read-write port". Some services also accept read-only connections via a "Read-only port".

User Credentials

For initial connections to a SkySQL service, a database username and a default password are assigned when a new SkySQL service is launched.

  • The username and default password are accessed from the "Your services" page. Click on the "Connect to Service" (globe icon) link to access this information.

  • The default password should be changed as detailed on the "Connect to Service" page.

You may also connect to your SkySQL service using database user accounts you create. For additional information, see "Database User Accounts".

Certificate Authority Chain

By default, connections to SkySQL services occur over TLS to provide data-in-transit encryption.

A certificate authority chain (.pem file) must be provided to your client for proper TLS certificate validation.

The certificate authority chain is accessed from the "Your services" page. Click on the "Connect to Service" (globe icon) link, then "Download" the certificate authority chain.

IP Allowlist

By default, SkySQL services block inbound connections. To enable connection from your client, the client's public IP address must be added to the IP Allowlist.

The IP Allowlist is managed from the "Your services" page. Expand the Service Details view (using the arrow icon next to the service name).

  • For new services, you can access the IP Allowlist using the "Set up secure access" button.

  • For existing services, click on the gear icon, then choose "Security Access" from the menu.

Add all IPv4 addresses or IPv4 netblocks which should be allowed to connect to the service.

For additional information, see "IP Allowlist for Services".