This page is part of MariaDB's MariaDB Documentation.
The parent of this page is: Connect and Query
Topics on this page:
To connect to a SkySQL service:
The service must be "Healthy"
The client's IP address must be added to the service's IP Allowlist
The client must be configured with service details (such as host, port, username, and password) which can be retrieved using the SkySQL Portal or by API
These instructions use the SkySQL Portal to retrieve service information. Alternatively, you can use the SkySQL DBaaS API.
Login to the SkySQL Portal.
Access the list of "Your services". This is the default view when logging-in to the SkySQL Portal, but can also be accessed as "Your Services" in the main menu.
Service status is shown on the "Your services" page.
To connect to a SkySQL service, status must be "Healthy".
You cannot connect to services in a "Pending", "Stopped", or "Deleting" status.
Host and Port
Hostname and Port are shown on the "Your services" page. Expand the Service Details view (using the arrow icon next to the service name) to see this information.
Hostname is listed as the "Fully Qualified Domain Name".
TCP Port is listed as "Read-write port". Some services also accept read-only connections via a "Read-only port".
For initial connections to a SkySQL service, a database username and a default password are assigned when a new SkySQL service is launched.
The username and default password are accessed from the "Your services" page. Click on the "Connect to Service" (globe icon) link to access this information.
The default password should be changed as detailed on the "Connect to Service" page.
You may also connect to your SkySQL service using database user accounts you create. For additional information, see "Database User Accounts".
Certificate Authority Chain
By default, connections to SkySQL services occur over TLS to provide data-in-transit encryption.
A certificate authority chain (.pem file) must be provided to your client for proper TLS certificate validation.
The certificate authority chain is accessed from the "Your services" page. Click on the "Connect to Service" (globe icon) link, then "Download" the certificate authority chain.
By default, SkySQL services block inbound connections. To enable connection from your client, the client's public IP address must be added to the IP Allowlist.
The IP Allowlist is managed from the "Your services" page. Expand the Service Details view (using the arrow icon next to the service name).
For new services, you can access the IP Allowlist using the "Set up secure access" button.
For existing services, click on the gear icon, then choose "Security Access" from the menu.
Add all IPv4 addresses or IPv4 netblocks which should be allowed to connect to the service.
For additional information, see "IP Allowlist for Services".
AWS PrivateLink and GCP VPC Network Peering
AWS PrivateLink and GCP VPC Network Peering are available options that change the way you connect to SkySQL services, allowing connections which do not transit the public internet. Configurations are customer-specific and cloud-specific. If PrivateLink or VPC peering are enabled, please refer to the instructions provided by MariaDB Support.