Security Groups

TiDB supports the security group function. Once a user account has activated this function, when creating a cluster in a region that supports security groups, TiDB will automatically create and join a security group. This security group defines a rule for group communication and a rule that allows all traffic, each TiDB uses a separate security group. After the cluster is successfully created, the user can modify the security group rules to meet their needs (do not modify the group communication rules, otherwise it will cause the network between the clusters to be unavailable).

Default matters:

• New nodes and nodes to be expanded will be added to the current security group of the cluster by default
• The security group where each TiDB is located defines a rule for group communication and a rule that allows all traffic
• By default, up to 50 security groups under the same account
• Single security group rule limit: 100 incoming rules, 100 outgoing rules

Viewing Security Groups

After enabling the corresponding regional security group permissions, find “UVPC Private Network” in the product list on the homepage of the website and click to enter

Click the “Details” button in the operation bar to view the resources bound to this security group and the security rules

Modifying Security Groups

For specific operations, please refer to the Security Group Operation Document