Connecting mysql Client Using IP Addresses

MySQL   |  PostgreSQL

This page describes how to connect a mysql client, either running locally on your client machine or in the Cloud Shell, to your Google Cloud SQL instance over IP.

Note: For information about connecting mysql client to a Cloud SQL instance using the Cloud SQL Proxy, see Connecting mysql Client Using the Cloud SQL Proxy.

Before you begin

Before you can start using the mysql client you must have:

• Created a Cloud SQL instance, including configuring the default user.
  For more information about creating instances, see Creating Instances.
  For more information about configuring the default user, see Configuring the default user account.
• Determine how you will connect to your instance.
  For information about the available connection options and how to choose between them, see Connection Options for External Applications.

Using a local mysql client

Using a local mysql client to connect to your Cloud SQL instance involves three high-level tasks:

1. Install the mysql client
2. Configure access to your Cloud SQL instance
3. Connect to your Cloud SQL instance

Install the mysql client

To install the mysql client:

Debian/Ubuntu

Install the MySQL client from the package manager:

sudo apt-get update
sudo apt-get install mysql-client

CentOS/RHEL

Install the MySQL client from the package manager:

sudo yum install mysql

openSUSE

Install the MySQL client from the package manager:

sudo zypper install mysql-client

Other platforms

1. Download the MySQL Community Server for your platform from the MySQL Community Server download page.
   The Community Server includes the MySQL client.
2. Install the Community Server, following the directions on the download page.

For more information about installing MySQL, see the MySQL Reference Manual Installing and Upgrading MySQL.

Configure access to your Cloud SQL instance

To configure access to your instance:

1. Go to the Cloud SQL Instances page in the Google Cloud Platform Console.

   Go to the Cloud SQL Instances page

2. Click the instance to open its Overview page, and record its IPv4 address.
3. Log in to the client machine where your mysql client is installed.
4. Click What's my IP to determine the IP address of the client machine.
Note: The IP address of the instance and the client IP address you authorize must be the same IP version: either IPv4 or IPv6.
5. In the Instances page in the Google Cloud Platform Console, click the instance to open its Overview page.
6. Select the Authorization tab.
7. Under Authorized networks, click Add network and enter the IP address of the client machine where your client is installed.
8. Click Done, then click Save at the bottom of your page to save your changes.
9. Connect to your instance, either with SSL or without SSL.

Connect to your Cloud SQL instance without encryption

Note: This procedure configures an unencrypted connection to your database. If your database contains sensitive data, you should connect to your instance using SSL.

To connect to your instance:

1. Install the mysql client and configure access to your instance, if you have not done so already.
2. Start the mysql client:

   mysql --host=[INSTANCE_IP] --user=root --password
   

3. Enter your password.
4. You should see the mysql prompt.

Need help? See our Cloud SQL Support page.

Connect to your Cloud SQL instance using SSL

To connect to your instance using SSL:

1. If you do not already have a client certificate and its corresponding private key, create a certificate by following the instructions at Creating a new client certificate.
   You should have the following three items:
   • A Certificate Authority (CA) certificate, with its text in a file called server-ca.pem.
   • A server public key certificate, with its text in a file called client-cert.pem.
   • A client private key, with its text in a file called client-key.pem.
2. Install the mysql client and configure access to your instance, if you have not done so already.
3. Start the mysql client:

   mysql --ssl-ca=server-ca.pem --ssl-cert=client-cert.pem --ssl-key=client-key.pem \
                --host=[INSTANCE_IP] --user=root --password
   

4. Enter the password.
5. At the MySQL prompt, enter the \s command to verify that your connection is using SSL.
6. Look for the output line with SSL:.

   ...
   SSL:                     Cipher in use is DHE-RSA-AES256-SHA
   ...
   

   Warning: MySQL client versions prior to 5.7.3 consider the --ssl options as advisory, and silently fall back to unencrypted connections if the server does not accept an encrypted connection. For more information, see Command Options for Secure Connections in the MySQL Reference Manual. To avoid this issue, you can configure the instance so that only SSL connections can connect to it (for more information, see Configuring SSL for Instances).

   For information about troubleshooting connection issues over IP, see Diagnosing Issues with Cloud SQL Instances.

Need help? See our Cloud SQL Support page.

Using the mysql client in the Cloud Shell

You must have the Cloud SQL Editor role, or some role with the cloudsql.instances.update permission, to use Cloud Shell to connect to your instance.

1. Go to the Google Cloud Platform Console.

   Go to the Google Cloud Platform Console

2. Click the Cloud Shell icon towards the right in the tool bar.

   The Cloud Shell takes a few moments to initialize.

3. At the Cloud Shell prompt, use the built-in mysql client to connect to your Cloud SQL instance:

   gcloud sql connect [INSTANCE_ID] --user=root
   

4. Enter your password.

Cloud Shell connections do not support SSL. Connections from Cloud Shell fail if the instance is configured to accept only SSL connections.

Need help? See our Cloud SQL Support page.

What's next

• Learn about the two levels of access control for Cloud SQL instances.
• Create users and databases.
• Learn about options for connecting to your instance from your application.
• Learn about MySQL Client.
• Learn about options for support.