Cloud SQL Language Connectors overview

This page summarizes the Cloud SQL Language Connectors and how to use them with your instances.

Cloud SQL Language Connectors are libraries that provide encryption and IAM authorization when connecting to a Cloud SQL instance. Cloud SQL Language Connectors create authorized connections to the proxy-side server on behalf of a user's application and pass that connection to the application's database driver. They don't provide a network path to a Cloud SQL instance if one is not already present.

Cloud SQL Language Connectors use a client-side component to connect to a proxy server on the Cloud SQL instance. The connector creates a temporary certificate that authorizes the holder to connect to the server-side proxy. The server-side proxy limits access to the Cloud SQL database by requiring a valid TLS certificate in order to connect.

Cloud SQL currently supports the following Cloud SQL Language Connectors:

Cloud SQL recommends using Cloud SQL Language Connectors to connect to your Cloud SQL instance. You can also to connect to a Cloud SQL instance include using a database client or the Cloud SQL Auth Proxy. For more information about connecting to a Cloud SQL instance, see About connection options.

Benefits of Cloud SQL Language Connectors

Cloud SQL Language Connectors provide the following benefits with connecting to a Cloud SQL instance:

  • IAM authorization: Uses identity and access management (IAM) permissions to control who or what can connect to your Cloud SQL instances.
  • Convenience: Removes the requirement to manage SSL certificates, configure firewall rules, or enable authorized networks.

What's next