Configuring Cluster Connections

Configuring the connections to your ClickHouse® cluster

The Altinity Cloud Manager (ACM) makes it easy to control how applications can connect to your ClickHouse® clusters. Anyone with access to the cluster (roles envuser, envadmin, or orgadmin) can modify the basic settings. Go to the Clusters view and click Connections on the CONFIGURE menu:

You can whitelist IP addresses that applications can use to connect to the cluster. You can also enable the binary protocol (the native ClickHouse protocol) and the HTTP protocol:

Basic connection configuration

Some things to keep in mind:

  • The addresses in the IP restrictions text box only apply to applications connecting to your ClickHouse cluster. You can access the ACM from any IP address. (Assuming you have the proper credentials, of course.)
  • You can specify individual IP addresses or ranges of IP addresses in CIDR format. Separate each entry with commas or newlines.
  • Disabling IP restrictions means any application can connect to your ClickHouse cluster from any IP address. This is not recommended.
  • The defaults for the binary protocol (9440) and HTTP protocol (8443) can only be changed by an administrator.

Complete details on the configuration dialog are in the Configuring connections section of the Configuring Cluster page in the User Guide. Administrators (role orgadmin) can do more advanced configuration to address broader security concerns. Those are covered in the section Security access to your ClickHouseClusters in the Security Guide.