none
Connect to Azure MySQL with Google Data Studio using SSL RRS feed

Answers

  • Hi Krissmith,

    The link you were sourcing is for Application SSL connectivity with Azure Database for MySQL. It is applicable when integrating an Azure Web Application to Azure Database for MySQL using SSL.

    As for Google Data Studio, it appears that the intent is for you to be able to connect to *any* MySQL data source. With Azure Database for MySQL, you will need to add the correct IP or IP range to allow Google Data Studio access to your MySQL instance.

    Also, with regard to the SSL settings, you have no means for configuring the Server certificate which makes selecting the client certificate impossible. Google Data Studio MySQL Connector 

    • Marked as answer by krissmith Wednesday, November 21, 2018 5:25 PM
    Tuesday, November 20, 2018 10:08 PM
    Moderator
  • Following up....

    The instructions provide the Baltimore Cyber Trust Root Certificate: Obtain SSL Certificate

    The issue is that you don't have access to the client certificate nor the client private key. So, you couple possible get connected from Google Data Studio if you disable SSL and whitelist the following IP addresses:

    If your database is behind a firewall, you will need to open access to the all of the following IP addresses. These are used by Data Studio to connect to and query your MySql database:


    64.18.0.0/20
    64.233.160.0/19
    66.102.0.0/20
    66.249.80.0/20
    72.14.192.0/18
    74.125.0.0/16
    108.177.8.0/21
    173.194.0.0/16
    207.126.144.0/20
    209.85.128.0/17
    216.58.192.0/19
    216.239.32.0/19

    • Marked as answer by krissmith Wednesday, November 21, 2018 5:25 PM
    Tuesday, November 20, 2018 10:38 PM
    Moderator

All replies

  • Hi Krissmith,

    The link you were sourcing is for Application SSL connectivity with Azure Database for MySQL. It is applicable when integrating an Azure Web Application to Azure Database for MySQL using SSL.

    As for Google Data Studio, it appears that the intent is for you to be able to connect to *any* MySQL data source. With Azure Database for MySQL, you will need to add the correct IP or IP range to allow Google Data Studio access to your MySQL instance.

    Also, with regard to the SSL settings, you have no means for configuring the Server certificate which makes selecting the client certificate impossible. Google Data Studio MySQL Connector 

    • Marked as answer by krissmith Wednesday, November 21, 2018 5:25 PM
    Tuesday, November 20, 2018 10:08 PM
    Moderator
  • Following up....

    The instructions provide the Baltimore Cyber Trust Root Certificate: Obtain SSL Certificate

    The issue is that you don't have access to the client certificate nor the client private key. So, you couple possible get connected from Google Data Studio if you disable SSL and whitelist the following IP addresses:

    If your database is behind a firewall, you will need to open access to the all of the following IP addresses. These are used by Data Studio to connect to and query your MySql database:


    64.18.0.0/20
    64.233.160.0/19
    66.102.0.0/20
    66.249.80.0/20
    72.14.192.0/18
    74.125.0.0/16
    108.177.8.0/21
    173.194.0.0/16
    207.126.144.0/20
    209.85.128.0/17
    216.58.192.0/19
    216.239.32.0/19

    • Marked as answer by krissmith Wednesday, November 21, 2018 5:25 PM
    Tuesday, November 20, 2018 10:38 PM
    Moderator
  • Thank you for your quick reply Mike.  I do have it working now by white listing those IPs and Disabling SSL. 

    Thanks

     
    • Edited by krissmith Wednesday, November 21, 2018 5:30 PM
    Wednesday, November 21, 2018 5:25 PM
  • Hi,

    I am trying to do something similar i.e. connect Azure MySQL to Google Data Studio. I have added all the IP addresses and disabled SSL from Azure however I am getting the following error. 

    Sorry, we encountered an error and were unable to complete your request.

    
    

    Error ID: 2961a71c

    I am able to establish a connection using Workbench however, could you please advise on what I could do to debug?

    Thanks much

    Tuesday, December 11, 2018 7:44 AM
  • Hi Singhal2,

    Can you set-up some logging to capture more details about what is going on: Server Logs in Azure Database for MySQL

    You are going to need to set-up Diagnostic Logs if the Server Logs do not provide any insight. 

    Please let us know what you find.

    Regards,

    Mike

    Tuesday, December 11, 2018 7:21 PM
    Moderator
  • I have the same situation, Data Studio forces to have the server certificate, client certificate and client key but Microsoft only delivers the BaltimoreCyberTrustRoot.crt.pem certificate. I think that disabling SSL is a solution, but not the most recommended. Although communication is limited by adding Google IP addresses, there is still the risk of "man in the middle."
    Monday, August 12, 2019 4:02 PM