tencent cloud

After a TencentDB for MongoDB instance is initialized, you can read, write, and query it by using either MongoDB shell or drivers in various programming languages.

Background

Through shell

MongoDB shell is an interactive JavaScript command line tool that comes with MongoDB and encapsulates many common commands. After installing MongoDB shell on a CVM instance, you can run shell commands to connect to the MongoDB instance and query, write/read, or update database data.

Note：

A CVM instance can be used to connect to the private network address that is automatically assigned to a TencentDB instance. This access method utilizes the high-speed private network of Tencent Cloud and features low delay. Both instances should be under the same account and reside in the same VPC in the same region or reside in the classic network. Public network access is not supported for the time being.

Through URI

A Uniform Resource Identifier (URI) uniquely identifies a resource on the Web. MongoDB recommends using URIs to connect to MongoDB databases, which is supported by most drivers.

Typical samples of URI connection are as follows:

mongodb://username:password@IP:27017/admin

mongodb://username:password@IP:27017/somedb?authSource=admin

mongodb://username:password@IP:27017/somedb?authSource=admin&readPreference=secondaryPreferred

URI parameters are described as follows. For more information, see Connection String URI Format.

Parameter	Description	Required
mongodb://	A specific string indicating MongoDB protocol	Yes
username	Username used to log in to MongoDB	Yes. For more information, see Default user.
password	Password used to log in to MongoDB	Yes
hostX:portX	MongoDB IP and port	Yes
/admin	Database to be authenticated, which is always admin for TencentDB for MongoDB	Yes. For more information, see Authentication database.
authMechanism=MONGODB-CR	Authentication mechanism	Yes. For more information, see Authentication mechanism.
authSource=admin	Database used for authentication, which is always admin for TencentDB for MongoDB	Yes. For more information, see Authentication database.
readPreference=secondaryPreferred	Read a secondary node first	No. For more information, see Read preference.

Connecting to Databases Through Shell

The following describes how to connect to databases through MongoDB shell.

Prerequisites

• Sign up for a Tencent Cloud account and complete identity verification.
• Create a Linux CVM instance in the same VPC and the same region as the TencentDB for MongoDB instance.
• You have created a TencentDB for MongoDB instance, and it is in Running status.
• You have obtained the username and password information for database instance access on the Account Management tab on the Database Management page. For detailed directions, see Account Management.
• You have obtained the private IP and port for database instance access in the instance list. For detailed directions, see Viewing Instance Details.

Directions

Step 1. Log in to the CVM instance

1. Log in to the CVM console.
2. On the left sidebar, select Instances.
3. Select a region at the top of the Instances page.
4. In the instance list, locate the CVM instance you created and click Log In in the Operation column.
5. Enter the user password you set when creating the CVM instance and log in.

Step 2. Download and decompress MongoDB shell

1. Go to the MongoDB shell installation directory and run the mkdir command to create a folder for easy management.
2. Go to the created folder and run the wget command to download MongoDB shell, as shown below:

   wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-XX.XX.XX.tgz
   

Note：

Select a MongoDB shell whose version matches both TencentDB for MongoDB and the CVM operating system. For more information, see the download address.
3. Run the tar command to decompress the downloaded installer of MongoDB shell, as shown below:

tar zxvf mongodb-linux-x86_64-rhel70-XX.XX.XX.tgz

Step 3. Connect to MongoDB

1. Run the cd command to enter the directory of the decompressed MongoDB shell, as shown below:

   cd mongodb-linux-x86_64-rhel70-XX.XX.XX
   

2. Run the following command to connect to MongoDB.

   ./bin/mongo -umongouser -plxh***** 172.xx.xx.xx:27017/admin 
   

Here, -u is followed by the database connection username, -p is followed by the username password, and 172.xx.xx.xx and 27017 specify the IP and port of the TencentDB for MongoDB instance respectively. Replace them with your actual configuration information. If you forgot the username and password, view and modify the account and password as instructed in Account Management.
You can get the private IP and port for database instance access in the instance list.

If you need to access multiple IPs, you can separate them with commas, such as --host 172.XX.XX.XX:27017,172.XX.XX.XX:27017,172.30.XX.XX:27017.
After a successful connection, the following information will be displayed:

MongoDB shell version v4.2.16
connecting to: mongodb://172.x.x.X:27017/admin?compressors=disabled&gssapiServiceName=mongodb
Implicit session: session { "id" : UUID("aeb18f32-6413-49da-864a-5123b4d2****") }
MongoDB server version: 4.2.11
Welcome to the MongoDB shell.

Note

• For a replica set instance, you can connect to the address of the primary node, secondary node 1, or secondary node 2.
  Primary node: If you connect to the primary node, you can write to or read from the database.
  Secondary node: If you connect to a secondary node, you can only read from the database.
• For a sharded cluster instance, you can connect to the address of any mongos node.

Connecting to Databases Through URI

The following describes how to use URIs to connect to TencentDB for MongoDB from the SDK client which supports various programing languages.

Prerequisites

• Sign up for a Tencent Cloud account and complete identity verification.
• Prepare a running environment for the SDK client which supports various programing languages.

Connection sample

To connect to TencentDB for MongoDB, the driver version 3.2 or above is required. Use the latest version of the client driver to ensure the best compatibility with the shell kit, Java jar package, PHP expansion, Node.js module, etc. For more information, see MongoDB Drivers.

SDK connection samples in various programing languages supported by TencentDB for MongoDB are listed below. Based on those samples, you can configure URIs to connect to, write to, or read from the database.

• Shell Connection Sample.
• PHP Connection Sample
• Node.js Connection Sample
• Mongoose Connection Sample
• Java Connection Sample
• Python Connection Sample
• Go Connection Sample
• PHP Reconnection Sample

Connecting to a MongoDB 4.0 Replica Set Instance Through URI

The connection method for MongoDB replica set instances (v4.0) is different from that of other versions. Three IPs are provided on v4.0 for access, corresponding to three nodes in a replica set. When connecting to the instance in a production environment, you are recommended to configure three IPs in the connection string to make the connection more secure and efficient.

Directions

1. Log in to the TencentDB for MongoDB console.
2. Select NoSQL Database > MongoDB > Replica Set Instance on the left sidebar.
3. Select the region where your instance resides in the upper-left corner on the displayed page.
4. Click the ID of the target v4.0 instance in the instance list and enter the instance details page.
5. In the Basic Info block, click Copy Connection String next to Private IPv4 Address to get the instance URI in the following format:

   mongodb://mongouser:******@192.168.xx.xx:27017,192.168.x.xx:27017,192.168.x.xx:27017/admin?authSource=admin&replicaSet=cmgo-******
   

6. Use the URI to connect to the replica set instance. For more information, see Connection sample.

References

Default user

TencentDB for MongoDB v3.2 uses both mongouserand rwuser as the default users, while other versions only use mongouser as the default user. On the Database Management page in the TencentDB for MongoDB console, you can view system accounts (i.e., default users) and manage permissions as needed.

• Only rwuser is authenticated with MONGODB-CR. Below is a sample URI:

  mongodb://rwuser:password@10.66.100.186:27017/admin?authMechanism=MONGODB-CR
  

mongodb://rwuser:password@10.66.100.186:27017/somedb?authMechanism=MONGODB-CR&authSource=admin

• Both mongouser and users created in the TencentDB for MongoDB console are authenticated with SCRAM-SHA-1. Below is a sample URI:

  mongodb://mongouser:password@10.66.100.186:27017/admin
  

mongodb://mongouser:password@10.66.100.186:27017/somedb?authSource=admin

Authentication database

TencentDB for MongoDB uses the admin database as the authentication database during login authentication, so the port in a URI must be followed by /admin to specify it. After authentication, you can switch to a specific business database for reads/writes. Below is a sample URI:

mongodb://username:password@IP:27017/admin

You can also directly access the target database by specifying the target database for reads/writes and an additional authentication database parameter (authSource=admin). Below is a sample URI:

mongodb://username:password@IP:27017/somedb?authSource=admin

You must use one of the above methods to add admin as the authentication database into the URI.

Authentication mechanism

TencentDB for MongoDB supports the MONGODB-CR and SCRAM-SHA-1 authentication mechanisms as well as the rwuser and mongouser default users. You can create other users in the TencentDB for MongoDB console. Different users adopt different authentication mechanisms.

Username	Authentication Mechanism	URI Requirement
rwuser	MONGODB-CR	The parameter authMechanism=MONGODB-CR must be added.
mongouser and users created in the console	SCRAM-SHA-1 (recommended)	No parameter needs to be added.

Read preference

TencentDB for MongoDB provides a load balancer IP to access the entire replica set. To read from a secondary node, you need to add the readPreference parameter in the URI. Parameter values are described below:

Value	Description	Default
primary	Reads the primary node only.	Yes
primaryPreferred	Reads the primary node first. If it is not available, a secondary node will be read.	No
secondary	Reads a secondary node only. If it is not available, an error will be reported.	No
secondaryPreferred	Reads a secondary node first. If it is not available, the primary node will be read.	No

To read a secondary node first, you can configure the URI as follows:

mongodb://username:password@IP:27017/admin?readPreference=secondaryPreferred