Due to the way in which SSL encryption is implemented, enabling SSL encryption will significantly increase the CPU usage rate. Enable SSL encryption when there is an encryption requirement for the external network link. The intranet link is relatively safe, and generally no link encryption is required.

If the RDS instance is a multi-node instance, the system will trigger the active/standby switch after the SSL service is disabled.

When using read/write splitting, you can also enable SSL encryption to improve the security of the connection.

It is discovered that an Alibaba Cloud RDS SSL certificate is about to expire, and the validity period needs to be updated, requiring that the certificate be updated, then reinstalled. This will restart the RDS instance.