[Yandex Cloud documentation](../../index.md) > [Yandex Managed Service for MySQL®](../index.md) > FAQ > Connection # Connecting to a MySQL® cluster * [How do I connect to a cluster?](#how-to-connect) * [Why cannot I connect from the internet?](#from-internet) * [Why cannot I connect from Yandex Cloud?](#from-yc) * [Why cannot I connect to a multi-host cluster?](#to-multi-host-cluster) * [Can I connect to cluster hosts over SSH or get superuser privileges on hosts?](#connect-ssh) * [What should I do if I get a revocation check error when using PowerShell to obtain an SSL certificate?](#get-ssl-error) * [Why would the connection limit be exceeded?](#connection-limit) #### How do I connect to a cluster? {#how-to-connect} View the connection examples in [this guide](../operations/connect/index.md#connection-string) or on the cluster page in the [management console](https://console.yandex.cloud) (click **Connect** in the top panel). MySQL® hosts with public access only support connections with an [SSL certificate](../operations/connect/index.md#get-ssl-cert). There are also special FQDNs pointing to the [current master](../operations/connect/fqdn.md#fqdn-master) and [most recent replica](../operations/connect/fqdn.md#fqdn-replica) of the cluster. #### Why cannot I connect from the internet? {#from-internet} Check whether your host is publicly accessible. To do this, in the [management console](https://console.yandex.cloud): 1. Navigate to the folder dashboard and select **Managed Service for MySQL**. 1. Click the name of your cluster and select the **Hosts** tab. 1. Check the **Public access** column value for your host. MySQL® hosts with public access only support connections with an [SSL certificate](../operations/connect/index.md#get-ssl-cert). Additionally, consider the following: * If public access in your cluster is only enabled for certain hosts, automatic master failover can make the master unreachable from the internet. * If you are using [special FQDNs](../operations/connect/fqdn.md#fqdn-master), check the host list to make sure the current master or replica have public access. * If you are using [Security groups](../concepts/network.md#security-groups), check their [settings](../operations/connect/index.md#configure-security-groups). #### Why cannot I connect from Yandex Cloud? {#from-yc} Make sure the Yandex Cloud VM you are connecting from is in the same virtual network as the MySQL® cluster. To do this, in the management console: 1. Navigate to the folder dashboard, select **Managed Service for MySQL**, and click the name of your cluster. 1. Check the **Cloud network** value and click the network’s name to see its subnets. 1. Make sure your VM is in one of the network’s subnets. Additionally, consider the following: * If you are connecting to a publicly accessible host, make sure to use an [SSL certificate](../operations/connect/index.md#get-ssl-cert). * If you are using [special FQDNs](../operations/connect/fqdn.md#fqdn-master), check the host list to make sure the current master or replica have public access. * If you are using [Security groups](../concepts/network.md#security-groups), check their settings. #### Why cannot I connect to a multi-host cluster? {#to-multi-host-cluster} If public access in your cluster is only enabled for certain hosts, automatic master failover can make the master unreachable from the internet. Check whether your host is publicly accessible. To do this, in the [management console](https://console.yandex.cloud): 1. Navigate to the folder dashboard and select **Managed Service for MySQL**. 1. Click the name of your cluster and select the **Hosts** tab. 1. Check the **Public access** column value for your host. Additionally, consider the following: * If you are using [special FQDNs](../operations/connect/fqdn.md#fqdn-master), check the host list to make sure the current master or replica have public access. * If you cannot connect to the host you added, check that the cluster [security group](../concepts/network.md#security-groups) is properly configured for the subnet containing your host. #### Can I connect to cluster hosts over SSH or get superuser privileges on hosts? {#connect-ssh} You cannot connect to hosts via SSH. This is done for the sake of security and user cluster fault tolerance because direct changes inside a host can render it completely inoperable. #### What should I do if I get a revocation check error when obtaining an SSL certificate via PowerShell? {#get-ssl-error} Complete error message: ```text curl: (35) schannel: next InitializeSecurityContext failed: Unknown error (0x80092012) The revocation function was unable to check revocation for the certificate ``` This indicates that the verification of the website’s certificate against the revocation list failed during the connection attempt. To fix this error: * Make sure your corporate network policies are not blocking the verification. * Run the following command with `--ssl-no-revoke`: ```powershell mkdir $HOME\.mysql; curl.exe --ssl-no-revoke -o $HOME\.mysql\root.crt https://storage.yandexcloud.net/cloud-certs/CA.pem ``` #### Why would the connection limit be exceeded? {#connection-limit} The maximum number of concurrent connections to a Managed Service for MySQL® cluster host is defined by the `max_connections` setting, which defaults to ` ÷ 32` and cannot be lower than 100. For example, for a s1.micro (2 vCPU, 8 GB) host, the default `max_connections` value is `8,192 ÷ 32 = 256`. You can [change](../operations/update.md#change-mysql-config) the **Max connections** value in the cluster settings.