Comment on Security vulnerability in MySQL ubuntuparentComments−dawkins14yWhat is the best way to enable replication without access to the database? ssh tunnel?−_b8r014yBest? Probably an infrastructure VPN across databases. Have you database listen on the MPLS link and limit access to the service based on IP addresses and strong authentication.Cheapest? SSH tunnel or openvpn point to point link.−viraptor14yVpn, gre, whatever flavour you like. That's for replication between sites though. Internally there's nothing wrong with direct connection.
Comments
What is the best way to enable replication without access to the database? ssh tunnel?
Best? Probably an infrastructure VPN across databases. Have you database listen on the MPLS link and limit access to the service based on IP addresses and strong authentication.
Cheapest? SSH tunnel or openvpn point to point link.
Vpn, gre, whatever flavour you like. That's for replication between sites though. Internally there's nothing wrong with direct connection.