Yenza i-MySQL isebenzise i-TCP port edlulisiwe

Gwema ukukhetha i-Unix socket yasendaweni lapho iklayenti le-MySQL kufanele lixhume nge-SSH TCP forwarding.

I-SSH forwarding ilalela ku-port yasendaweni engu-13306, kodwa i-mysql isaxhuma nedathabheyisi yasendaweni—noma ibika ukuthi i-Unix socket yayo yasendaweni ayikho. Ku-Unix, iklayenti le-MySQL elinikezwa i-localhost lingakhetha i-Unix socket esikhundleni se-TCP. Ukunikeza i-port akuguquli ngempela lokho kukhetha.

Kum-forward ye-TCP esivele igunyaziwe, yenza iphrothokholi icace:

mysql --protocol=TCP --host=127.0.0.1 --port=13306 \
  --user=dbuser --password

Igama lomsebenzisi liyisibonelo nje; inketho yephasiwedi icela okokufaka okusebenzisanayo. Umyalo uxhuma kumsingathi we-TCP wasendaweni esikhundleni se-Unix socket.

Gcina ukungena kokubili kuhlukene

Umzila we-SSH oqinile ungaba nalesi simo:

ssh -N -L 127.0.0.1:13306:db.internal:3306 [email protected]

Iseva ye-SSH yesango ifinyelela ku-db.internal:3306. Bese i-MySQL iqinisekisa i-akhawunti yedathabheyisi ngalowo mphambosi wamabhayithi. Ukhiye we-SSH owamukelwe awunikezi ukungena kudathabheyisi, futhi imikhawulo yomthombo wedathabheyisi ibona ukuxhumana kufika ngalezo zinhlangothi zomzila.

Lona yi-adaptha ye-TCP eqinile, hhayi isethingi ye-SOCKS esetshenziswa yi-mysql. Uhlelo lokusebenza aludingi izingxoxo ze-SOCKS ngoba iphoyinti lokugcina le-forward linesimo esisodwa esinqunyiwe ngaphambilini.

Gcina ubunikazi be-TLS bedathabheyisi obuhlosiwe kanye nenqubomgomo yesitifiketi lapho kusetshenziswa khona. Ukuxhuma i-socket ku-loopback akwenzi isitifiketi sedathabheyisi sisebenze kwelinye igama lesevisi. Ukuxhumana kwe-TCP kwasendaweni okuphumelelayo kunquma ukukhetha kwezokuthutha, hhayi ukuqinisekiswa kwedathabheyisi okulandelayo noma izihlolo ze-TLS.

Izihloko ezihlobene