Networking – Mysql port forward and access from any pc outside network

MySQLnetworkingport-forwardingrouter

I created a application that use mysql and it will be public. I port forwarded mysql default port on my router and i want that anyone would be able to connect to mysql that is on my computer outside network. (anyone who gets my application ANYONE anywhere). But i dont know how to setup connection for that how do i do that soo anyone can connect to mysql that is on my computer?. This is how the connection string should look like:

"server=my ip;userid=user;password=something;database=databasename"

with default port that is port forwarded. I hope you understand what i want if no i will try to format it and explain better.

Best Answer

The MySQL server likely needs to be told to listen to connections from the outside. Depending on which distribution you use, find or create the right .cnf file (typically /etc/mysql/conf.d/local.cnf or worse /etc/my.cnf) with a [mysqld] block and add the line:

bind-address = 0.0.0.0

Afterwards, restart the MySQL service (typically service mysql restart) and check that lsof -n -i TCP:3306 says the same (as opposed to 127.0.0.1), and obviously check if you can connect to it from the outside.

Related Solutions

MySQL Over SSH – How to Expose a Server via SSH Tunnel

This fragment of the ss output

127.0.0.1:3306

indicates sshd listens on the IPv4 port 3306 only on the loopback interface. Your communication from the outside comes via another (non-loopback) interface.

See man 5 sshd_config:

GatewayPorts
Specifies whether remote hosts are allowed to connect to ports forwarded for the client. By default, sshd(8) binds remote port forwardings to the loopback address. This prevents other remote hosts from connecting to forwarded ports. GatewayPorts can be used to specify that sshd should allow remote port forwardings to bind to non-loopback addresses, thus allowing other hosts to connect. The argument may be no to force remote port forwardings to be available to the local host only, yes to force remote port forwardings to bind to the wildcard address, or clientspecified to allow the client to select the address to which the forwarding is bound. The default is no.

So you need

GatewayPorts yes in your sshd_config; or

alternatively GatewayPorts clientspecified and then one of these:

ssh -R               :3306:localhost:3306 …  # note the extra `:'
ssh -R            '*':3306:localhost:3306 …
ssh -R proper_IP_here:3306:localhost:3306 …

Don't forget you need to reload/restart sshd. Also check if the firewall on the NAS doesn't block the port.

Best Answer

Related Solutions

MySQL Over SSH – How to Expose a Server via SSH Tunnel

Related Question