I have a Master-Master MySQL replication setup between two servers. I'm about to move one to another location, so replication will be over the Internet and will - of course - need to be secured.
From what I can tell, I basically have two options:
- Use built-in SSL support in MySQL replication.
- Use SSH tunneling to forward ports used for replication.
Are there significant security, performance, or maintenance benefits to choosing one over the other?
The below output makes me think I can't use option 1 at all. However, I'd still like to know the pros and cons of each.
EDIT: I looked further, and I do have ssl support. It's just disabled at the moment.
mysql> SHOW VARIABLES LIKE '%ssl%';
+---------------+----------+
| Variable_name | Value |
+---------------+----------+
| have_openssl | DISABLED |
| have_ssl | DISABLED |
| ssl_ca | |
| ssl_capath | |
| ssl_cert | |
| ssl_cipher | |
| ssl_key | |
+---------------+----------+
7 rows in set (0.00 sec)
Thank you for any help/advice.