Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Ok, I'm gonna get some weird looks for this, but It's something I want to do. I have two servers on the internet, I want to open an internet port just for each others IP, and do a SQL Server 2008 mirror over the internet.

The data isn't that important. No SS#, no credit cards, nothing like that. So this doesn't have to be overly complex.

1) Is mirror blocking? I don't want the primary server to be waiting on the secondary server to commit the data. Will it queue up stuff to synchronize? The DB is big, and there is a lot of activity, if it has to wait for it to sync up on the secondary, this wont work?

2) Even though security is not a huge concern, what are the flaws? The SQL DBs will only be open externally to each other, and is there any danger of sniffs?

Thanks in advance.

share|improve this question
With sql 2008 mirroring it can be blocking (sync) or not (async). Unless you have a low latency network async is your only option. Use a vpn between the two to (mostly) cover the sniffing issues. – tony roth Jun 28 '10 at 16:45
up vote 1 down vote accepted

If you have SQL Enterprise Edition, you can use Asynchronous Mirroring, which is non-blocking. If you don't, you may want to investigate Log Shipping.

Configuring certificate-based transport-level encryption would minimize the risk of information disclosure. Note that transport encryption is enabled by default.

Database Mirroring Transport Security

How to: Allow Database Mirroring to Use Certificates for Outbound Connections (Transact-SQL)

share|improve this answer

SQL Mirroring supports an asynchronous mode. Make sure that you are using IPSec or some other VPN technology to protect against sniffing.

share|improve this answer

1) No idea about SQL Server. However, most major RDBMS' have options that will tailor the replication/mirroring for many different scenarios and tastes. Read the docs.

2) Any data that travels unencrypted over the internet could be sniffed. What you need is a VPN. Try OpenVPN. Works on Windows too.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.