Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect.

1) Is encrypting necessary?

2) Is their a built in / simple way of accomplishing this?

I'm using ubuntu 10.04, php-fpm, nginx, mysql

share|improve this question
up vote 4 down vote accepted

To answer your second question first - yes. MySQL supports SSL for encrypting connections. See

The answer to your first question is a little more complicated. There are a lot of details specific to your configuration that could change the answer one way or the other, so there's no way to give an exact answer without more information. That being said, I can give you my general opinion.

Basically, if there are any untrusted hosts on the same network segment as either server, or anywhere in-between, then I would encrypt. For example - if either server is in a shared/hosted environment, then I would encrypt. If both servers are on your home network, then I probably wouldn't worry about it.

If you're still undecided, you may want to consider that it's probably better to have encryption and not need it, than to need it and not have it. If it becomes a performance issue, you at least have the option of turning it off or upgrading hardware.

And as a side note - the private IPs may help, or they may not make any difference. It really depends on how things are configured.

share|improve this answer

see the following if you want to setup a ssl channel for mysql

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.