I'm moving my mysql database off-site and for the most part web-apps (to be used privately) running on a separate server on the same network are all that need to access it. So from what I read it's best that the mysql database is only accessible over the network and not exposed to the outside world. However I'm currently accessing the database (on a read only basis) using an excel addin I wrote and I'd like to continue to do so. What's the best way to do so?
I like the idea of MySQL proxy to sit on a local server that securly accesses the database via ssh tunnel to the webapp server, but "MySQL proxy" is still alpha so it doesn't seem ideal.
I could have each client have to open up a SSH tunnel manually, but this is too inconvenient for other users of the excel add-in.
I could set up a VPN but this seems like overkill... maybe it's not?