Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to make a datbase connection from the Server A to the Server B , the Server B can only reached throught a network, that has its gateway on a firewall (it distributes internet and all other network things) , which is the best way to connect? Do I have to work with a NAS or creating a kind of VPN with my firewall??

Which is the best option?


share|improve this question

closed as not constructive by Michael Hampton, Lucas Kauffman, mgorven, mdpc, MadHatter Feb 15 '13 at 4:16

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 0 down vote accepted

I think having a VPN connection is overkill. Can't you simply make a firewall exception and forward the port the DB uses from the firewall to server B?

share|improve this answer
forward like a NAS ??? – user156355 Feb 15 '13 at 0:35
If Server A Wants to connect to Server B, lets say over port 3306, and Server B is behind a firewall, you need to set a rule on the firewall that any connections using port 3306 be forwarded to Server B's IP address. – mako_reactor Feb 15 '13 at 0:42

Generally speaking, if you want two machines in different locations to be able to consistently talk to each other, establishing a VPN tunnel between the locations is a good approach. It not only provides the connectivity you need, but it provides security by encrypting all traffic between the two locations. If you only forwarded ports, your database network traffic would be sent unencrypted which is very likely not what you want.

share|improve this answer
Thanks for your answer @user1594322 , If the firewall only forward it, why will not encrypted? how can I solve this? – user156355 Feb 15 '13 at 0:41
Unless the database servers encrypt their own traffic, the only way to solve this is to use an encrypted tunnel (a VPN tunnel, SSH tunnel, etc). – user1594322 Feb 15 '13 at 3:07

Not the answer you're looking for? Browse other questions tagged or ask your own question.