Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a MySQL server on a VPS that I am replicating to a slave on my home network as a backup. The problem is that I do not have a static IP address so I have configured the replication user to be allowed to connect from any host.
I don't like this because of the security implications.

Will setting a host name for the slave server using DynDNS work?

share|improve this question

closed as off topic by Sam Jan 19 '12 at 11:33

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

up vote 2 down vote accepted

You could configure a simple openvpn setup between the two machines, then no matter what the home machine's public routable IP address is at the time it can still have the same address on the VPN that exists between the two machines.

A simpler alternative would be to use tunnelling down SSH, but this is less reliable in the presence of intermittent connectivity problems.

Both solutions have the added advantage of the data not being transferred over any public network segment in the plain - IIRC the replication protocol for mysql is not encrypted at all in its own right.

share|improve this answer
    
I really like your first solution of the OpenVPN. That would solve the dynamic IP issue and provide me with another layer of security. Thanks. –  bkoch Dec 17 '09 at 12:42
    
It way also save you a bit of bandwidth if you turn the comp-lzo option on. –  David Spillett Dec 17 '09 at 13:45

Not the answer you're looking for? Browse other questions tagged or ask your own question.