I-MySQL localhost nge-VPN: isasho inqubo yasendaweni

Uhlelo lokusebenza kuseva yehhovisi luxhumana ne-MySQL ku-localhost, ukopisha lelo gama lomkhathi kuklayenti yedeskithophu, futhi uxhumano luyehluleka noma luvule enye idathabheyisi. I-VPN ayizange ishintshe incazelo yaleli gama: i-localhost isabhekisa kumshini ogcina iklayenti. I-VPN yahambisa amaphakethe, hhayi izixhumanisi. Nquma ukuthi iyiphi indawo yokugcina okufanele ifinyelelwe yikhompyutha ephathekayo ngaphambi kokuthinta umzila.

Isinyathelo 1: nquma ukuthi iyiphi indawo yokugcina okufanele ifinyelelwe

Zombili izindlela zivumelekile futhi ziphendula imibuzo ehlukene. Ukufinyelela okuqondile kusho ukuthi idathabheyisi ilalela ikheli langasese elifinyelelwa umhubhe, futhi ikhompyutha ephathekayo ixhumana nalelo kheli. Ukufinyelela okudlulisiwe kusho ukuthi idathabheyisi lihlala ku-loopback futhi iseshini ye-SSH ithwala imbobo iye emshinini wakho. Khetha okukodwa ngamabomu, ngoba ukuhlanganisa kokubili kukhiqiza uxhumano olusebenza ngesizathu esingalungile.

Ukuze uthole ukufinyelela okuqondile, thola igama noma ikheli langasese lomkhathi wedathabheyisi kanye nembobo yalo kulowo olawulayo. Ikheli lesango le-VPN akulona ikheli ledathabheyisi ngaphandle uma kuwumshini ofanayo. Bese uqinisekisa ukuthi isilaleli siboshelwe kuleso sixhumanisi ngempela, ngoba umzila oya kusixhumanisi awudali silaleli kuwo.

Isinyathelo 2: dlulisa imbobo kuphela uma isilaleli sihlala sasendaweni

Uma idathabheyisi kufanele lihlale ku-loopback kuphela, lidlulise nge-SSH futhi ubophe nophahla lwasendaweni ku-loopback. Ikheli lokubopha elingakwesobunxele ngekhompyutha yakho ephathekayo; umgomo ongakwesokudla uhumushwa ohlangothini lwesiva se-SSH, njengoba incwadi eyisithenjwa ye-OpenSSH ichaza. Ukushintshana kwalezi zindima ezimbili yisizathu esivamile sokuthi ukudluliswa kubonakale kusebenza kodwa kungaxhumi lutho.

ssh -N -o ExitOnForwardFailure=yes -L 127.0.0.1:13306:127.0.0.1:3306 [email protected]
ss -ltn 'sport = :13306'

Uma i-SSH ihlala kumkhathi wokugxuma esikhundleni somkhathi wedathabheyisi, i-loopback engakwesokudla ibhekisa kumkhathi wokugxuma, futhi umgomo kufanele ushintshwe ube yikheli umkhathi lowo ongafinyelela kulo. I-ExitOnForwardFailure ibamba ukwehluleka kokusungula ukudluliswa, kodwa ayifakazi ukuthi ukuxhumana kwakamuva nomgomo kuyaphumelela. Gcina ukuhlolwa kokhiye womkhathi kuvuliwe, futhi ungayinikezi imbobo yokudlulisa kuyo yonke i-LAN yakho ngokuyibopha kuzo zonke izixhumanisi.

Misa uma idathabheyisi kufanele lihlale ku-loopback kuphela futhi ungakwazi ukusebenzisa i-SSH. Khona-ke ukufinyelela okuqondile kuwumklamo ongalungile, hhayi isakhiwo okufanele siphoqwe.

Isinyathelo 3: phoqa iklayenti ukuthi lisebenzise i-TCP

Ku-Unix, iklayenti le-MySQL elinikezwa i-localhost likhetha isokhethi ye-Unix ngokuzenzakalela, ngakho ukushintsha imbobo kuphela kungashiya lisinga isokhethi engahlobene nakancane nokudluliswa kwakho. Sebenzisa iphrothokholi ye-TCP esobala nekheli le-loopback ukuze iklayenti livule uxhumano oluya embotsheni yakho yokudlulisa.

mysql --protocol=TCP --host=127.0.0.1 --port=13306 --user=DB_USER --password

Inketho yephasiwedi engenalo inani iyabuza esikhundleni sokubeka imfihlo emgqeni womyalo, futhi lowo umkhuba okufanele ugcinwe. Amanye amathuluzi aneswishi yawo yalowo mehluko, futhi amanye amadrayiva aphatha i-localhost ngendlela ekhethekile. Hlola ukuthi iklayenti lakho lenzani esikhundleni sokucabanga ukuthi ifulegi lidlulisiwe. I-akhawunti yedathabheyisi nayo idinga imvume ehambisana nomthombo osiva esibonayo, futhi lowo ngumkhathi wokudlulisa, hhayi ikhompyutha yakho ephathekayo.

Misa uma ithuluzi lingenakupoqwa ukuthi lisebenzise i-TCP. Khona-ke sebenzisa elinye iklayenti, noma sebenzisa ukufinyelela okuqondile esilalelini sangasese.

Isinyathelo 4: fakazisa ukuthi ngempela ufinyelele kuyiphi indawo yokugcina

Buza isiva ukuthi sicabanga ukuthi uxhumano luyini. Iziguquko zegama lomkhathi, imbobo nesokhethi zikutshela ukuthi ufike nge-TCP yini nokuthi iyiphi isilaleli ephendulile, futhi uhlu lwezixhumano lubonisa ikheli lomthombo elirekhodwe yisiva. Lobu bufakazi buwusizo ukwedlula olunye ushintsho lomzila.

mysql --protocol=TCP -h 127.0.0.1 -P 13306 -u DB_USER -p -e "SELECT @@hostname, @@port, @@socket"

Rekhoda ukuthi yiphi indawo yokugcina oyizamile: isokhethi ye-Unix yasendaweni, imbobo yakho yokudlulisa noma isilaleli sangasese. Lokhu kwehluleka kuthathu kunezindlela zokulungisa ezihlukene, futhi ukushintsha umzila we-VPN ngesikhathi iklayenti lisakhuluma ne-localhost engalungile kuwumsebenzi oyize. Gcina futhi ukuqinisekiswa kwe-SSH nokuqinisekiswa kwedathabheyisi kuhlukene kumanothi, ngoba kuklayenti yedeskithophu ukwehluleka kokukodwa kubonakala njengokwehluleka kokunye. Bese ususa ukudluliswa uma usuqedile.

Uhlu luphela uma usukwazi ukusho indawo yokugcina, iphrothokholi yeklayenti, ikheli lomthombo elabonwa yisiva kanye nemvume eyakuvumela. Amaqiniso amane, futhi inkinga elandelayo yokuxhumana ithatha imizuzu esikhundleni sentambama.