Port Forward for MYSQL

gshocky · 11-02-2007, 12:02 PM

My situation is as follows:

I have server that currently runs MYSQL. It also runs apache and other stuff. MYSQL is being moved to a dedicated DB server. I've changed a ton of web apps and other stuff but there are some old legacy apps that sill exist that have the servername harded and I can't change them easily.

What I want to do is 'proxy' or forward the port 3306 on my server to 3306 on another server. I saw some examples using iptables but they all showed to be using two sets of IP addresses.. In my setup I have on address, I don't care about the outside world, only the internal world.

Can anyone point me in the right direction? (not asking for someone to spend there time to give me a walkthrough, just asking for a nudge to point me in the right path.)

Thank you for any help you can provide. I appreciate it.

win32sux · 11-02-2007, 02:17 PM

Moved to Networking for better exposure.

complich8 · 11-02-2007, 03:36 PM

I think you could accomplish this with ssh, actually ...

eg: once mysqld is off on your local machine, set up a script that just maintains a command like:

Code:

#!/bin/bash
while /bin/true
do
    ssh -g -L 3306:databaseserver:3306 someuser@localhost
    sleep 1
done

and set up an rsa or dsa key for someuser on localhost for passwordless logins.

This is sort of the quick-and-dirty hack way to do it, but it'd work. I'm fairly sure you can accomplish something similar with iptables nat rules, but I'm having trouble crafting the exact rules you'd need, offhand.

(this is eerily similar to my post here on a similar subject ... when you have a good enough hammer, everything really is a nail

)

gshocky · 11-03-2007, 11:20 PM

My solution was as follows:

In RHEL4 I edited the xinetd includes to have a section for 3306.

It was setup to redirect to another server, stream, TCP.

It seems to be working well in our development environment.

Moving into production environment Monday.. Will let you know how it works.