Reaching a MySQL database remotely on another Windows 2003 server

[Commodore640]

Hi All,

I post it here too just in case it rings the bell with someone.
I have a problem that is probably a very simple one for those who use it in their daily work, however I could not find a good answer yet.
We have an ASP program that runs a project management software under MySQL database and Windows 2003. We have clients who have concerns to keep their private business information on our server and since they have their own machines, they want to host the application as well. We do not want to give out our program source code either, plus it makes updates really hard if we have a couple different hosts.

So I figured the best way to resolve this: We let the sensitive business information kept on our client's server, while we keep our software on our machine and just reach out remotely to the client whenever data is needed or changed. I thought it is easy to do by configuring a DNS on the server we have the program pointing to the remote machine and use the DNS to connect... BUT it does not work for me. Probabaly because of some security settings on MySQL? Does anybody have a generic, step by step instruction how I can get this to work? As I am setting up a DSN, it let me type in an IP address as well, but I can not test the database and I have no clue what password it would expect...
Is this something that I should use a VPN, so the data transactions between the servers are safe? Best practices?

Any help would be appreciated...

 

[Olaf Doschke]

First result I found using keywords "mysql remote":

http://www.cyberciti.biz/tips/how-do-i-enable-remote-access-to-mysql-database-server.html

Like any (good) database server, mysql by default is configured for security, locked down to local access only. I think I've also seen shorter description needing less steps.

Confronted with the security concerns I wonder why you go about this so sorrowless and as if it was an easy. And yes, surely it would be a cndidate for a VPN connection. Just allowing a certain IP prevents others to get mysql connections, but you will want to also protect queries and data crossing the net.

Actually these concerns are what cloud services have to cope with. And while bringing in a third party may be a no go at first sight to you and your customer, the large cloud service providers - namely Amazon and Microsoft, surely know about securing their services and you'd perhaps be better off in putting both mysql and your ASP project management software into the cloud or at least get someone into the boat, who can setup a decent private cloud for you, you could use to host your system including sensitive data of clients in a way that solves the concern of your customers in securing their data via encryption.

I'm not an expert on security, but I think VPN is in the mix. I'd nevertheless not just set this up and feel safe, I'd rather hire an expert on that matter to set this up for you and your client(s) in a way fullfilling both of your concerns.

Bye, Olaf.