All geek questions in one place

Security issue between application server and database server

Think about this situation .... I have an application server and a database server. The application will request information about the database server. The database server, of course, needs a password. In addition, with an SSL connection. Do I need to establish a connection through a VPN? Also, I am using RoR for development, is there a way to protect database.yml ?? thank.

+3
source share
2 answers

Standard practice is to ensure that the database server is not open to the Internet as a whole. In the ideal case, the database should only allow connections from the application server — a connection on the local network blocked by a specific port and IP address. In this case, you do not need SSL because the environment is trusted.

Regardless of your structure or language, there is no real way to protect the database configuration on the application server outside of normal access policies. Lock the server, lock the database permissions for as long as you can (restrict SELECT UPDATE DELETE, etc. On certain tables, as your use-cases allow.

+5
source

, , , . VPN SSL- , . , , SSL-. , , SSL.

(tcp 3306 mysql). , .

0

Source: https://habr.com/ru/post/1753826/

More articles:


All Articles