MySQL更改默认监听地址

MySQL/MariaDB Server: Bind To Multiple IP Address

默认配置只允许localhost访问, 远程备份不方便, 所以需要更改下, 上面的文章说的很清楚, 关键的地方就在这个配置文件里vi /etc/mysql/my.cnf找到并如下更改:

bind-address            = 0.0.0.0

改完后重启下mysql
service mysql restart

检查效果netstat -anp | grep 3306如下

tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      5173/mysqld

这样就对外完全放开了3306的访问权限, 不安全, 可以通过iptables或者ufw之类防火墙限制下, 或者mysql本身就有限制公网ip账户登录的设定

可以新建一个只具有select,lock权限的数据库用户, 比如backup, 然后在数据库开限制此用户的登录ip

create user 'backup' identified by  'back_up';
grant select,lock tables on database_name.* to backup@'备份服务器ip地址' identified by 'back_up';
flush privileges;

检查下数据库内容select host, user from mysql.user;

+----------------+------------------+
| host           | user             |
+----------------+------------------+
| 114.114.114.114| backup           |
| 127.0.0.1      | root             |
| ::1            | root             |
| iz25mfbe902z   | root             |
| localhost      | debian-sys-maint |
| localhost      | root             |
+----------------+------------------+
9 rows in set (0.00 sec)

数据库自动备份脚本

https://gist.github.com/ferstar/387b20c9468979ddd5f6