外网访问docker的mysql_外部连接docker中的mysql报错

ERROR 2003 (HY000): Can't connect to MySQL server on '192.168.245.11' (113)

报错状态码“113”，表示防火墙拦截导致。

查看宿主的防火墙规则

```

[root@localhost mysql]# firewall-cmd --list-all

public (active)

target: default

icmp-block-inversion: no

interfaces: ens33

sources:

services: dhcpv6-client ssh

ports:

protocols:

masquerade: no

forward-ports:

source-ports:

icmp-blocks:

rich rules:

```

ports项为空，因此需配置放开3306端口

```

[root@localhost mysql]# firewall-cmd --zone=public --add-port=3306/tcp --permanent #添加开放端口3306

success

[root@localhost mysql]# firewall-cmd --reload #重新加载

success

[root@localhost mysql]# firewall-cmd --list-all #查看防火墙规则

public (active)

target: default

icmp-block-inversion: no

interfaces: ens33

sources:

services: dhcpv6-client ssh

ports: 3306/tcp

protocols:

masquerade: no

forward-ports:

source-ports:

icmp-blocks:

rich rules:

```

再次访问mysql成功

```

root@a651adcacacf:/# mysql -uroot -h192.168.245.11

Welcome to the MySQL monitor. Commands end with ; or \g.

Your MySQL connection id is 12

Server version: 8.0.21 MySQL Community Server - GPL

Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its

affiliates. Other names may be trademarks of their respective

owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql>

```