MySQL允许远程连接的配置指南

mysql --help | grep "my.cnf"

bind-address = 127.0.0.1

[mysqld]
bind-address = 0.0.0.0

mysql -u root -p

CREATE USER 'remote_user'@'%' IDENTIFIED BY 'your_password';
GRANT ALL PRIVILEGES ON *.* TO 'remote_user'@'%' WITH GRANT OPTION;
FLUSH PRIVILEGES;

GRANT ALL PRIVILEGES ON *.* TO 'existing_user'@'%' IDENTIFIED BY 'password';
FLUSH PRIVILEGES;

sudo systemctl restart mysql

mysql -h your_server_ip -u remote_user -p

sudo nano /etc/mysql/mysql.conf.d/mysqld.cnf  # Ubuntu/Debian
# 或
sudo nano /etc/my.cnf                          # CentOS/RHEL

[mysqld]
bind-address = 0.0.0.0  # 允许所有IP访问（生产环境慎用）
# 或指定特定IP
# bind-address = 192.168.1.100

sudo systemctl restart mysql    # systemd系统
# 或
sudo service mysql restart      # init.d系统

mysql -u root -p

-- MySQL 8.0+ 需指定加密插件
CREATE USER 'remote_user'@'%' IDENTIFIED WITH mysql_native_password BY 'StrongPassw0rd!';

-- 授权所有数据库（按需缩小权限）
GRANT ALL PRIVILEGES ON *.* TO 'remote_user'@'%' WITH GRANT OPTION;

FLUSH PRIVILEGES;

# Ubuntu UFW
sudo ufw allow 3306/tcp

# CentOS Firewalld
sudo firewall-cmd --permanent --add-port=3306/tcp
sudo firewall-cmd --reload

-- 仅允许192.168.1.0/24网段访问
CREATE USER 'secure_user'@'192.168.1.%' IDENTIFIED BY 'Password123!';

ssh -L 3306:localhost:3306 user@mysql-server.com

SHOW VARIABLES LIKE '%ssl%';

ALTER USER 'remote_user'@'%' REQUIRE SSL;

mysql -u remote_user -p -h mysql-host --ssl-mode=REQUIRED

[mysqld]
general_log = 1
general_log_file = /var/log/mysql/query.log

mysql -u remote_user -p -h mysql-server-ip --port=3306

sudo netstat -tuln | grep 3306

SHOW PROCESSLIST;