可以在13306端口配置mysql Replication，在3306端口正常运行数据库吗？

Question

I know Mysql Replication works on 3306, but what I am trying to understand is,

is there any way i can keep a) 3306 for normal Mysql Operation and have 13306 for Replication purpose only ?

I have a requirment, where We need to setup mysql Repliation over Dynamic IP which means our mysql server will be open to public, so we want to protect our database, and want to open minimum port which only for replication ( we will setup SSL replication)

b) if this is not possible , what other option do I have where we can only apply only changes from master to slave or master to master ?

can this be done ? thanks for sharing any lights or references on this. Thanks

Answer 1

MySQL replication normally works over the same port as any other MySQL connection, which is by default 3306 , as you correctly stated.

The standard ways to add protection:

• system level firewall, allowing traffic to 3306 only from specific host (replication peer)
• MySQL built-in authorization - eg GRANT REPLICATION SLAVE ON *.* TO 'repl'@'YOUR_TRUSTED_IP';
• Add TLS for data-in-transit protection, as you mentioned.

If you choose to bind MySQL to a different port you will need to update your CHANGE MASTER TO configuration, have a look here .

The only way I can think of, that would allow you to restrict the replication traffic itself, in any way, would be through the GRANT REPLICATION SLAVE command, where you could choose that only a particular user@host would have access.