The mysql host ISP does not wish to open a port to an entire gateway, so I have two choices, install tailscale or request a floating IP. Is tailscale permissible and possible on vps?
On Mon, Mar 4, 2024 at 4:19 PM Bryan Davis <bd...@wikimedia.org> wrote: > On Mon, Mar 4, 2024 at 2:16 PM Bryan Davis <bd...@wikimedia.org> wrote: > > > > On Mon, Mar 4, 2024 at 12:43 PM Tim Moody <t...@timmoody.com> wrote: > > > > > > I am trying to reach a remote mysql database from a vps using python. > The destination server has created an opening in the firewall for the > request, but I am still getting network unreachable errors. I gave the ip > of the proxy for the vps, obtained with ping, as the expected ip. I now > tried accessing a web site I control from the same vps also in python using > requests.get, and in the web server log I see the request coming from what > looks to be a gateway (xxx.xxx.xxx.1, rather than the proxy > xxx.xxx.xxx.nnn) Is this to be expected and can I rely on the address for > such requests? > > > > Please, please, please do not expose MySQL/MariaDB to the general > > internet. Instead I would suggest that you use an ssh tunnel to > > connect your workstation with the remote instance. See > > > https://wikitech.wikimedia.org/wiki/Help:Toolforge/Database#Connecting_to_the_database_replicas_from_your_own_computer > > for how this can be done in a specific case. For your case really just > > the target host (login.toolforge.org -> your instance) and database > > server should need to change. > > I completely misread the direction of our connection. I apologize. > > Yes, outbound connections from a Cloud VPS instance to the internet > will show as coming from the shared outbound NAT gateway IP at the > remote. The only change from this is if the Cloud VPS instance has a > "floating IP" that gives it a direct route to the Internet. > > Bryan > -- > Bryan Davis Wikimedia Foundation > Principal Software Engineer Boise, ID USA > [[m:User:BDavis_(WMF)]] irc: bd808 > _______________________________________________ > Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org > To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org > https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
_______________________________________________ Wikitech-l mailing list -- wikitech-l@lists.wikimedia.org To unsubscribe send an email to wikitech-l-le...@lists.wikimedia.org https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/
