topic Re: SSH tunnel for MySQL data sources in Connectivity & Data Prep

SSH tunnel for MySQL data sources

Anonymous — Wed, 06 Dec 2017 11:21:12 GMT

Hi,

First I'd like to thank for a great community!

Our largest data source is an e-commerce platform hosted on Acquia Cloud. It's a MySQL that our hosting provider secures behind an SSH tunnel.

As MySQL is a popular database and SSH is a common way to secure it, please consider adding native support for MySQL over SSH as this would solve so many issues with puttytray, cygwin, autossh etc!

Re: SSH tunnel for MySQL data sources

Gysbert_Wassenaar — Wed, 06 Dec 2017 16:50:19 GMT

MySQL doesn't support SSH. So there's no driver that does either. An ssh tunnel is a completely separate thing that only transports data packets from one machine to the other using encryption to secure the data in transit.

Perhaps you mean ssl: MySQL :: MySQL 5.5 Reference Manual :: 6.4.1 Configuring MySQL to Use Encrypted Connections

Re: SSH tunnel for MySQL data sources

Anonymous — Wed, 06 Dec 2017 17:17:10 GMT

Hi,

Thanks a lot for your answer. How would you handle this data source in a Qlik Sense project? Ask for a non-secured copy to be set up? Or maybe use a site-to-site vpn?

Re: SSH tunnel for MySQL data sources

Gysbert_Wassenaar — Wed, 06 Dec 2017 17:49:22 GMT

Depends on what the database owner wants and can support. In some cases we get a database dump which we retrieve with sftp. In other cases we use a site-to-site vpn.

If necessary you can also create an ssh tunnel over the vpn for an extra layer of encryption. But that's something you set up separately. Then you simply point the odbc driver to the right ip and port to establish a connection over the tunnel.