Setting up the MySQL Listener

This section describes how to setup MySQL listener. To learn first steps of creating listener, please follow Creating a listener section.

Warning

  • The following MySQL authentication plugins are supported for communication between Fudo Enterprise and the database server: mysql_clear_password mysql_native_password, caching_sha2_password.

  • For communication between the client and Fudo Enterprise, only mysql_clear_password plugin is supported, which is why TLS is enforced for MySQL listeners.

  1. Go to Settings tab, press the Show all button to expand supported protocols list.

  1. Press MySQL button in the Protocol field.

../../_images/5-6-listener-mysql.png

Note

TLS is always enabled for the MySQL listener and cannot be disabled.

  1. In the Connection mode section, select desired connection mode.

Mode: bastion

Note

  • User connects to the target host by including name along with account login on the target server and target server address in the login string, e.g. john_smith#root#192.168.0.110.

  • For details on bastion connection mode, refer to Connection modes topic.

  • Select bastion button in the Connection mode field.

  • Select the IP address from the Local address drop-down list and enter port number.

Mode: proxy

Note

User connects to the target host by providing Fudo Enterprise IP address and port number which unambiguously identifies target host.

  • Select proxy button in the Connection mode field.

  • Select the the IP address from the Local address drop-down list and enter port number.

Note

  • The Local address drop-down list elements are IP address defined in the Network configuration menu (Network Interfaces Configuration) or labeled IP addresses (Labeled IP Addresses).

  • Selecting the Any option will result in Fudo listening on all configured IP addresses.

  • When a Listener is configured with User Access Gateway as the local address, only one connection option is displayed after login to User Access Gateway for clarity, and the connection uses the address from the browser’s address bar together with the listener’s configured port.

  • In case of cluster configuration, select a labeled IP address from the Local address drop-down list and make sure that other nodes have IP addresses assigned to this label. For more information refer to the Labeled IP Addresses topic.

  1. In the Server certificate field, click Generate certificate to generate TLS certificate by choosing key algorithm and providing Common Name (server name where the certificate is installed), or click Upload to upload server certificate file with private key pasted at the end of the file. The rest of the required fields will be filled automatically. Allowed format of the server certificate file is PEM, although besides .pem, accepted file extensions are .txt and .cert.

  2. Click Save.


Related topics: