Hello all I am curious if I separate my database to another server then my webserver and use private networking Do I need to get a ssl certificate for my mysql server? Or because its private networked in it wouldn’t require it. Thanks in advance
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
I recommend, if both servers are in the same network, using the (more secure) private network. You do not need an SSL certificate.
@jmarhee - Does this mean that no other users on the private-shared network would be able to eavesdrop on the communications, as with out encryption it would be in plain text. I ask because I am in the same boat, where I need to scale out, but I would prefer to not have to use SSL with MySql due to the performance hit (15%-ish). Are you saying that we are safe just using iptables to keep the communications confidential? Here is the link to my question: https://www.digitalocean.com/community/questions/is-encryption-required-on-shared-private-networking
I think that most IP packets are dropped before reaching other (wrong) droplets. However that is not guaranteed.
Please vote here for enhanced security:
https://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/3574245-use-vlans-for-private-networking-between-droplets