Hello all I am curious if I separate my database to another server then my webserver and use private networking Do I need to get a ssl certificate for my mysql server? Or because its private networked in it wouldn’t require it. Thanks in advance
I recommend, if both servers are in the same network, using the (more secure) private network. You do not need an SSL certificate.
@jmarhee - Does this mean that no other users on the private-shared network would be able to eavesdrop on the communications, as with out encryption it would be in plain text. I ask because I am in the same boat, where I need to scale out, but I would prefer to not have to use SSL with MySql due to the performance hit (15%-ish). Are you saying that we are safe just using iptables to keep the communications confidential? Here is the link to my question: https://www.digitalocean.com/community/questions/is-encryption-required-on-shared-private-networking
I think that most IP packets are dropped before reaching other (wrong) droplets. However that is not guaranteed.
Please vote here for enhanced security:
https://digitalocean.uservoice.com/forums/136585-digitalocean/suggestions/3574245-use-vlans-for-private-networking-between-droplets