Report this

What is the reason for this report?

Securing Database Server with SSL Necessary?

Posted on March 17, 2016

Hello All,

I recently followed the How To Set Up a Remote Database to Optimize Site Performance with MySQL tutorial and now have my web server separated from my database server. While my web server is secured with an SSL certificate from Namecheap, the database server is not.

Is securing the database server with an SSL certificate necessary and/or a good idea? Are connections between the web and database server already secure as a result of the private networking?

Thanks!



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

I actually don’t have reply to your actual question but still wanted to throw a suggestion: you said you’re paying to Namecheap for SSL certs. I suggest you to switch over Cloudflare, they’ll provide free (yes, free!) SSL certs (and they also provide protection for attacks etc.).

It’s really your own decision. Maybe you trust DigitalOcean’s infrastructure to be secure, maybe you don’t. If you don’t, put VPN or TLS in place.

Since you have two servers, i’d be inclined to say “maybe”. If it was localhost I’d say no (then you would use sockets or local TCP connection).

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.