how can I use nodebalancer for mysql\redis balancing?
as advertise here
> NodeBalancers support balancing any TCP based traffic, including SSH and MySQL.
but after setting it up I realised that its open a big security hole
There is no way for me to block access to the nodebalancer for my own servers only, and the nodebalancer public ip is accessible by everyone
so if I am using the nodebalancer to balance redis traffic anyone who find out my nodebalancer ip will be able to also connect to redis
and in my private server firewall i am only getting the nodebalancer ip so again cant block anyone except my private servers ips
what I missed out?
3 Replies
Instead, my suggestion is to use HAproxy directly. You may setup a single HAproxy for distributing your traffic, or you can even setup multiple HAproxy servers for HA scenario with a fail-over IP address. This way, you may use the private IP of the servers, so there will be absolutely nothing accessible from the public. I'm using this HAproxy configuration
@IfThenElse:
I don't think the NodeBalancer is made for private traffic, in addition, it does not offer everything that most advanced users would want, for example, multiple certificates.
Instead, my suggestion is to use HAproxy directly. You may setup a single HAproxy for distributing your traffic, or you can even setup multiple HAproxy servers for HA scenario with a fail-over IP address. This way, you may use the private IP of the servers, so there will be absolutely nothing accessible from the public. I'm using
which is part of a script for setting up a CentOS 7 server. this HAproxy configuration
thanks
so what's the reason of them publicly advertising using it to load balancing mysql and exposing it to the public?