Sécurité des bases de données
There is no need to run your db on vmware... If they're on the same machine the connection always goes through the local loopback device thus never touching the actual network.
This is true both when the DB host is specified as 'localhost' or '127.0.0.1' and if the machine's actual host name or outside network address is used (in which case the OS will/should recognise that it's actually a local connection and uses the loopback)
Connexions au serveur de base de données
Il est recommandé d'établir des connexions au serveur avec le protocole SSL, pour chiffrer les échanges clients/serveur, afin d'améliorer la sécurité. Vous pouvez aussi utiliser un client SSH pour chiffrer la connexion entre les clients et le serveur de bases de données. Si l'une de ces deux protections est mise en place, il sera difficile de surveiller votre trafic et de comprendre les informations échangées.
add a note
User Contributed NotesConnexions au serveur de base de données
M Zijlstra
16-Aug-2007 04:11
16-Aug-2007 04:11
jakub dot lasinski at interia dot pl
28-Jul-2007 07:15
28-Jul-2007 07:15
Even if webserver and DBMS are on the same phisical machine one can separate networks by setting database in virtual server inside the main system (using for example VMware solutions).
aastaneh at cmax2 dot com
27-Jul-2006 05:28
27-Jul-2006 05:28
Another solution to protect your database is to have a seperate backend network exclusively used for database traffic. Your webserver(s) would have two interface cards: one facing the world, one facing the internal database network. This way- there's no chance of intercepting database traffic from the outside.
06-Oct-2005 10:20
Obviously, this does not apply if PHP and the DBMS are running on the same machine.