用ip访问mysql数据库

-- 检查MySQL服务器状态
sudo systemctl status mysql

-- 允许特定IP地址访问
sudo ufw allow from <IP_ADDRESS> to any port 3306

-- 授权用户访问数据库
GRANT ALL PRIVILEGES ON *.* TO 'username'@'IP_ADDRESS' IDENTIFIED BY 'password';
FLUSH PRIVILEGES;

-- 调整连接超时时间
SET GLOBAL connect_timeout = 60;

-- 配置MySQL服务器支持SSL/TLS
sudo openssl req -new -x509 -days 365 -nodes -out /etc/mysql/ssl/mysql-cert.pem -keyout /etc/mysql/ssl/mysql-key.pem
sudo chmod 600 /etc/mysql/ssl/mysql-key.pem
sudo chown mysql:mysql /etc/mysql/ssl/mysql-cert.pem /etc/mysql/ssl/mysql-key.pem
sudo sed -i 's/^#ssl-ca=/ssl-ca=\/etc\/mysql\/ssl\/mysql-cert.pem/' /etc/mysql/my.cnf
sudo sed -i 's/^#ssl-cert=/ssl-cert=\/etc\/mysql\/ssl\/mysql-cert.pem/' /etc/mysql/my.cnf
sudo sed -i 's/^#ssl-key=/ssl-key=\/etc\/mysql\/ssl\/mysql-key.pem/' /etc/mysql/my.cnf
sudo systemctl restart mysql

-- 客户端连接时指定使用SSL/TLS
mysql --ssl-mode=REQUIRED --ssl-ca=/etc/mysql/ssl/mysql-cert.pem --ssl-cert=/etc/mysql/ssl/mysql-cert.pem --ssl-key=/etc/mysql/ssl/mysql-key.pem -h <IP_ADDRESS> -u username -p