Home / server / Questions / 524352
Accepted
Murali Mopuru
Asked: 2013-07-19 02:39:04 +0800 CST

Set DB proxy by using iptables

  • 772

Can someone plz tell me how to set DB proxy for the below case.

Lets consider,

  1. Three machines in same network - 172.16.1.10, 172.16.1.11 and 172.16.1.12
  2. 172.16.1.12 have mysql instance running on 3306 port

  3. Users from 172.16.1.10 machine want to connect to above mysql instance by using 172.16.1.11 machine and one port number(say 9999) as pass-through.

    $> mysql -h 172.16.1.11 -P 9999 -u user1 -p pwd1'

what all iptables rules need to be created to achieve this?

Thanks

iptables

1 Answers

  1. Best Answer

    You can use NAT on 172.17.1.11:

    sysctl net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -j MASQUERADE
iptables -t nat -A PREROUTING -p tcp --dport 9999 -j DNAT --to 172.16.1.12:3306
iptables -A FORWARD -d 172.16.1.12 -p tcp --dport 3306 -j ACCEPT
    • 0