A new project requires MySQL replication to be carried out over the internet. My first thought was to use stunnel, which I quickly implemented. This appeared to work perfectly (after some iptables configuration). However, I found out later that MySQL supports replication over SSL natively. I have made the assumption (perhaps mistakenly) that a native solution would be better (more reliable?) than a wrapped solution. Getting MySQL replicating over SSL was perhaps about 30 minutes work in total. This could’ve been cut down to about 10 minutes if it wasn’t for some documentation-related issues.
(more…)