MySQL VPS: Database Server An Toan Tai Iceland

Cac dich vu MySQL quan ly nhu AWS RDS hay Google Cloud SQL doi hoi xac minh danh tinh, the tin dung va luu tru du lieu trong cac jurisdiction co the bi cong khai theo yeu cau hanh chinh. Khi chay MySQL tren VPS offshore tai Iceland, ban kiem soat hoan toan moi lop tu kernel den ung dung.

Co bon ly do khien doanh nghiep can quyen rieng tu chuyen tu DBaaS sang self-managed MySQL tren VPS an danh:

• Khong co backdoor cua nha cung cap: Cac cloud lon co the truy cap database tu phia ho. Tren VPS rieng, chi co SSH key cua ban moi mo duoc cua.
• Tuy bien sau: Ban co the chinh sua buffer pool, innodb_flush_log_at_trx_commit va cac tham so kernel ma DBaaS khoa lai.
• Bao mat phap ly Iceland: Du lieu trong jurisdiction nay duoc bao ve boi luat rieng tu nghiem ngat, khong tham gia mot so thoa thuan giam sat quoc te.
• Thanh toan crypto: Bitcoin va Monero giup tach biet danh tinh tai chinh khoi du an database, dac biet quan trong cho bao chi va nghien cuu nhay cam.

VPS Start cua AnubizHost tu $7.99/thang da du chay MySQL voi database vai GB. Goi Pro voi 8GB RAM phu hop cho ung dung production voi vai tram nghin transaction moi ngay.

Sau khi nhan thong tin SSH tu AnubizHost, ket noi vao VPS va cai dat MySQL 8.0 chinh thuc tu Oracle:

apt update && apt install -y wget gnupg
wget https://dev.mysql.com/get/mysql-apt-config_0.8.29-1_all.deb
dpkg -i mysql-apt-config_0.8.29-1_all.deb
apt update
apt install -y mysql-server
mysql_secure_installation

Sau khi cai dat, mo file /etc/mysql/mysql.conf.d/mysqld.cnf va dieu chinh cac tham so quan trong cho production. Voi VPS 4GB RAM, dat innodb_buffer_pool_size = 2G, innodb_log_file_size = 256M va max_connections = 200. Khoi dong lai MySQL bang systemctl restart mysql.

Mac dinh MySQL chi nghe tren localhost. Neu can ket noi tu xa, chinh bind-address = 0.0.0.0 va su dung tuong lua UFW chi cho phep IP cu the:

ufw allow from YOUR_APP_IP to any port 3306
ufw enable

Tot hon nua, su dung SSH tunnel: ssh -L 3306:localhost:3306 root@your-vps-ip. Cach nay khong mo cong 3306 ra Internet, giam dang ke be mat tan cong va loai bo nguy co quet bot tu dong.

MySQL production can chien luoc backup ba lop. Dau tien, mysqldump hang ngay vao thu muc rieng:

mysqldump --single-transaction --routines --triggers --all-databases | gzip > /backup/full-$(date +%F).sql.gz

Lop thu hai la binary log de point-in-time recovery. Bat log_bin = /var/log/mysql/binlog trong cau hinh. Lop thu ba la replication den VPS bkp thu hai - AnubizHost cung cap goi additional VPS o vi tri khac de lam slave doc-chi.

De bao mat backup, ma hoa truoc khi luu va dong bo den storage offsite bang rclone qua giao thuc S3 toi nha cung cap khac:

mysqldump --single-transaction --all-databases | \
  gzip | gpg --encrypt -r your-key | \
  rclone rcat remote:backups/mysql-$(date +%F).sql.gz.gpg

Monitoring nen lam cuc bo bang Prometheus + mysqld_exporter de tranh gui metric ra Internet. Cau hinh alert qua Telegram bot ca nhan se thong bao ngay khi co query cham, replication lag hoac dia gan day. AnubizHost VPS chay 24/7 voi uptime 99.9% nen monitoring lien tuc rat tin cay.