服務監聽在127.0.0.1和0.0.0.0上,到底有什麼區別呢?給個實際的例子,你們看看mysql
今天發如今nb1380的mysql從nb1381連不上? sql
一、使用grant加權限,失敗ubuntu
mysql> select user,host,password from mysql.user; 11 rows in set (0.00 sec) mysql> grant all privileges on *.* to 'root'@'nb1381' identified by ' ' with grant option;
二、telnet失敗,考慮多是iptables限制,加規則,無效vim
root@nb1380:/var/log/mysql# iptables -I INPUT -p tcp --dport 3306 -j ACCEPT
三、猜想多是監聽在127.0.0.1上,而不是0.0.0.0上,查看my.cnf,果真是這個緣由 bash
root@nb1380:/var/log/mysql# vim /etc/mysql/my.cnf bind-address = 127.0.0.1 改成: bind-address = 0.0.0.0
重啓mysql,果真telnet通了服務器
root@nb1381:~# telnet nb1380 3306 Trying 192.168.64.43... Connected to nb1380. Escape character is '^]'.
mysql也能鏈接了tcp
root@nb1381:~# mysql -uroot -p -hnb1380 Enter password: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 40 Server version: 5.6.33-0ubuntu0.14.04.1 (Ubuntu) Copyright (c) 2000, 2016, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql>
總結:ide
3306端口監聽在127.0.0.1,只有本機客戶端能夠訪問,其餘服務器沒法訪問
ip
3306端口若是監聽在0.0.0.0上,若是沒有端口限制,那麼其餘服務器則能夠鏈接該服務器的該端口input