MySQL8 method to restrict the connection of the intranet IP segment

If the MySQL server is only used internally, some restrictions need to be made, such as restricting the connection of the specified IP segment on the intranet

The server database version is MySQL 8. Here is how to configure mysql 8 to restrict intranet IP connections

1
2
3
4
5

mysql -uroot -p //login mysql server
use mysql;  //use mysql data
update user set host='192.168.1.%' where user ='root';
FLUSH PRIVILEGES;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.1.%'WITH GRANT OPTION;

systemctl restart mysql.service

Restart the MySQL server

The above configuration only allows the intranet IP segment 192.168.1. * To connect, restricting the account to root

The value of 192.168.1. * * Is 1-254

Similarly, we can also authorize specified external network or other internal network IP segments to connect to the MySQL server.The following is a demonstration

1
2
3
4
5
6

mysql -uroot -p
use mysql;  
update user set host='172.0.0.%' where user ='root';
FLUSH PRIVILEGES;
GRANT ALL PRIVILEGES ON *.* TO 'root'@'172.0.0.%'WITH GRANT OPTION;
The IP address can also be an external network, such as 45.88.66.%