You may have noticed that in many of my demos, I disable firewall
and SELinux (I even use --initialize-insecure
sometimes ). This is just to make things easier… But in fact
enabling iptables and SELinux are not complicated.
Firewall
These examples are compatible with Oracle Linux, RedHat and
CentOS. If you use another distro, the principle is the same.
For the firewall, we need first to allow incoming traffic to
MySQL and MySQL X ports: 3306 and 33060:
# firewall-cmd --zone=public --add-port=3306/tcp --permanent
# firewall-cmd --zone=public --add-port=33060/tcp --permanent
If you don’t plan to restart the firewall, you just need to run
the same commands without --permanent
to make then
immediately active.
Then we need to allow the Group Replication’s communication port.
This is usually 33061
but it can be configured in
…
[Read more]