ToS question

Ask questions about dedicated servers here and we and other users will do our best to answer them. Please also refer to the self-help section for tutorials and answers to the most commonly asked questions.
Post Reply
n0name
New to forums
New to forums
Posts: 5
https://www.youtube.com/channel/UC40BgXanDqOYoVCYFDSTfHA
Joined: Fri Jan 09, 2015 4:01 am

ToS question

Post by n0name »

Hello,

not sure if it's my not-that-good English skills or a misunderstanding, but I am not quite sure about this point:
+ Run a tunnel or proxy to a server at another host
From the gameservers hosted on the machine, I would like to connect to my MySQL DB residing on another host (in Germany).
The only thing is that I don't allow incoming connections on the DB server, so I have to open a SSH tunnel in order to get connection.
Is this still allowed by the ToS?
User avatar
soja
This is my homepage
This is my homepage
Posts: 2389
Joined: Fri May 18, 2012 3:20 pm

Re: ToS question

Post by soja »

You should just be able to add the game server IP to a mysql whitelist.

If your host doesn't allow that, you might just want to find a different host for your website/mysql.
Not a NFO employee
n0name
New to forums
New to forums
Posts: 5
Joined: Fri Jan 09, 2015 4:01 am

Re: ToS question

Post by n0name »

It's not about adding the IP to the whitelist, but rather NFO's ToS about tunneling (I will open a SSH tunnel from the gamevds to my MySQL server) - see quoted text.
User avatar
soja
This is my homepage
This is my homepage
Posts: 2389
Joined: Fri May 18, 2012 3:20 pm

Re: ToS question

Post by soja »

I understand what you said, but most hosts allow you to add IP addresses to a whitelist so remote addresses can use the MySQL server.
Not a NFO employee
n0name
New to forums
New to forums
Posts: 5
Joined: Fri Jan 09, 2015 4:01 am

Re: ToS question

Post by n0name »

soja wrote:I understand what you said, but most hosts allow you to add IP addresses to a whitelist so remote addresses can use the MySQL server.
Ah, now I get what you are saying.
Actually, the host on which the MySQL stuff is running on is managed by me and I would rather not change the setup only for that.
So I would instead be interested if NFO allows SSH tunnels to other servers (to access services hosted on that server).
User avatar
soja
This is my homepage
This is my homepage
Posts: 2389
Joined: Fri May 18, 2012 3:20 pm

Re: ToS question

Post by soja »

Are you managing MySQL yourself, or is it part of a software package like cPanel?

It should be as simple as adding a new user like 'user'@'1.2.3.4', so only 1 IP needs to have access to your MySQL server.

If you are using srcds, even different srcds instances bound to different IPs will still use the primary IP address for the OS.
Not a NFO employee
n0name
New to forums
New to forums
Posts: 5
Joined: Fri Jan 09, 2015 4:01 am

Re: ToS question

Post by n0name »

soja wrote:Are you managing MySQL yourself, or is it part of a software package like cPanel?

It should be as simple as adding a new user like 'user'@'1.2.3.4', so only 1 IP needs to have access to your MySQL server.

If you are using srcds, even different srcds instances bound to different IPs will still use the primary IP address for the OS.
Well, I am mostly managing myself, but can also administrate over Froxlor.
And yes, I know that, but MySQL only listens on localhost (security measure) and in order to connect, I have to open a SSH tunnel to the server.

Now, with the line I quoted above, I am not sure if NFO allows that. (I am already using this setup since 1+ year on my 2 other machines).
User avatar
Edge100x
Founder
Founder
Posts: 13155
Joined: Thu Apr 18, 2002 11:04 pm
Location: Seattle
Contact:

Re: ToS question

Post by Edge100x »

If you contact us directly, we can likely authorize this.

The rule was created because some were using our services to act as a DDoS mitigation sponge in front of cheap dedicated servers from other providers.
n0name
New to forums
New to forums
Posts: 5
Joined: Fri Jan 09, 2015 4:01 am

Re: ToS question

Post by n0name »

Edge100x wrote:If you contact us directly, we can likely authorize this.

The rule was created because some were using our services to act as a DDoS mitigation sponge in front of cheap dedicated servers from other providers.
Will do, thanks for your answer!
Post Reply