cPanel & WHM Version 82 has been released, and brings a slew of great updates. Take a look at what is included, and then upgrade today!
 

Support for AWS RDS as Remote MySQL Server

auschef shared this idea 5 years ago
Completed

For a number of reasons it seems quite difficult to use an RDS instance as a remote server with WHM 11.42. Firstly, since ssh is required, it's not possible to set it as a remote server in WHM and use the automated transfer feature.


Even using mysql-proxy to redirect localhost requests to the RDS instance, there seem to be lots of problems doing things like creating new accounts, etc. Turning off the local mysql server was also problematic as certain functions test its status and turn it back on.


Perhaps three config options should be made available:


1) localhost

2) remote server

3) remote mysql server (everything done through mysql client, no ssh, no start/stop, etc)

Best Answer
photo

Hi all! I'm so sorry for our delay here. Unfortunately the MySQL profiles that we implemented in 11.52 do not solve this feature request, as we do still require "root" type privileges with mysql. This isn't on our roadmap at this time, but I'll update again as soon as there's more information.

Comments (17)

photo
2

This will be a really good feature to have in cPanel. If you can make this feature enabled, I guess cPanel can be truly expanded to work in a total cloud environment. Will love to have this feature on CPanel

photo
2

Very good feature

photo
1

Yeah! It would be great!

photo
1

The only thing preventing this from being possible is that Amazon doesn't provide SSH level access to an RDS host.

photo
2

One of the things on our backlog for this year is to enhance the remote MySQL support, allowing use of a remote server without requiring operating system access.

photo
1

Kenneth Power wrote:

One of the things on our backlog for this year is to enhance the remote MySQL support, allowing use of a remote server without requiring operating system access.
I'm looking forward to see this feature!

photo
2

We have begun working on a MySQL credential only version of remote MySQL. This should be available in 11.52 and in edge builds soon. This should satisfy this request.

photo
1

This is great news!

photo
1

That is great, since I have been trying to get MySQL proxy to work with cPanel, and RDS for 3 days now...


Everything is so close, but there are still issues. When will this at least be available on edge?

I am probably stuck with doing it the mysql-proxy way though, because I need it done within the next few days. :(

photo
1

As said by Travis, the functionality to connect using the credentials only is present in 11.52.


But when trying to connect to the Amazon RDS: "The MySQL user does not have the proper PRIVILEGES to act as a MySQL superuser."


As mentioned by AWS: "... MySQL SUPER privilege, which is restricted for MySQL RDS DB instances."

(http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Troubleshooting.html)


So it's really necessary that WHM require SUPER privilege for the database operations available in Cpanel?

photo
1

The short answer is: yes.


The longer answer is: cPanel & WHM need the ability to manage users and grants. These currently require the super privilege for MySQL and MariaDB.

photo
2

It's possible to create users and grant access for them on RDS

photo
2

Kenneth, cPanel & WHM would have access to manage users and grants, these permissions are given.

The only permissions not given are FILE, SUPER, REPLICATION_SLAVE and CREATE_TABLESPACE.


As such, there should be no issues with cPanel and WHM using Amazon RDS databases.

photo
3

As this solution doesn't work for AWS RDS (this solution requires SUPER privileges which are not available on RDS servers), can this request be changed from "completed"?

Can this feature be achieved without requiring SSH or SUPER? If not, it won't work with AWS RDS.

photo
2

Hi,

Does anyone know if this has progressed at all or if there are workarounds? I'm coming to try and attach a remote profile to RDS and getting the SUPER privileges error as described.

Many thanks,

Phil.

photo
2

I'm getting the same "super privileges" error as Phil. Are there any updates on this topic or workarounds?

photo
1

Hi all! I'm so sorry for our delay here. Unfortunately the MySQL profiles that we implemented in 11.52 do not solve this feature request, as we do still require "root" type privileges with mysql. This isn't on our roadmap at this time, but I'll update again as soon as there's more information.

photo
1

Hello, is there any progress on this by chance?

photo
2

Nope, not yet! As soon as we do, I'll make sure we provide an update here!

photo
1

Do you have any updates on this? Why is super required by cPanel? Having RDS as an option would be a very good thing.

photo
1

Why, specifically, isn't known to me at this time, but as soon as there's an update I'll be back here!

EDIT: Got more information on this one:


  1. Older versions of MySQL the super privilege was needed to perform various operations, such as creating grants, which is why the feature was built like that. Until we alter that behavior, the SUPER requirement will remain.

photo
3

With cPanel & WHM Version 80 (currently in EDGE, expected to roll out to the other tiers in the next few months) we have enabled RDS support, and released this related documentation:

https://documentation.cpanel.net/display/CKB/Create+an+Amazon+RDS+Instance

As part of this work, however, we identified a number of quirks in the MySQL profiles system. Like normal, please report any bugs that you encounter to your web host or license provider, who will then report them to our support team.

photo
1

This is great news!! Would this also work for Google Cloud's Managed SQL? They have the same limitation of not allowing the "Super" privilege.

photo
1

I can't speak to that, but it's entirely possible. We'll have to give it a test when we go to CURRENT to find out for sure.

photo
2

I did a quick test on the new feature on Google Cloud's CloudSQL, and it did work (Had to select "User provided MySQL credentials")! I was able to set up WordPress using the GCP DB. I am not going to trust it for a production environment yet though, because some of my management tools did not work, and some of my other scripts may need to be modified to work correctly. Like I said, I just ran a quick test.

photo
1

I did a test with RDS from an EC2 instance and I'm really happy with the result. I had no problems at all.

Comments have been locked on this page!