I'm working on app that uses MySQL database on XAMPP Control Panel on Windows.
I am concerned about security part.
I received advice about connecting to MySQL through VPN so it won't be accessible so easily.
As far as I understand it, VPN helps with blocking unwanted traffic to database.
I was thinking about whitelisting IP's instead of setting up VPN. There is only handful of non-localhost connections for this database so setting up separate privileges and user with specified IP address allowed to connect for each device wouldn't be problem at all.
Thing is, I don't know exactly how this works - will it allow to try to connect if particular IP is not within whitelist? I would guess not?
Will this get me similar result as if I'd use VPN? What are differences between this two approaches?