bind_address
INFO
Rule IDs: net_002
Overview
- Purpose
- Documented in the MySQL 8.4 manual as a server system variable (scope: Global). Purpose and semantics are described at the linked manual page.
- Dynamic (MySQL 8.4 reference)
- MySQL 8.4 marks this variable as not dynamic (
Dynamic= No). It must be set inmy.cnfor on the command line; changing it requires a restart. - Default value
- * (all interfaces) (MySQL 8.4)
- Version and product notes
- MariaDB and Percona Server may use different names, defaults, or dynamic behavior; verify their documentation.
- Documentation
- https://dev.mysql.com/doc/refman/8.4/en/server-system-variables.html#sysvar_bind_address
- Other vendors
What is checked
Rules that reference this variable, with their severity and what each rule detects:
- INFO
net_002: Bind to specific interfaces or ensure network-level firewalling when binding to all addresses.
Tuning guidance
- Recommended actions:
- Bind to specific interfaces or ensure network-level firewalling when binding to all addresses.
- Trade-offs: Network settings affect packet size limits, bind addresses, and protocol exposure. Changing bind_address or disabling X Protocol requires a restart.
Example
Configure in my.cnf (or equivalent) or server startup options, then restart.