How can I securely connect n8n Cloud to a MySQL database in a private subnet?

Below is an effective approach:

Use SSH Tunnel for MySQL Credentials

When the database is hosted in a private subnet, you can configure an SSH tunnel within n8n’s MySQL credentials. The SSH tunnel option allows n8n Cloud to route the connection securely through an intermediary server that has network access to your private subnet. This method avoids exposing your database to the public internet.

Steps to Implement:

1. Select SSH Tunnel in n8n
   In the MySQL credential configuration, enable the SSH Tunnel option.

2. Set Up SSH Authentication:

   • Choose Password or Private Key authentication for the SSH connection.
   • Provide the necessary SSH details:
     • SSH Host: The host (or IP) that has access to the private subnet.
     • SSH Port: The port (generally 22 unless configured otherwise).
     • SSH User: The user allowed to establish SSH connections.
     • Additional data: Depending on your chosen authentication method, add either the SSH password or your SSH private key (and passphrase if applicable).

3. Configure MySQL Connection Parameters:
   Enter your MySQL database details (host, database name, user, password, port, etc.) exactly as if the database were publicly available. The SSH tunnel will effectively forward the traffic from that SSH server to your MySQL instance.

Security and Efficiency Benefits:

• Security: The SSH tunnel provides encrypted communication, keeping your database traffic secure even over less trusted networks.
• Network Isolation: By tunneling through a host that resides in the same network as your database, you avoid exposing your database directly to the internet.
• Flexibility: n8n’s credential setup allows you to easily modify or update the tunneling configuration based on your security standards.

This approach is recommended in the official n8n documentation for connecting to MySQL databases via secure SSH tunnels when direct access is not possible.

By leveraging an SSH tunnel, you retain both secure and efficient connectivity between n8n Cloud and your privately hosted MySQL database.