Getting a server running properly.
WHAT TO DO AFTER INSTALLATION
Run the security script, or its equivalent Set a strong root password Remove anonymous accounts Remove the test database Disable remote root login
WHY REMOTE ROOT SPECIFICALLY
It is the first thing attempted against any exposed database.
WHAT TO DECIDE
Whether the database should be reachable from outside at all.
WHAT THE SAFEST ANSWER IS
No, binding it to the local address only.
WHEN REMOTE ACCESS IS NEEDED
Separate application and database servers.
WHAT TO DO THEN
Restrict by address, and require encrypted connections.
WHERE CONFIGURATION LIVES
A main file, plus an include directory, varying by distribution.
WHAT TO CHANGE FIRST
The buffer pool size, for the main storage engine.
WHAT TO SET IT TO
A substantial proportion of available memory on a dedicated server, far less on a shared one.
WHY IT MATTERS MOST
It determines how much data is served from memory rather than disk.
WHAT ELSE TO REVIEW
Connection limits Temporary table sizes Log file sizes The slow query threshold
WHAT TO ENABLE IMMEDIATELY
The slow query log.
WHY
It is the primary diagnostic, and it costs almost nothing.
WHAT TO CHANGE ONE AT A TIME
Everything.
