Yes, WordPress can use a MySQL or MariaDB database on another server while the website remains publicly reachable. The reliable pattern is to place both machines on a routable private network, allow the database port only from the web server’s private address, create a dedicated least-privilege database account, test the connection from the WordPress host, and then set DB_NAME, DB_USER, DB_PASSWORD and DB_HOST in wp-config.php.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
Prove DNS, routing, the listener, firewall rules and credentials with a database client before changing WordPress. That order separates network failures from WordPress configuration errors and keeps the database off the public internet.
As an Amazon Associate I earn from qualifying purchases.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat a private remote WordPress database setup looks like
In a split deployment, the web server runs PHP and WordPress files, while a separate MySQL or MariaDB server stores posts, users, settings, comments and plugin data. The browser still connects to the public website address, but the web server connects to a private database hostname or address across a virtual private cloud, private subnet, provider peering link or site-to-site VPN.
The database is not private merely because it is on another machine. It is private when the database service is reachable through an internal path and its firewall or security group rejects unsolicited public traffic. Authentication remains necessary: a private network is an access-control layer, not a replacement for a database password and grants.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Traffic flows
- Visitor to WordPress: public HTTPS address to the web server or reverse proxy.
- WordPress to database: private hostname and database port from the web server’s private address.
- Administrator to WordPress: HTTPS, including login and dashboard traffic.
A remote database adds a network hop to every request that needs database work. Keep the two systems in the same private region or data center when response time matters, and measure the actual deployment rather than relying on a universal latency target; authoritative WordPress guidance does not publish one.
Requirements and compatibility
Network and account prerequisites
- A WordPress host and a MySQL or MariaDB host joined by a routable private network.
- A database created specifically for this WordPress installation.
- A unique database account used only by this installation.
- A firewall or security-group rule allowing the database port only from the WordPress host’s private IP address or the smallest private subnet that is genuinely required.
- Administrative access to both hosts so you can inspect routes, listeners, grants and logs.
WordPress hardening guidance recommends disabling unnecessary remote TCP access. Do not open the database port to the entire internet simply because WordPress is hosted elsewhere.
Recommended Free Tools
Supported software baseline
The current WordPress requirements page recommends PHP 8.3 or newer, MySQL 8.0 or newer, MariaDB 10.11 or newer, and HTTPS. Older combinations may still run, but the requirements page notes that PHP 7.4 and MySQL 5.5.5 have reached official end of life and can leave a site exposed to security vulnerabilities. Check the live requirements page before deployment because support boundaries change.
The WordPress Hosting Handbook lists MySQL 8.4 LTS and MariaDB 11.8 LTS among newer long-term-support branches. It also identifies mysqli and OpenSSL support as components used for database and SSL-based connections. Confirm that your PHP build includes the database extension and that your operating system receives security updates.
Choose the private connectivity method
The right design depends on where the web and database servers run. Compare the available paths before writing firewall rules.
| Option | Exposure | Operational complexity | Latency and failure behavior | When it fits |
|---|---|---|---|---|
| Private subnet or VPC connection | Traffic stays on the provider’s internal network; no public database endpoint is required. | Usually the simplest when both hosts are in one provider network. | Often the shortest path. A provider subnet or zone outage can affect both machines, depending on placement. | Preferred when the web and database are in the same cloud or hosting network. |
| Site-to-site VPN | Encrypts traffic between separate private networks without exposing the database listener publicly. | Requires tunnel endpoints, routing, key or certificate management and monitoring. | Adds tunnel overhead and another failure domain; tunnel loss can look like a database outage. | Useful for separate clouds, offices, data centers or on-premises networks. |
| Private endpoint or provider peering | Uses a provider-managed private service path and avoids a public database address. | Depends on the provider’s endpoint, DNS and routing model. | Provider-managed failover may be available, but the exact behavior must be verified in that service’s documentation. | Useful with managed database services that support private connectivity. |
| Public endpoint with an IP allow-list | The service remains internet-addressable even if only one source IP is allowed. | Often quickest to deploy, but requires stable egress addresses and careful rule maintenance. | Public routing can add distance and exposes another externally reachable service. | Fallback only when private connectivity is unavailable, with compensating controls documented. |
If the requirement is specifically a private network, use a private subnet, private endpoint or VPN. A public endpoint restricted by an allow-list is not equivalent to private reachability.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Step 1: Create a dedicated database and user
Perform this work on the database server or through its administrative console. Choose a database name and username that are unique to the site. The account should not be shared with another application, a developer’s personal login or a backup process.
Example MySQL or MariaDB statements
CREATE DATABASE wordpress_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'wordpress_app'@'10.20.30.40'
IDENTIFIED BY 'use-a-long-unique-secret';
GRANT SELECT, INSERT, UPDATE, DELETE
ON wordpress_db.*
TO 'wordpress_app'@'10.20.30.40';
FLUSH PRIVILEGES;Replace 10.20.30.40 with the WordPress host’s actual private address, or use the narrow private subnet required by your topology. The exact account-host syntax and authentication defaults vary by MySQL or MariaDB version, so verify it against the server version in use.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
For normal operations—publishing posts, uploading media metadata, accepting comments, creating users and installing plugins—the WordPress Hosting Handbook’s database security guidance says the application account needs data read and write privileges: SELECT, INSERT, UPDATE and DELETE. Do not grant global administration, user-management, file privileges or access to unrelated databases merely to make an installation work. Some maintenance or migration tools may need temporary additional privileges; grant them for the task, then remove them.
Store the secret safely
- Use a long, unique password that is not reused by the operating system, hosting panel or another site.
- Keep it out of tickets, chat transcripts, shell history and public error logs.
- Restrict
wp-config.phpto the web-service account and authorized administrators. - If your hosting platform provides a secret store, use it according to that platform’s WordPress integration rather than copying credentials into multiple files.
Step 2: Bind the database to the private path
MySQL and MariaDB must listen on an interface that the WordPress host can reach. Configure the service’s bind or listener setting for the private interface or private address required by your network. Binding only to 127.0.0.1 permits local connections but rejects the remote WordPress host; binding broadly to every interface can expose the service if the firewall is wrong.
After changing the database configuration, restart or reload the service using your operating system’s supported method and inspect its listening sockets. Confirm the listener is on the intended private address and port, normally TCP 3306 unless you deliberately chose another port.
Firewall rule design
- Allow inbound TCP traffic on the database port from the WordPress host’s private IP, or from the smallest private subnet that must connect.
- Reject all public-internet sources and remove old temporary rules.
- Allow administration from a separate, controlled management path only when needed.
- Apply equivalent outbound and network ACL rules if your provider filters both directions.
A firewall rule should describe the real source address seen by the database. With a VPN, peering or NAT gateway, that may differ from the web server’s local interface address. Check the provider’s routing and source-address behavior instead of guessing.
Step 3: Verify DNS, routing and the port from the WordPress host
Run these checks on the WordPress machine, not on your laptop. A successful connection from an administrator’s computer proves nothing about the web server’s route.
- Resolve the private name. Query the hostname you plan to place in
DB_HOST. It must resolve from the WordPress host to the intended private address, not a public address or an obsolete server. - Check the route. Confirm the web host has a route to the database subnet. Inspect the private interface, route table, VPN status or peering attachment as appropriate for your platform.
- Test the TCP port. Use an approved port-testing utility or database client to check the selected port. A timeout usually indicates routing, ACL or firewall trouble; an immediate refusal usually indicates that no process is listening or that the listener is bound to another interface.
- Authenticate with the application account. Use the same hostname, port, username and password that will appear in
wp-config.php.
Client test example
mysql --host=db.internal.example
--port=3306
--user=wordpress_app
--password
wordpress_dbEnter the password when prompted rather than putting it directly in a command that may be recorded in shell history. Once connected, run a harmless check such as SELECT 1;, then exit. A WordPress support answer recommends proving the remote connection and firewall path before changing WordPress settings; that approach prevents a bad network diagnosis from becoming a configuration chase.
Step 4: Set the WordPress database constants
Edit wp-config.php in the WordPress document root. The four essential constants are the database name, application username, password and database host.
define( 'DB_NAME', 'wordpress_db' );
define( 'DB_USER', 'wordpress_app' );
define( 'DB_PASSWORD', 'use-a-long-unique-secret' );
define( 'DB_HOST', 'db.internal.example' );DB_HOST is a hostname or IP address, not a URL. Do not add http://, a path or a database name. A private DNS name is generally easier to rotate than a hard-coded address, provided it resolves correctly on the WordPress host.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Non-default ports
Use the host-and-port syntax documented by your WordPress and database host when the server does not use the default port. A common form is:
define( 'DB_HOST', 'db.internal.example:3307' );Some managed services document a different syntax or require a socket or connection option. Follow that service’s documented form rather than assuming every provider handles ports identically. Do not add a port when the database listens on its default port.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesPlacement and syntax checks
- Use straight single quotes or double quotes consistently and terminate each PHP statement with a semicolon.
- Do not leave a password in a commented example that another administrator might mistake for the active value.
- Preserve the existing table-prefix setting unless your imported database uses a different prefix.
- Keep the file outside public downloads and ensure the web server treats it as PHP.
The official WordPress configuration example defines these constants in wp-config.php. A spelling error in any constant can produce a database connection error even when the network test succeeds.
Step 5: Install a new site or migrate an existing one
New WordPress installation
- Place the WordPress files on the web host and create
wp-config.phpwith the tested values. - Open the public site over HTTPS.
- Complete the installer when WordPress can authenticate and create its tables.
- Confirm that the selected database contains the new WordPress tables and that the account has no access to unrelated databases.
Existing site migration
Export the source database, import it into the destination database, and keep the table prefix consistent with the imported data. Coordinate the database import with the WordPress files and uploads directory; a database-only move does not move media files, themes or plugins.
- Set
DB_NAME,DB_USER,DB_PASSWORDandDB_HOSTto the destination values. - Confirm the stored site URL matches the public hostname and deployment plan.
- Verify that the uploads directory is present and writable by the web service.
- Test the home page, login, dashboard, media library, permalinks, comments and a representative plugin.
- Keep the old database read-only or isolated during cutover so writes do not diverge between systems.
Do not change URLs with an indiscriminate text replacement: serialized WordPress data can break when values are modified incorrectly. Use a migration method that understands serialized values, and take a restorable backup before editing production data.
Step 6: Keep administration encrypted
A private database path does not encrypt a visitor’s browser connection to WordPress. Serve the public site and especially login and dashboard traffic over HTTPS. WordPress supports FORCE_SSL_ADMIN in wp-config.php to require HTTPS for administration.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →define( 'FORCE_SSL_ADMIN', true );Enable this only after HTTPS is correctly terminated. If a reverse proxy or load balancer handles TLS, configure it to forward the HTTPS state in the manner required by WordPress and your hosting stack. Otherwise WordPress may believe every request is HTTP and create redirect loops or block legitimate dashboard requests.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Diagnose failures in the right order
When WordPress reports that it cannot establish a database connection, test from the bottom of the stack upward. Change one layer at a time and keep the exact error and timestamp.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
1. Name resolution failure
Symptom: the private hostname does not resolve, resolves publicly, or resolves to an old address.
Action: inspect the WordPress host’s DNS resolver and private-zone association. Correct the internal record, search path or provider DNS attachment. Test again from the same host that runs PHP.
2. Routing or ACL failure
Symptom: the name resolves to the right private address but a port test times out.
Action: inspect route tables, VPN tunnel state, peering status, network ACLs and security groups. Verify that the source address permitted by the database firewall is the address actually arriving at the database.
3. Listener or local firewall failure
Symptom: the route exists but the connection is refused, or the database accepts local connections only.
Action: check the MySQL or MariaDB listener address and port, then inspect the host firewall. Restart or reload the service after correcting its bind setting and verify the socket again.
Free tools Windows power users keep installed
One-click scans. No signup required.
4. Credentials or grants failure
Symptom: the port is reachable but the client reports access denied.
Action: repeat the client test with the exact host, port, username and password in wp-config.php. Inspect the account’s grants and its permitted source host. Remember that an account created for localhost is not automatically the same account as one created for a private IP.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
5. WordPress constant or PHP failure
Symptom: the command-line client succeeds but WordPress still fails.
Action: check spelling, quoting and semicolons in all four constants, confirm that the PHP build has mysqli, and inspect the web server’s PHP error log. Ensure the edited file is the one used by the active virtual host and deployment release.
6. HTTPS redirect problems
Symptom: enabling FORCE_SSL_ADMIN causes a redirect loop or makes the dashboard unreachable.
Action: verify the reverse proxy’s forwarded HTTPS state and WordPress’s proxy configuration. Temporarily correct the proxy/header path, then re-enable the constant after HTTPS detection is reliable.
Security controls that matter after launch
Limit network reachability
Keep the database listener private and the inbound rule limited to the WordPress host or required subnet. Remove temporary public rules used during setup. Review security-group and network-ACL changes as part of normal change management.
Use least privilege
The application account should have access only to its own database and the normal data privileges. Separate backup, migration and administrative accounts from the runtime account so a compromised plugin cannot inherit unnecessary server-wide powers.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Protect configuration and logs
Set filesystem permissions so the web-service account and authorized administrators can read wp-config.php. Check that diagnostic logging, crash reports and support tools do not print the database password. Rotate the account secret through a planned maintenance window and update every consumer together.
Monitor the connection
After launch, watch database connection errors, slow queries, CPU, memory, storage, connection counts and private-link or VPN health. A remote database can fail because of network saturation or tunnel loss even when the database process itself is healthy. Alert on both application symptoms and infrastructure signals.
Performance and availability trade-offs
Every WordPress request that needs database work crosses the private network. Performance is affected by physical distance, routing, connection setup, query count, query execution time and database load. Keeping the systems near each other reduces distance, but it does not remove inefficient queries or an undersized database.
- Measure response times and error rates from the production WordPress host.
- Record slow queries and investigate plugins that issue excessive or unindexed queries.
- Use connection and resource monitoring so saturation is visible before it becomes an outage.
- Design backups and restore tests for the database independently of the web server.
- Document what happens if the private link, VPN, database host or DNS service fails.
High availability is topology-specific. A second database server, managed failover endpoint or alternate network path may improve resilience, but each option introduces replication, DNS, credential or application-failover decisions. Do not claim failover protection unless it has been configured and tested.
Pre-launch checklist
- Both hosts can route over the intended private network.
- The private hostname resolves correctly from the WordPress host.
- MySQL or MariaDB listens on the intended private interface and port.
- The database firewall allows only the required WordPress source address or subnet.
- The dedicated user can access only the intended database.
- The runtime grants include
SELECT,INSERT,UPDATEandDELETE, with no unnecessary global privileges. - The command-line client succeeds using the exact values planned for
wp-config.php. DB_NAME,DB_USER,DB_PASSWORDandDB_HOSTare correctly quoted and saved in the active configuration file.- The database port is not exposed broadly to the public internet.
- HTTPS works for the site and administration before enforcing
FORCE_SSL_ADMIN. - Backups, restore procedures, monitoring and credential rotation are documented.
When a public endpoint is unavoidable
Some hosting combinations do not offer a private subnet, private endpoint or VPN. If a public database endpoint is the only available path, treat it as a compromise rather than calling it private. Restrict the provider’s allow-list to a stable WordPress egress IP, require strong authentication, keep the database software patched, use encrypted database transport when the provider supports it, and document why the exception exists. Revisit the design when private connectivity becomes available.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
