Ensure Dedicated Hosts Are Used for TDSQL Components

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

# Check for non-TDSQL processes listening on network ports ss -tlnp | grep -v -E '(mysqld|oss_server|scheduler|zookeeper|tdsqlproxy|oc_agent)' # Review running processes ps aux --sort=-%mem | head -20

How it is fixed

Fix method: Guidance or infrastructure patch

Deploy TDSQL on dedicated hosts. Remove unnecessary software packages. Use TDSQL's set/group architecture to achieve component isolation.