TMA-MYSQL-9.1
Ensure Replication Traffic is Secured
Descripción
The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic, and performing mutual authentication between the servers before performing replication.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Secure replication with TLS (CHANGE REPLICATION SOURCE TO SOURCE_SSL=1, SOURCE_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- mysqldatabasereplicationtlsmanual
- Referencia
- CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 9.1 Ensure Replication Traffic is Secured