TMA-MYSQL-9.1
Ensure Replication Traffic is Secured
Deskripsi
The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic, and performing mutual authentication between the servers before performing replication.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Secure replication with TLS (CHANGE REPLICATION SOURCE TO SOURCE_SSL=1, SOURCE_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.
Properti
- Sistem operasi
- Apa saja
- Tag
- mysqldatabasereplicationtlsmanual
- Referensi
- CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 9.1 Ensure Replication Traffic is Secured