TMA-TDSQL-2.1
Ensure Dedicated Hosts Are Used for TDSQL Components
Deskripsi
TDSQL components should be deployed on dedicated hosts that do not run other application workloads. This applies to all components: OSS, Manager/Scheduler/Keeper, MySQL instances, Proxy, and ZooKeeper.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
# Check for non-TDSQL processes listening on network ports ss -tlnp | grep -v -E '(mysqld|oss_server|scheduler|zookeeper|tdsqlproxy|oc_agent)' # Review running processes ps aux --sort=-%mem | head -20
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Deploy TDSQL on dedicated hosts. Remove unnecessary software packages. Use TDSQL's set/group architecture to achieve component isolation.
Properti
- Sistem operasi
- Apa saja
- Tag
- tdsqlarchitecture
- Referensi
- CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.1 Ensure Dedicated Hosts Are Used for TDSQL Components