Ensure Replication Traffic is Secured

높음레벨 1수동 검토mariadb

설명

The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic and performing mutual authentication between the servers before performing replication.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication. If using TLS, run SHOW REPLICA STATUS\G and verify Master_SSL_Allowed = Yes.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Secure replication with TLS (CHANGE MASTER TO MASTER_SSL=1, MASTER_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.

속성

운영 체제: 모두
태그: mariadbdatabasereplicationtlsmanual
참고 자료: CIS MariaDB 10.11 Benchmark v1.0.0 - 9.1 Ensure Replication Traffic is Secured