Ensure Replication Traffic is Secured

VisokaNivo 1Ručni pregledmariadb

Opis

The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic and performing mutual authentication between the servers before performing replication.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication. If using TLS, run SHOW REPLICA STATUS\G and verify Master_SSL_Allowed = Yes.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Secure replication with TLS (CHANGE MASTER TO MASTER_SSL=1, MASTER_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.

Svojstva

Operativni sistemi: Bilo koji
Oznake: mariadbdatabasereplicationtlsmanual
Referenca: CIS MariaDB 10.11 Benchmark v1.0.0 - 9.1 Ensure Replication Traffic is Secured