TMA-MYSQL-9.1
Ensure Replication Traffic is Secured
Opis
The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic, and performing mutual authentication between the servers before performing replication.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Secure replication with TLS (CHANGE REPLICATION SOURCE TO SOURCE_SSL=1, SOURCE_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- mysqldatabasereplicationtlsmanual
- Referenca
- CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 9.1 Ensure Replication Traffic is Secured