MariaDB
TMA-MARIADB-9.1
Ensure Replication Traffic is Secured
YüksekDüzey 1Manuel incelememariadb
Açıklama
The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic and performing mutual authentication between the servers before performing replication.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication. If using TLS, run SHOW REPLICA STATUS\G and verify Master_SSL_Allowed = Yes.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Secure replication with TLS (CHANGE MASTER TO MASTER_SSL=1, MASTER_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- mariadbdatabasereplicationtlsmanual
- Referans
- CIS MariaDB 10.11 Benchmark v1.0.0 - 9.1 Ensure Replication Traffic is Secured