Ensure Replication Traffic is Secured

高级别 1人工审核mysql

说明

The replication traffic between servers should be secured. Security measures should include ensuring the confidentiality and integrity of the traffic, and performing mutual authentication between the servers before performing replication.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Check that replication traffic uses a private network, a VPN, SSL/TLS or an SSH tunnel for confidentiality, integrity and mutual server authentication.

修复方式

修复方法: 操作指南或基础设施补丁

Secure replication with TLS (CHANGE REPLICATION SOURCE TO SOURCE_SSL=1, SOURCE_SSL_CA=... and REQUIRE SSL/X509 for the replication account) or a private network/VPN.

属性

操作系统: 任意
标签: mysqldatabasereplicationtlsmanual
参考: CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 9.1 Ensure Replication Traffic is Secured