TMAegisBeta
更多 tdsql 规则

TDSQL

TMA-TDSQL-2.3

Ensure a Backup and Recovery Strategy Is Configured

高级别 1人工审核tdsql

说明

TDSQL should be configured with a complete backup strategy. Supported methods include: Physical backup (XtraBackup): enabled by default (xtrabackup="1") Logical backup (mydumper): optional (mydumper="0") ZooKeeper data backup: metadata backed up to local files (/data/home/zkback/) Storage backends: local filesystem (/tdsqlbackup/), COS, OBS, S3, HDFS, DBS.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

# Check the backup configuration in scheduler.xml grep -A5 '<backup' /path/to/tdsql/conf/scheduler.xml # Expected: xtrabackup="1" # Check the ZK backup configuration cat /path/to/tdsql/conf/backupConf.xml # Verify the backup directory ls -la /tdsqlbackup/ 2>/dev/null

修复方式

修复方法: 操作指南或基础设施补丁

Enable physical backup with incremental support in scheduler.xml: <backup increment_flag="1" increment_interval_day="1" mydumper="0" xtrabackup="1" /> Configure the ZK backup retention policy in backupConf.xml: <backup backupfile_save_dir="/data/home/zkback" resv_capacity="800" resv_days="30"> Configure off-site backups (COS/S3/HDFS) for disaster recovery. Test recovery regularly.

属性

操作系统
任意
标签
tdsqlbackup
参考
CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.3 Ensure a Backup and Recovery Strategy Is Configured