TDSQL
TMA-TDSQL-2.1
Ensure Dedicated Hosts Are Used for TDSQL Components
中等級 1人工審核tdsql
說明
TDSQL components should be deployed on dedicated hosts that do not run other application workloads. This applies to all components: OSS, Manager/Scheduler/Keeper, MySQL instances, Proxy, and ZooKeeper.
檢查方式
稽核方法: 人工審核
此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。
# Check for non-TDSQL processes listening on network ports ss -tlnp | grep -v -E '(mysqld|oss_server|scheduler|zookeeper|tdsqlproxy|oc_agent)' # Review running processes ps aux --sort=-%mem | head -20
修補方式
修補方法: 操作指南或基礎設施修補檔
Deploy TDSQL on dedicated hosts. Remove unnecessary software packages. Use TDSQL's set/group architecture to achieve component isolation.
屬性
- 作業系統
- 不限
- 標籤
- tdsqlarchitecture
- 參考資料
- CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.1 Ensure Dedicated Hosts Are Used for TDSQL Components