Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-16988

Galera rsync method can now use stunnel to encrypt data transmission.

Details

    Description

      Add here:

      https://mariadb.com/kb/en/library/getting-started-with-mariadb-galera-cluster/#rsync

      Need also a short example how to configure and use this on Galera rsync SST (I can't give you that).

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-15511 Use stunnel during rsync SST if available

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            jplindst Jan Lindström (Inactive) added a comment -

            Something like :

            This method uses the rsync utility for snapshots. rsync should be available by default on all modern linux distributions. This is the fastest and recommended method, especially for large datasets since it copies binary data. It requires a READ LOCK during the whole process, as for mysqldump.

            As of MariaDB 10.1.36, stunnel can now be used to encrypt data over the wire. Be sure to have it installed, and to set tkey and tcert options referring to the Galera Cluster documentation (certificate directory will have to be hashed : openssl rehash /path/to/certs/).

            jplindst Jan Lindström (Inactive) added a comment - Something like : This method uses the rsync utility for snapshots. rsync should be available by default on all modern linux distributions. This is the fastest and recommended method, especially for large datasets since it copies binary data. It requires a READ LOCK during the whole process, as for mysqldump. As of MariaDB 10.1.36, stunnel can now be used to encrypt data over the wire. Be sure to have it installed, and to set tkey and tcert options referring to the Galera Cluster documentation (certificate directory will have to be hashed : openssl rehash /path/to/certs/).
            greenman Ian Gilfillan added a comment -

            Basic documentation has been added, as well as on release notes. Will add example at a later stage.

            greenman Ian Gilfillan added a comment - Basic documentation has been added, as well as on release notes. Will add example at a later stage.

            People

              greenman Ian Gilfillan
              jplindst Jan Lindström (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.