429 Commits (724ddc14eba0df30caa03d07fc66df60927002ca)

Author	SHA1	Message	Date
René Cannaò	e9dc7a9b60	Implementation of SQLI fingerprints whitelist ... libsqlinjection generates a lot of false positives. This commit introduces a new table: mysql_firewall_whitelist_sqli_fingerprints This table can list fingerprints generated by libsqlinjection: if the fingerprint is listed in this table, proxysql will consider it as a false positive. This commit also enables SQLi algorithm only if the query is not already explicitly whitelisted.	6 years ago
René Cannaò	8954b46a02	Error log now lists the SQL injection query ... Also added status variable automatic_detected_sql_injection to count detected SQL injection	6 years ago
René Cannaò	e12a3b2792	Support for automatic SQL injection detection ... Library libjection is being used. New variable mysql-automatic_detect_sqli defines if the feature is enabled or not. If an SQL injection is detected: - the client connection is immediately terminated - an entry in the error log is reported	6 years ago
René Cannaò	485d313514	Further development of firewall whitelist. ... * introduced 2 new variables: - mysql-firewall_whitelist_enabled : defines if the firewall with whitelist algorithm is enabled or not - firewall_whitelist_errormsg : error message returned to the client if an error message is not already set * Query_Processor returns firewall_whitelist_mode to the calling MySQL_Session, but the logging on error log currently happens within the Query_Processor itself * if mysql-firewall_whitelist_enabled is turned on and a user it is not found in mysql_firewall_whitelist_users , the default behavior is that query is rejected * lookup on mysql_firewall_whitelist_users happens for username@ip (specific IP) and username@'' (all IPs) . Match on network subnet is currently not implemented * implemented SAVE MYSQL FIREWALL FROM RUNTIME * fixed implementation of SAVE MYSQL FIREWALL TO DISK * runtime configuration can be viewed in runtime_mysql_firewall_whitelist_rules and runtime_mysql_firewall_whitelist_users	6 years ago
René Cannaò	ce4a4a2464	Code cleanup and speeding compile time	6 years ago
René Cannaò	45e701b54d	Code cleanup and speeding compile time	6 years ago
René Cannaò	80e92b144d	[WIP] Second commit for mysql firewall whitelist ... Improved also compiling time	6 years ago
René Cannaò	d7c5c93a86	Change default handle_unknown_charset=1	6 years ago
Valentin Rakush	d8928dd896	Fix memory leaks of idle threads	6 years ago
Valentin Rakush	1ffd3616c9	Group replication monitoring: count transactions behind events	6 years ago
René Cannaò	3ad899c758	Avoid crash in JSON library for invalid UTF8	6 years ago
René Cannaò	6dbac33a62	Merge branch 'v2.0.8' into charset	6 years ago
René Cannaò	be654506ec	Merge pull request #2350 from sysown/v2.0.8-ssl32k ... Handle large queries with SSL enabled	6 years ago
Valentin Rakush	1e3aec3b94	Fixes after review	6 years ago
Valentin Rakush	15f121d82f	handle unknown character set	6 years ago
René Cannaò	ad8a735061	Improved the speed of refreshing mysql variables ... On commodity hardware, time dropped from 10us to 3us	6 years ago
René Cannaò	50876113f7	Renaming variable aurora_only_read_from_replicas into aurora_max_lag_ms_only_read_from_replicas	6 years ago
René Cannaò	35705f769a	Adding variable aurora_only_read_from_replicas ... If AWS Aurora is used and max_lag_ms , send traffic only to replicas if at least N replicas are good candidates.	6 years ago
Valentin Rakush	1008b7d0c5	unit8_t conversion	6 years ago
René Cannaò	be3bb9629d	Add variable mysql-log_unhealthy_connections ... Added new variable mysql-log_unhealthy_connections. Enabled by default. If disabled, warnings `Closing unhealthy client connection` are suppressed.	6 years ago
Valentin Rakush	b5725c44e3	set character set implementation. initial commit	6 years ago
René Cannaò	71f167e994	Changed default max_allowed_packet from 4M to 64M	6 years ago
René Cannaò	1bd6117db8	Handle large queries with SSL enabled ... This commit fixes the following bug: if a client connection uses SSL and sends a query larger than 32KB, the query is never executed and the connection hang	6 years ago
Valentin Rakush	b13c320210	digests number: converting numbers to ? for digest calculation	7 years ago
René Cannaò	ba5aaefcf6	Generate a warning if mysql-wait_timeout is less than 5 seconds	7 years ago
Valentin Rakush	25d75b93e6	tx_isolation: use separate default value for TX_ISOLATION	7 years ago
Valentin Rakush	202cae4c39	set tx_isolation implementation	7 years ago
René Cannaò	725c226574	Adding more debugging information when a client connections is closed	7 years ago
René Cannaò	6f9989e4d9	Setting default for group replication max timeout count #2187 ... Also fixed paths in Makefile for tests	7 years ago
Valentin Rakush	757684c6d9	[FR] Group Replication Timeout count	7 years ago
René Cannaò	99b4dd4bbd	Merge pull request #2243 from sysown/v2.0.7.2 ... V2.0.7.2	7 years ago
Adrián del Campo	58b7fecbef	Added support for tcp_keepalives in proxysql client conns	7 years ago
René Cannaò	aaf83eec78	Finalizing the support for more session variables ... Initial support for `SET SESSION TRANSACTION READ ONLY` or `READ WRITE`. Extended `SET` parser to support also `SET SESSION TRANSACTION`. Hostgroup Manager doesn't kill backend connections in case of error 1231. `autocommit` is set at session level but also on MySQL client connection. Added several debugging entries. Several `handler_again___verify_backend_*` functions are disabled if `locked_on_hostgroup` is enabled.	7 years ago
René Cannaò	60f68b754a	Set min value for session_idle_ms to 1 ... Previously it was 100. Up to 2.0.5 , due to a bug, session_idle_ms was always 1 when enabled .	7 years ago
René Cannaò	673bb96cfb	Adding functions for tracking more variables ... Extended unit testing parser Distinguish between variables that need quote or no quote	7 years ago
René Cannaò	ddf4a231a3	More on adding functions for tracking variables	7 years ago
René Cannaò	46e38d4cf6	More debugging	7 years ago
René Cannaò	a1f39bf784	2nd drafting tracking of various variables	7 years ago
René Cannaò	91f518d61a	Drafting tracking of various variables: ... - character_set_results - isolation level - session_track_gtids	7 years ago
René Cannaò	1658c33375	Adding variable mysql-query_digests_replace_null #2171	7 years ago
René Cannaò	4c1f4a8d82	Enhancements on AWS Aurora module ... Added 2 new status variables: - queries_with_max_lag_ms__delayed - queries_with_max_lag_ms__total_wait_time_us Do not get replication lag from replicas if the value is 0 Fixed an error in the computation of max_lag_ms	7 years ago
René Cannaò	ce757db70d	Merge pull request #2156 from sysown/v2.0.6-hg_locked ... V2.0.6 hg locked	7 years ago
René Cannaò	bfda39ea6f	Track capability flags in get_MyConn_local()	7 years ago
René Cannaò	8c4b70a557	Added capability to lock hostgroup ... This should fix a lot of issues related to failed parsing of SET statement. This and the two 2 previous commits introduce several status variables, and a new configuration variable: mysql-set_query_lock_on_hostgroup Possible values for mysql-set_query_lock_on_hostgroup: - 0 : legacy behavior , before 2.0.5 - 1 : (default) . SET statements that cannot be parsed correctly disable both multiplexing AND routing. Attempting to route traffic while a connection is linked to a specific backend connection will trigger an error to be returned to the client	7 years ago
René Cannaò	f2f3935fcd	drafting locked hostgroup	7 years ago
René Cannaò	6691a867fa	Fix issues/FR #2120 , #2121 and #2125 ... Issue #2120 : Send SESSION_TRACK_GTIDS to client Issue #2121 : Track CLIENT_FOUND_ROWS required by the client Issue #2125 : Track CLIENT_MULTI_STATEMENTS required by the client	7 years ago
René Cannaò	0831740e45	Several enhancements on Query logger ... Enhancements: - added metrics rows_affected and rows_sent - added global variable mysql-eventslog_default_log : if 1 , logging is enabled for every query unless explicitly disabled in mysql_query_rules.log . Default is 0 - added global variable mysql-eventslog_format : default is 1 (legacy format). A value of 2 enables logging in JSON format. Issue #871 Changing value at runtime causes the current file to be closed and a new one created - fixed logging for prepared statements: till 2.0.5 only some percentage of prepared statements was correctly logged Extended tables stats_mysql_query_digest and stats_mysql_query_digest_reset to also include sum_rows_affected and sum_rows_sent Extended `eventslog_reader_sample.cpp` to support the new enhancements	7 years ago
René Cannaò	9ed7094cfe	Implemeting of more locking in SELECT statements ... SELECT ... FOR SHARE SELECT ... LOCK IN SHARE MODE SELECT ... FOR (UPDATE|SHARE) [OF ...] (NOWAIT|SKIP LOCKED)	7 years ago
Yubao Liu	ae80f15315	fix crash on "proxysql restart" ... MySQL_HostGroups_Manager::get_MyConn_from_pool() inserts connection to mysrvc->ConnectionUsed, and this connections is also inserted to My_Thread->cached_connections which leads to double deallocation. Fixed https://github.com/sysown/proxysql/issues/1985.	7 years ago
Yubao Liu	676fd93836	fix crash when execute "PROXYSQL STOP" and then query table "stats_mysql_processlist" ... After execute "PROXYSQL STOP", main() -> ProxySQL_Main_init_phase4___shutdown() is called, then main() -> ProxySQL_Main_init_phase2___not_started() is called, this function creates GloMTH and waits on GloVars.global.start_mutex, thus ProxySQL_Main_init_phase3___start_all() -> ProxySQL_Main_init_MySQL_Threads_Handler_module() isn't called. Before "PROXYSQL START" is executed, admin module will crash on query to stats_mysql_processlist. Similar cause to https://github.com/sysown/proxysql/issues/2037 and https://github.com/sysown/proxysql/issues/2065.	7 years ago