200 Commits (8c1d4ef8f30079dfd6af6a8a729a93d253a20880)

Author	SHA1	Message	Date
René Cannaò	e9dc7a9b60	Implementation of SQLI fingerprints whitelist ... libsqlinjection generates a lot of false positives. This commit introduces a new table: mysql_firewall_whitelist_sqli_fingerprints This table can list fingerprints generated by libsqlinjection: if the fingerprint is listed in this table, proxysql will consider it as a false positive. This commit also enables SQLi algorithm only if the query is not already explicitly whitelisted.	6 years ago
René Cannaò	8954b46a02	Error log now lists the SQL injection query ... Also added status variable automatic_detected_sql_injection to count detected SQL injection	6 years ago
René Cannaò	e12a3b2792	Support for automatic SQL injection detection ... Library libjection is being used. New variable mysql-automatic_detect_sqli defines if the feature is enabled or not. If an SQL injection is detected: - the client connection is immediately terminated - an entry in the error log is reported	6 years ago
René Cannaò	57e0b2eb2f	Merge pull request #2403 from sysown/v2.0.9-whitelist ... V2.0.9 whitelist	6 years ago
René Cannaò	485d313514	Further development of firewall whitelist. ... * introduced 2 new variables: - mysql-firewall_whitelist_enabled : defines if the firewall with whitelist algorithm is enabled or not - firewall_whitelist_errormsg : error message returned to the client if an error message is not already set * Query_Processor returns firewall_whitelist_mode to the calling MySQL_Session, but the logging on error log currently happens within the Query_Processor itself * if mysql-firewall_whitelist_enabled is turned on and a user it is not found in mysql_firewall_whitelist_users , the default behavior is that query is rejected * lookup on mysql_firewall_whitelist_users happens for username@ip (specific IP) and username@'' (all IPs) . Match on network subnet is currently not implemented * implemented SAVE MYSQL FIREWALL FROM RUNTIME * fixed implementation of SAVE MYSQL FIREWALL TO DISK * runtime configuration can be viewed in runtime_mysql_firewall_whitelist_rules and runtime_mysql_firewall_whitelist_users	6 years ago
René Cannaò	45e701b54d	Code cleanup and speeding compile time	6 years ago
René Cannaò	a9f5e360c1	Upgrade to MariaDB Connector 3.1.4	6 years ago
Valentin Rakush	1ffd3616c9	Group replication monitoring: count transactions behind events	6 years ago
Valentin Rakush	15f121d82f	handle unknown character set	6 years ago
René Cannaò	50876113f7	Renaming variable aurora_only_read_from_replicas into aurora_max_lag_ms_only_read_from_replicas	6 years ago
René Cannaò	35705f769a	Adding variable aurora_only_read_from_replicas ... If AWS Aurora is used and max_lag_ms , send traffic only to replicas if at least N replicas are good candidates.	6 years ago
Valentin Rakush	1008b7d0c5	unit8_t conversion	6 years ago
René Cannaò	be3bb9629d	Add variable mysql-log_unhealthy_connections ... Added new variable mysql-log_unhealthy_connections. Enabled by default. If disabled, warnings `Closing unhealthy client connection` are suppressed.	6 years ago
Valentin Rakush	b13c320210	digests number: converting numbers to ? for digest calculation	7 years ago
René Cannaò	5f8e2acbb9	Change the default for tx_isolation	7 years ago
Valentin Rakush	202cae4c39	set tx_isolation implementation	7 years ago
Valentin Rakush	757684c6d9	[FR] Group Replication Timeout count	7 years ago
René Cannaò	99b4dd4bbd	Merge pull request #2243 from sysown/v2.0.7.2 ... V2.0.7.2	7 years ago
Adrián del Campo	58b7fecbef	Added support for tcp_keepalives in proxysql client conns	7 years ago
René Cannaò	aaf83eec78	Finalizing the support for more session variables ... Initial support for `SET SESSION TRANSACTION READ ONLY` or `READ WRITE`. Extended `SET` parser to support also `SET SESSION TRANSACTION`. Hostgroup Manager doesn't kill backend connections in case of error 1231. `autocommit` is set at session level but also on MySQL client connection. Added several debugging entries. Several `handler_again___verify_backend_*` functions are disabled if `locked_on_hostgroup` is enabled.	7 years ago
René Cannaò	c520866058	More on functions for tracking more variables	7 years ago
René Cannaò	673bb96cfb	Adding functions for tracking more variables ... Extended unit testing parser Distinguish between variables that need quote or no quote	7 years ago
René Cannaò	ddf4a231a3	More on adding functions for tracking variables	7 years ago
René Cannaò	91f518d61a	Drafting tracking of various variables: ... - character_set_results - isolation level - session_track_gtids	7 years ago
René Cannaò	1658c33375	Adding variable mysql-query_digests_replace_null #2171	7 years ago
René Cannaò	4c1f4a8d82	Enhancements on AWS Aurora module ... Added 2 new status variables: - queries_with_max_lag_ms__delayed - queries_with_max_lag_ms__total_wait_time_us Do not get replication lag from replicas if the value is 0 Fixed an error in the computation of max_lag_ms	7 years ago
René Cannaò	ce757db70d	Merge pull request #2156 from sysown/v2.0.6-hg_locked ... V2.0.6 hg locked	7 years ago
René Cannaò	8c4b70a557	Added capability to lock hostgroup ... This should fix a lot of issues related to failed parsing of SET statement. This and the two 2 previous commits introduce several status variables, and a new configuration variable: mysql-set_query_lock_on_hostgroup Possible values for mysql-set_query_lock_on_hostgroup: - 0 : legacy behavior , before 2.0.5 - 1 : (default) . SET statements that cannot be parsed correctly disable both multiplexing AND routing. Attempting to route traffic while a connection is linked to a specific backend connection will trigger an error to be returned to the client	7 years ago
René Cannaò	f2f3935fcd	drafting locked hostgroup	7 years ago
René Cannaò	6691a867fa	Fix issues/FR #2120 , #2121 and #2125 ... Issue #2120 : Send SESSION_TRACK_GTIDS to client Issue #2121 : Track CLIENT_FOUND_ROWS required by the client Issue #2125 : Track CLIENT_MULTI_STATEMENTS required by the client	7 years ago
René Cannaò	0831740e45	Several enhancements on Query logger ... Enhancements: - added metrics rows_affected and rows_sent - added global variable mysql-eventslog_default_log : if 1 , logging is enabled for every query unless explicitly disabled in mysql_query_rules.log . Default is 0 - added global variable mysql-eventslog_format : default is 1 (legacy format). A value of 2 enables logging in JSON format. Issue #871 Changing value at runtime causes the current file to be closed and a new one created - fixed logging for prepared statements: till 2.0.5 only some percentage of prepared statements was correctly logged Extended tables stats_mysql_query_digest and stats_mysql_query_digest_reset to also include sum_rows_affected and sum_rows_sent Extended `eventslog_reader_sample.cpp` to support the new enhancements	7 years ago
René Cannaò	9e2c1fdda1	Draft implementation of audit log	7 years ago
René Cannaò	570d0283f5	Added variable monitor_galera_healthcheck_max_timeout_count ... Further testing required	7 years ago
René Cannaò	58ff4ff892	Merge branch 'v2.0.4' into v2.0.1-aurora	7 years ago
René Cannaò	528d8cac38	Improved debugging ... Added new command `PROXYSQL INTERNAL SESSION` that clients can execute to receive internal information about their own connection in JSON format. Added JSON library. Recompiled SQLite3 to support JSON. Added new column `extended_info` in `stats_mysql_processlist`. Added new mysql variable `mysql-show_processlist_extended` that determine the content of `stats_mysql_processlist.extended_info`: - 0 : no info - 1 : JSON format - 2 : JSON format with pretty printing	7 years ago
René Cannaò	01023d6856	Merge branch 'v2.0.4' into v2.0.1-aurora	7 years ago
René Cannaò	a21da6b450	Port to 2.0 of PR #1922 ... support more mysql system variables to keep mulitplexing enabled Added variable mysql-keep_multiplexing_variables	7 years ago
René Cannaò	e20acb9a1c	Adding more status variables ... Useful for AWS Aurora, but not only	7 years ago
René Cannaò	8469801e74	Implemented first prototype of latency awareness ... Configurable using mysql-min_num_servers_lantency_awareness	7 years ago
René Cannaò	b74181eeea	Added aws_aurora_replicas_skipped_during_query ... aws_aurora_replicas_skipped_during_query is a status variable for better monitoring behavior due to replication lag in AWS Aurora Also fixed lag computing in connection pool	7 years ago
René Cannaò	af0a7100e2	Adding support for max_lag_ms in query	7 years ago
René Cannaò	531f3b4021	Adding ldap user variable, first commit	7 years ago
René Cannaò	0a60cfda11	Merge branch 'v2.0.0-tb' into v2.0.0-merge-tb	7 years ago
René Cannaò	b82a1c18ac	Merge pull request #1857 from sysown/v2.0.0-digestSplit ... V2.0.0 digest split	7 years ago
René Cannaò	49a4dd5fc5	Merge branch 'v2.0.0' into v2.0.0_merge_ldap	7 years ago
René Cannaò	6bdacade78	Added mysql-auto_increment_delay_multiplex #1828 ... Temporary disable multiplexing when last_insert_id is returned in OK packet. Multiplexing is disabled for mysql-auto_increment_delay_multiplex queries. mysql-auto_increment_delay_multiplex ranges from 0 to 1000000 . Default value is 5	7 years ago
René Cannaò	6f8c37eec9	Store digest_text on a different hash table ... This should drastically reduce memory usage where identical queries are executed an several schemas or by different users.	7 years ago
René Cannaò	54d32d4580	Implementation of AUTH SWITCH ... - if clients uses mysql_native_password, if LDAP is enabled and if the user doesn't exist, switch to mysql_clear_password. - if neither mysql_native_password or mysql_clear_password are used by the client: - if LDAP is not enabled, always switch to mysql_native_password - if LDAP is enabled: - if the user exists, switch to mysql_native_password - if the user doesn't exists, switch to mysql_clear_password Added MySQL variable mysql-add_ldap_user_comment to determine if a comment with the original username needs to be added in the queries. This commit also tracks the charset during the first handshake response.	7 years ago
René Cannaò	fc4d201f76	Extend server_capabilities to 32 bits ... Also introduces new flags by default: - CLIENT_MYSQL - CLIENT_PLUGIN_AUTH	7 years ago
René Cannaò	dc73e7bd5d	Minor optimizations detected with valgrind	7 years ago