. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Code Reviews . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to use for a given keyspace, cell, and tablet type. Partitions During horizontal resharding (splitting or merging shards), there can be shards with overlapping key ranges. For example, the source shard database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a

database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a the same database. Here we’ll go over what Vitess does and how it might impact you. 19 Query splitting A complicated query with a cross shard join might need to first fetch information from a tablet supports resharding, in which the number of shards is changed on a live cluster. This can be either splitting one or more shards into smaller pieces, or merging neighboring shards into bigger pieces. During

database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a connections to the same database. Here we’ll go over what Vitess does and how it might impact you. Query splitting A complicated query with a cross shard join might need to first fetch information from a tablet supports resharding, in which the number of shards is changed on a live cluster. This can be either splitting one or more shards into smaller pieces, or merging neighboring shards into bigger pieces. During

database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a the same database. Here we’ll go over what Vitess does and how it might impact you. 20 Query splitting A complicated query with a cross shard join might need to first fetch information from a tablet supports resharding, in which the number of shards is changed on a live cluster. This can be either splitting one or more shards into smaller pieces, or merging neighboring shards into bigger pieces. During

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Code Reviews . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . use for a given keyspace, cell, and tablet type. 11 Partitions During horizontal resharding (splitting or merging shards), there can be shards with overlapping key ranges. For example, the source shard database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Code Reviews . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to use for a given keyspace, cell, and tablet type. Partitions During horizontal resharding (splitting or merging shards), there can be shards with overlapping key ranges. For example, the source shard database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. Replication Graph The replication

database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a connections to the same database. Here we’ll go over what Vitess does and how it might impact you. Query splitting A complicated query with a cross shard join might need to first fetch information from a tablet supports resharding, in which the number of shards is changed on a live cluster. This can be either splitting one or more shards into smaller pieces, or merging neighboring shards into bigger pieces. During

database or from a replica. By routing each query to the appropriate database, Vitess allows your code to be structured as if it were reading from a single MySQL database. MoveTables MoveTables is a connections to the same database. Here we’ll go over what Vitess does and how it might impact you. Query splitting A complicated query with a cross shard join might need to first fetch information from a tablet supports resharding, in which the number of shards is changed on a live cluster. This can be either splitting one or more shards into smaller pieces, or merging neighboring shards into bigger pieces. During

goals: 1. Formalise a threat model of VTAdmin. 2. Manually audit the VTAdmin code. 3. Manually audit the remaining Vitess code base. 4. Assess and improve Vitessʼs fuzzing suite. 5. Carry out a SLSA compliance modelling: ● Vitessʼs documentation including README files from the Vitess repository ● Vitessʼs source code at https://github.com/vitessio/vitess ● Feedback from Vitess maintainers The threat model is aimed is an individual or group that intentionally attempts to exploit vulnerabilities, deploys malicious code, or compromise or disrupt a VTAdmin deployment, o�en for personal gain, espionage, or sabotage. We

D. Weißer, J. Larsson Index Introduction Scope Test Methodology Phase 1. Manual Code Auditing Phase 2. Code-Assisted Penetration Testing Miscellaneous Issues VIT-01-001 MySQL: Comparison of Auth and have considerable expertise in regard to system complexity, cloud infrastructure, source code auditing, operating system interaction, low-level protocol analysis and multi-angled penetration Kubernetes-based cluster, locally installed systems were also used for testing. Access to all relevant code and documentation was granted. While the first project meeting provided the basis for the audit, a