which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: 14 • It enables tablets to coordinate Documentation • Execution Plans vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status

Start by copying the region_sharding example included with Vitess to your preferred location. cp -r /usr/local/vitess/examples/region_sharding ~/my-vitess/examples/region_sharding cd ~/my-vitess/exam which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status mysqld: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should now return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among their underlying MySQL instances. vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status mysqld: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should now return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status mysqld: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should now return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status mysqld: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should now return an empty result: sudo aa-status

which are assumed to provide a distributed, consistent key-value store. The default topology service plugin is etcd2. The topology service exists for several reasons: • It enables tablets to coordinate among their underlying MySQL instances. vtworker vtworker hosts long-running processes. It supports a plugin architecture and offers libraries so that you can easily choose tablets to use. Plugins are available disable it: sudo ln -s /etc/apparmor.d/usr.sbin.mysqld /etc/apparmor.d/disable/ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status

Vitess links to an example authentication plugin which is available here: https://gist.github.com/ajm188/5b2c7d3ca76004a297e6e279a54c2299. This example plugin extracts the actor from either the context from a cookie. 6 Vitess Security Audit, 2023 When a Vitess administrator adds an authentication plugin, VTAdmin-api adds it as a middleware at the http mux layer. VTAdmin-api does this in vitess/go/vt/vtadmin/api the routes are initialized: First VTAdmin-api checks if the user has registered an authentication plugin: And later, it gets added to the http mux layer: Authorization Once a request has been authenticated

SQL Example Plan SQL语句 备注 SelectUnshar ded select * from main1 
 SelectScatte r select * from user 
 SelectScatte r select * from user where 1 = id 
 SelectEqual select * from user where id = 1 
 from user where name = 'foo' 索引不唯⼀一 SelectIN select * from user where id in (1, 2) 
 SelectScatte r select * from user where id = 1 and var = 2 or var = 3 
 SelectKeyran ge select * from user where