purpose of a replica tablet is for serving OLTP read traffic, whereas rdonly tablets are for serving analytics, or performing cluster maintenance operations like backups, or resharding. rdonly replicas are allowed exponentially. • Analytics: The retention period for messages is dictated by the application. One could potentially choose to never delete any messages and use the data for performing analytics. • Transactional: IsUnsigned. DECIMAL 18 DECIMAL specifies a DECIMAL or NUMERIC type. Properties: 18, None. TEXT 6163 TEXT specifies a TEXT type. Properties: 19, IsQuoted, IsText. BLOB 10260 BLOB specifies a BLOB type. Properties:

-shards 8 -vschema-file vschema.json -schema-file schema.sql -replication-mode “ROW” -output-mode text -sql “SELECT * from users” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . -Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000200... Starting vttablet for zone1 -0000000200... HTTP/1.1 200 OK Date: Thu, 21 May 2020 01:05:31 GMT Content -Type: text/html; charset=utf-8 -Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000400... Starting vttablet for zone1 -0000000400... HTTP/1.1 200 OK Date: Thu, 21 May 2020 01:05:40 GMT Content -Type: text/html; charset=utf-8

-Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000101... Starting vttablet for zone1 -0000000101... HTTP/1.1 200 OK Date: Wed, 25 Mar 2020 17:32:53 GMT Content -Type: text/html; charset=utf-8 vttablet for zone1 -0000000102... HTTP/1.1 200 OK Date: Wed, 25 Mar 2020 17:33:01 GMT Content -Type: text/html; charset=utf-8 W0325 11:33:01.932674 16036 main.go:64] W0325 17:33:01.930970 reparent.go:185] exponentially. • Analytics: The retention period for messages is dictated by the application. One could potentially choose to never delete any messages and use the data for performing analytics. • Transactional:

-Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000101... Starting vttablet for zone1 -0000000101... HTTP/1.1 200 OK Date: Wed, 25 Mar 2020 17:32:53 GMT Content -Type: text/html; charset=utf-8 vttablet for zone1 -0000000102... HTTP/1.1 200 OK Date: Wed, 25 Mar 2020 17:33:01 GMT Content -Type: text/html; charset=utf-8 W0325 11:33:01.932674 16036 main.go:64] W0325 17:33:01.930970 reparent.go:185] exponentially. • Analytics: The retention period for messages is dictated by the application. One could potentially choose to never delete any messages and use the data for performing analytics. • Transactional:

-shards 8 -vschema-file vschema.json -schema-file schema.sql -replication-mode “ROW” -output-mode text -sql “SELECT * from users” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Short informative summary of the pull request • #[Issue_ID] • Description: More detailed explanatory text describing the PR for the reviewer Suggested Format: [Category ] [Label] Description #[Ticket_ID] -Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000101... Starting vttablet for zone1 -0000000101... HTTP/1.1 200 OK Date: Wed, 25 Mar 2020 17:32:53 GMT Content -Type: text/html; charset=utf-8

-shards 8 -vschema-file vschema.json -schema-file schema.sql -replication-mode “ROW” -output-mode text -sql “SELECT * from users” . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Short informative summary of the pull request • #[Issue_ID] • Description: More detailed explanatory text describing the PR for the reviewer Suggested Format: [Category ] [Label] Description #[Ticket_ID] -Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000101... Starting vttablet for zone1 -0000000101... HTTP/1.1 200 OK Date: Wed, 17 Feb 2021 13:10:03 GMT Content -Type: text/html; charset=utf-8

Short informative summary of the pull request • #[Issue_ID] • Description: More detailed explanatory text describing the PR for the reviewer Suggested Format: Description #[Ticket_ID] Example: Fix where -Type: text/html; charset=utf-8 Starting MySQL for tablet zone1 -0000000101... Starting vttablet for zone1 -0000000101... HTTP/1.1 200 OK Date: Wed, 17 Feb 2021 13:10:03 GMT Content -Type: text/html; charset=utf-8 vttablet for zone1 -0000000102... HTTP/1.1 200 OK Date: Wed, 17 Feb 2021 13:10:12 GMT Content -Type: text/html; charset=utf-8 W0217 16:10:13.075530 65562 main.go:67] W0217 13:10:13.074510 reparent.go:188]

vschema.json -schema-file schema.sql -ks-shard-map shardmaps.json -replication-mode “ROW” -output-mode text -sql “SELECT FROM users; SELECT FROM users WHERE id IN (10, 17, 42, 1000);” . . . 511 Column List the new release. The SUMMARY argument is optional, it is a path to a README file that contains a text that will added in the Announcement section of the release notes. How to add pull requests to the Short informative summary of the pull request • #[Issue_ID] • Description: More detailed explanatory text describing the PR for the reviewer Suggested Format: Description #[Ticket_ID] Example: Fix where

Comparison of Auth Token allows timing Attacks (Info) VIT-01-002 MySQL: Timing attacks due to plain-text password auth (Low) VIT-01-003 PII: Not all SQL values covered by SQL redaction (Low) Conclusions sha1(sha1(pw))) Server compares: generated_hash == stored_hash In case the password is stored as plain-text, Vitess spares itself the final SHA1 operation on the server-side and compares the client's authentication attacker requires the double SHA1 hash of the password and the server has to store the password as plain-text, attacks where this issue is of relevance are not likely. However, it is recommended to perform

done extensive fuzzing work; It carried out a fuzzing audit in 2020 which added coverage to complex text processing routines. Vitess is integrated into OSS-Fuzz which allows the fuzzers to run continuously authenticator that has not been hardened for security; For example, the actor name is sent in plain text, and there is no minimum length required for the actor name. 17 Vitess Security Audit, 2023 ADA-VIT-SA23-2: 'http://localhost:14200/api/vtctlds' j = 0 for i in range(100000): x = requests.get(url) resp = json.loads(x.text) if resp["result"]["vtctlds"][0]["hostname"] != "localhost:15999": break j+=1 if j != 10000: print("We