Is it possible to secure Galera Cluster SST via
rsync with SSL/SSH? This page suggests it is not, specifically the following quote:
xtrabackupincludes support for SSL encryption built in.
I have followed all the steps to secure the database and replication.
[mysqld] ssl-ca = /path/to/ca-cert.pem ssl-key = /path/to/server-key.pem ssl-cert = /path/to/server-cert.pem wsrep_provider_options="socket.ssl_key=/path/to/server-key.pem;socket.ssl_cert=/path/to/server-cert.pem;socket.ssl_ca=/path/to/cacert.pem;socket.checksum=2;socket.ssl_cipher=AES128-SHA" [mysql] ssl-ca = /path/to/ca-cert.pem ssl-key = /path/to/client-key.pem ssl-cert = /path/to/client-cert.pem
Will those settings secure my SST, outside of
rsync? Or is there no way to secure
I am familiar with how to secure
rsync transfers via SSH with
rsync -e ssh. What I can't find the answer to, however, is how to specify that option to Galera. This is the only option I can find:
This is important because - in a worst-case scenario - I might need to perform SST over the WAN.
I am using MariaDB 10.1.11 with Galera 25.3.12.