1

I recently stumbled upon MySQL Router. Its documentation defines it's purpose as follows:

MySQL Router is part of InnoDB cluster, and is lightweight middleware that provides transparent routing between your application and back-end MySQL Servers.

As I could not find any Information about the inner workings of it, I was wondering if it can be compared to a Load Balancer or Reverse Proxy in the HTTP world.

As Reverse Proxies are often used to add another security layer to your web application, I'd like to know, if this is something, that MySQL router could also achieve (unintentionally).

Euphrasius von der Hummelwiese
  • 1,080
  • 6
  • 20

1 Answers1

1

Maybe and only for DoS attacks. I see it's only like a load balancer. For some extra security I would advice ProxySQL and then implement similar approach to https://www.percona.com/blog/2016/08/23/how-to-stop-an-offending-query-with-proxysql/ .

Explanation:

For databases main worst attack vector is SQL injection so routing/load balancing queries won't make any difference but blocking a query is much more better.

Best practice is to log every query and alert on some suspicion. Best case to use WAF but here ProxySQL acts like a database WAF.

Hrvoje Milković
  • 517
  • 3
  • 6