Translator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310 Sharding Audit Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311 4.4 Error Code . . . . Dis‐ tributed Trans‐ action Transactional capability is key to ensuring database integrity and security and is also one of the databases’core technologies. With a hybrid engine based on XA and BASE trans‐ ShardingSphere provides distributed transaction capabilities on top of standalone databases, enabling data security across underlying data sources. Read/write Split‐ ting Read/write splitting can be used to cope

Translator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417 Sharding Audit Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418 Data Masking Algorithm Implementation classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453 10.5 SQL Audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453 10.5.1 ib ut ed T ra ns ac ti on Transactional capability is key to ensuring database integrity and security and is also one of the databases’core technologies. With a hybrid engine based on XA and BASE transac‐

Translator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 448 Sharding Audit Algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 448 Data Masking Algorithm Implementation classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482 10.5 SQL Audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482 10.5.1 ib ut ed T ra ns ac ti on Transactional capability is key to ensuring database integrity and security and is also one of the databases’core technologies. With a hybrid engine based on XA and BASE transac‐

integrity and security and is also one of the databases’core technologies. ShardingSphere provides distributed transaction ca‐ pability on top of a single database, which can achieve data security across underlying the data usage experience. Data En‐ cryp‐ tion Data Encryption is a basic way to ensure data security. ShardingSphere provides a set of data encryption solutions that are complete, secure, transparent inal technology stack to remain unchanged. • Security & Stability It can provide enhancement capability based on mature databases while ensuring security and stability. • Elastic Extention It supports

2 QueryAssistedEncryptAlgorithm . . . . . . . . . . . . . . . . . . . . . . . . . . 286 5.7 SQL Audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 5.7.1 SQLAuditor Background Security control has always been a crucial link of data governance, data encryption falls into this cat‐ egory. For both Internet enterprises and traditional sectors, data security has always sensitive information through encrypt rules to safely protect the private data. Data involves client’s security or business sensibil‐ ity, such as ID number, phone number, card number, client number and other

(sharding, readwrite‐splitting and shadow), transform (data encrypt and mask), authen‐ tication (security, audit and authority), governance (circuit breaker and access limitation and an‐ alyze, QoS and observability) ShardingSphere document, v5.0.0 1.2 Solution S olutions/ Fea- tures • Distributed Database* Data Security Database Gateway Stress T esting Data Sharding Data Encrypt Multi‐model Databases Sup‐ ported Row Authority (TODO) SQL Dialect Translate (TODO) Observ ability Distributed Transaction SQL Audit (TODO) Elastic Scale‐out SQL Firewall (TODO) Highly Available 1.2. Solution 5 Apache ShardingSphere

(sharding, readwrite‐splitting and shadow), transform (data encrypt and mask), authen‐ tication (security, audit and authority), governance (circuit breaker and access limitation and an‐ alyze, QoS and observability) ShardingSphere document, v5.1.1 1.2 Solution S olutions/ Fea- tures • Distributed Database* Data Security Database Gateway Stress T esting Data Sharding Data Encrypt Heterogeneous Databases Sup‐ ported Row Authority (TODO) SQL Dialect Translate (TODO) Observ ability Distributed Transaction SQL Audit (TODO) Elastic Scale‐out SQL Firewall (TODO) Highly Available 1.2. Solution 5 Apache ShardingSphere

(sharding, readwrite‐splitting and shadow), transform (data encrypt and mask), authen‐ tication (security, audit and authority), governance (circuit breaker and access limitation and an‐ alyze, QoS and observability) ShardingSphere document, v5.1.2 1.2 Solution S olutions/ Fea- tures • Distributed Database* Data Security Database Gateway Stress T esting Data Sharding Data Encrypt Heterogeneous Databases Sup‐ ported Row Authority (TODO) SQL Dialect Translate (TODO) Observ ability Distributed Transaction SQL Audit (TODO) Elastic Scale‐out SQL Firewall (TODO) Highly Available 1.2. Solution 5 Apache ShardingSphere

(+): # 分布式序列算法名称 type: # 分布式序列算法类型 props: # 分布式序列算法属性配置 # ... # 分片审计算法配置 auditors: audit_algorithm_name> (+): # 分片审计算法名称 type: # 分片审计算法类型 props: # 分片审计算法属性配置 # ... - !BROADCAST tables: 分布式序列算法名称 算法类型的详情，请参见内置分布式序列算法列表。 分片审计策略配置 类名称：org.apache.shardingsphere.sharding.api.config.strategy.audit.ShardingAuditStrategyConfiguration 可配置属性： 名称 数据类型 说明 auditorNames Collection 分片审计算法名称 strategyDefinition ')')? (',' 'KEY_GENERATE_STRATEGY' '(' keyGenerateStrategyDefinition ')')? (',' 'AUDIT_STRATEGY' '(' auditStrategyDefinition ')')? ')' autoTableDefinition ::= tableName '(' 'STORAGE_UNITS'

(+): # 分布式序列算法名称 type: # 分布式序列算法类型 props: # 分布式序列算法属性配置 # ... # 分片审计算法配置 auditors: audit_algorithm_name> (+): # 分片审计算法名称 type: # 分片审计算法类型 props: # 分片审计算法属性配置 # ... - !BROADCAST tables: 分布式序列算法名称 算法类型的详情，请参见内置分布式序列算法列表。 分片审计策略配置 类名称：org.apache.shardingsphere.sharding.api.config.strategy.audit.ShardingAuditStrategyConfiguration 可配置属性： 名称 数据类型 说明 auditorNames Collection 分片审计算法名称 strategyDefinition ')')? (',' 'KEY_GENERATE_STRATEGY' '(' keyGenerateStrategyDefinition ')')? (',' 'AUDIT_STRATEGY' '(' auditStrategyDefinition ')')? ')' 9.2. ShardingSphere-Proxy 153 Apache ShardingSphere