. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 4 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . list (called a partitioning or just a partition) of shards whose ranges cover all possible keyspace ID values, while being non-overlapping and contiguous. Shards can be moved in and out of this list to

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . list (called a partitioning or just a partition) of shards whose ranges cover all possible keyspace ID values, while being non-overlapping and contiguous. Shards can be moved in and out of this list to

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . list (called a partitioning or just a partition) of shards whose ranges cover all possible keyspace ID values, while being non-overlapping and contiguous. Shards can be moved in and out of this list to

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . TABLE customer ( id int NOT NULL, fullname varbinary(256), nationalid varbinary(256), country varbinary(256), primary key(id) ); CREATE TABLE customer_lookup ( id int NOT NULL, keyspace_id varbinary(256)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . with EXPLAIN FORMAT=vitess . Related Vitess Documentation • VTGate 18 Keyspace ID The keyspace ID is the value that is used to decide on which shard a given row lives. Range-based Sharding

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . observed with EXPLAIN FORMAT=vitess . Related Vitess Documentation • VTGate Keyspace ID The keyspace ID is the value that is used to decide on which shard a given row lives. Range-based Sharding

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . with EXPLAIN FORMAT=vitess . Related Vitess Documentation • VTGate 19 Keyspace ID The keyspace ID is the value that is used to decide on which shard a given row lives. Range-based Sharding

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Keyspace ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160 Caller ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . shardmaps.json -replication-mode “ROW” -output-mode text -sql “SELECT FROM users; SELECT FROM users WHERE id IN (10, 17, 42, 1000);” . . . 511 Column List . . . . . . . . . . . . . . . . . . . . . . . . . .

level in Vitess. Vitess created an advisory for each issue and assigned CVEʼs for both advisories: ID CVE Severity ADA-VIT-SA23-5 CVE-2023-29194 Moderate ADA-VIT-SA23-12 CVE-2023-29195 Moderate 3 Vitess !api.authz.IsAuthorized(ctx, c.ID, rbac.ClusterResource, rbac.GetAction) { continue } 7 Vitess Security Audit, 2023 vcs = append(vcs, &vtadminpb.Cluster{ Id: c.ID, Name: c.Name, }) } return Security Audit, 2023 Issues found Here we present the issues that we identified during the audit. # ID Title Severity Fixed 1 ADA-VIT-SA23-1 Missing documentation on deploying VTAdmin-web securely Moderate

select * from user where 1 = id 
 SelectEqual select * from user where id = 1 
 SelectEqual select * from user where name = 'foo' 索引不唯⼀一 SelectIN select * from user where id in (1, 2) 
 SelectScatte r r select * from user where id = 1 and var = 2 or var = 3 
 SelectKeyran ge select * from user where keyrange(1, 2) and a = 1 重写之后， 变成： select * from user where a = 1 SelectIN select exists (select (select 1 from dual) from user where id in (1, 2) 
 UpdateEqual update user set val = 1 where id = 1 
 Plan SQL语句 原因 NoPlan select * from user union select * from user union NoPlan set a=1 set