. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Build And Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the master server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which

customer_lookup ( id int NOT NULL, keyspace_id varbinary(256), primary key(id) ); The customer table is the main table we want to shard using country. The lookup table will help us do that. Region Vindex We will goal of region-based sharding is data locality, it makes sense to co-locate the lookup data with the main customer data. We first define an identity vindex: "identity": { "type": "binary" } Then we create uses a config file. You will need to edit the value of the region_map parameter in the vschema file main_vschema.json. For example: "region_map": "/home/user/my-vitess/examples/region_sharding/countries

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Build And Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the master server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Build And Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the primary server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Build And Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the master server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which

should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the master server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which return to its previous type. • restore - A tablet that has started up with no data, and is in the process of restoring itself from the latest backup. After it finishes, it will begin replicating at the GTID

should expect that tables with lighter modification rates to move faster. During the active move process, data is copied from replicas instead of the master server. This helps ensure minimal production Documentation • Resharding User Guide Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which return to its previous type. • restore - A tablet that has started up with no data, and is in the process of restoring itself from the latest backup. After it finishes, it will begin replicating at the GTID

the source shards are deleted. Tablet A tablet is a combination of a mysqld process and a corresponding vttablet process, usually running on the same machine. Each tablet is assigned a tablet type, which return to its previous type. • restore - A tablet that has started up with no data, and is in the process of restoring itself from the latest backup. After it finishes, it will begin replicating at the GTID become either replica or rdonly. • drained - A tablet that has been reserved by a Vitess background process (such as rdonly tablets for resharding). Topology Service description: Also known as the TOPO or

Vitess repository was considered in scope, however the main focus of the audit was VTAdmin which is located at https://github.com/vitessio/vitess/tree/main/go/vt/vtadmin. 4 Vitess Security Audit, 2023 Threat action against a given resource. The logic is implemented here: https://github.com/vitessio/vitess/tree/main/go/vt/vtadmin/rbac. VTAdmin checks RBAC rules in the route handlers with a call to IsAuthorized, vulnerability. Users can perform actions that they do not have permission to perform VTAdmins RBAC has two main goals: 1. Users should be able to perform the actions that they have been permitted to. 2. Users

implementation. The auditors managed to reach wide-spanning coverage of all aspects pertinent to the main repository of the Vitess software system. The most likely avenues for exploitation were chosen and team gained about the Vitess scope system under scrutiny. Scope • Vitess ◦ The publicly available main repository at https://github.com/vitessio/vitess was used as the codebase to be verified. ▪ branch namely pure code auditing in Phase 1 and source-code assisted penetration testing in Phase 2. The main source code repository examined during the audit pertained to the Vitess itself, while the rather