plan that collects input from multiple sources and merges the results to produce the correct query result. 20 Evaluation Model An execution plan consists of operators, each of which implements a specific join the incoming results into a single result that the user receives. The queries that MySQL gets are often just pieces of the original query, and the final result will get assembled at the vtgate level whatever it already is. • Not supported. For these settings, attempting to change them will always result in an error. • Vitess aware. These are settings that change Vitess’ behaviour, and are not sent down

plan that collects input from multiple sources and merges the results to produce the correct query result. Evaluation Model An execution plan consists of operators, each of which implements a specific piece Key already exists (/vitess/global) [6] MySQL Fails to Initialize This error is most likely the result of SELinux enabled: 1027 18:28:23.462926 19486 mysqld.go:734] mysqld --initialize -insecure failed: apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status | grep mysqld Build Vitess Navigate to the directory where you want to download

plan that collects input from multiple sources and merges the results to produce the correct query result. Evaluation Model An execution plan consists of operators, each of which implements a specific piece join the incoming results into a single result that the user receives. The queries that MySQL gets are often just pieces of the original query, and the final result will get assembled at the vtgate level whatever it already is. • Not supported. For these settings, attempting to change them will always result in an error. • Vitess aware. These are settings that change Vitess’ behaviour, and are not sent down

plan that collects input from multiple sources and merges the results to produce the correct query result. Evaluation Model An execution plan consists of operators, each of which implements a specific piece join the incoming results into a single result that the user receives. The queries that MySQL gets are often just pieces of the original query, and the final result will get assembled at the vtgate level whatever it already is. • Not supported. For these settings, attempting to change them will always result in an error. • Vitess aware. These are settings that change Vitess’ behaviour, and are not sent down

plan that collects input from multiple sources and merges the results to produce the correct query result. Evaluation Model An execution plan consists of operators, each of which implements a specific piece join the incoming results into a single result that the user receives. The queries that MySQL gets are often just pieces of the original query, and the final result will get assembled at the vtgate level whatever it already is. • Not supported. For these settings, attempting to change them will always result in an error. • Vitess aware. These are settings that change Vitess’ behaviour, and are not sent down

plan that collects input from multiple sources and merges the results to produce the correct query result. Evaluation Model An execution plan consists of operators, each of which implements a specific piece join the incoming results into a single result that the user receives. The queries that MySQL gets are often just pieces of the original query, and the final result will get assembled at the vtgate level whatever it already is. • Not supported. For these settings, attempting to change them will always result in an error. • Vitess aware. These are settings that change Vitess’ behaviour, and are not sent down

Key already exists (/vitess/global) [6] MySQL Fails to Initialize This error is most likely the result of SELinux enabled: 1027 18:28:23.462926 19486 mysqld.go:734] mysqld --initialize -insecure failed: apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status | grep mysqld 20 Build Vitess Navigate to the directory where you want to download Key already exists (/vitess/global) [6] MySQL Fails to Initialize This error is most likely the result of an AppArmor enforcing profile being present: 1027 18:28:23.462926 19486 mysqld.go:734] mysqld

Key already exists (/vitess/global) [6] MySQL Fails to Initialize This error is most likely the result of SELinux enabled: 1027 18:28:23.462926 19486 mysqld.go:734] mysqld --initialize -insecure failed: apparmor_parser -R /etc/apparmor.d/usr.sbin.mysqld The following command should return an empty result: sudo aa-status | grep mysqld Build Vitess Navigate to the directory where you want to download already exists (/vitess/global) [6] 18 MySQL Fails to Initialize This error is most likely the result of an AppArmor enforcing profile being present: 1027 18:28:23.462926 19486 mysqld.go:734] mysqld

We used the following sources for the threat modelling: ● Vitessʼs documentation including README files from the Vitess repository ● Vitessʼs source code at https://github.com/vitessio/vitess ● Feedback consider the documentation incomplete. Lack of complete documentation on VTAdmins security could result in users unknowingly using VTAdmin in a way that is known to be insecure, and is either not documented tctlds' j = 0 for i in range(100000): x = requests.get(url) resp = json.loads(x.text) if resp["result"]["vtctlds"][0]["hostname"] != "localhost:15999": break j+=1 if j != 10000: print("We hit a limit")

https://code.google.com/p/vitess/ • https://github.com/youtube/vitess • http://vitess.googlecode.com/files/Vitess_Percona_2012.pdf • http://vdisk.weibo.com/s/7JmTtKze0rn?from=page_100505_profile&wvr=6 Thank