MySQL 8.4 Release Notes
Note
MySQL 企业防火墙是包含在 MySQL 企业版中的一个扩展功能，MySQL 企业版是商业产品。要了解更多关于商业产品的信息，请参见 https://www.mysql.com/products/。MySQL Enterprise Firewall is an extension included in MySQL Enterprise Edition, a commercial product. To learn more about commercial products, see https://www.mysql.com/products/.
MySQL 企业版包括 MySQL 企业防火墙，这是一种应用级防火墙，使数据库管理员能够根据与已接受的语句模式列表的匹配来允许或拒绝 SQL 语句的执行。这有助于加强 MySQL 服务器的安全性，防止诸如 SQL 注入或通过在合法查询工作量特性之外使用应用程序进行攻击的行为。MySQL Enterprise Edition includes MySQL Enterprise Firewall, an application-level firewall that enables database administrators to permit or deny SQL statement execution based on matching against lists of accepted statement patterns. This helps harden MySQL Server against attacks such as SQL injection or attempts to exploit applications by using them outside of their legitimate query workload characteristics.
每个注册在防火墙中的 MySQL 帐户都有自己的语句允许列表，使保护可以针对每个帐户进行定制。对于给定的帐户，防火墙可以在记录、保护或检测模式下运行，用于训练接受的语句模式、针对不可接受语句的主动保护或对不可接受语句的被动检测。图示说明了防火墙如何在每种模式下处理传入语句。Each MySQL account registered with the firewall has its own statement allowlist, enabling protection to be tailored per account. For a given account, the firewall can operate in recording, protecting, or detecting mode, for training in the accepted statement patterns, active protection against unacceptable statements, or passive detection of unacceptable statements. The diagram illustrates how the firewall processes incoming statements in each mode.
以下各节描述了 MySQL 企业防火墙的各个元素，讨论了如何安装和使用它，并提供其元素的参考信息。The following sections describe the elements of MySQL Enterprise Firewall, discuss how to install and use it, and provide reference information for its elements.