MySQL 8.4 Release Notes
Important
当使用 MySQL 通信栈（group_replication_communication_stack=MYSQL）并且成员之间使用安全连接（group_replication_ssl_mode 未设置为 DISABLED）时，本节讨论的安全设置不仅适用于分布式恢复连接，也适用于成员之间的一般组通信。When using the MySQL communication stack
(group_replication_communication_stack=MYSQL)
AND secure connections between members
(group_replication_ssl_mode is
not set to DISABLED), the security settings
discussed in this section are applied not just to distributed
recovery connections, but to group communications between
members in general.
当成员加入群组时，会使用远程克隆操作（如果可用且适当）与异步复制连接相结合来执行分布式恢复。有关分布式恢复的完整描述，请参阅第 20.5.4 节，“分布式恢复”。When a member joins the group, distributed recovery is carried out using a combination of a remote cloning operation, if available and appropriate, and an asynchronous replication connection. For a full description of distributed recovery, see Section 20.5.4, “Distributed Recovery”.
组成员为加入的成员提供其标准 SQL 客户端连接以进行分布式恢复，如 MySQL 服务器的 hostname 和 port 系统变量所指定，并且还可以（也可能）将备用分布式恢复端点列表作为专用客户端连接提供给加入的成员。更多详细信息，请参阅 第 20.5.4.1 节，“分布式恢复连接”。请注意，为加入成员提供的用于分布式恢复的此类连接 不是 Group Replication 用于在 XCom 通信堆栈用于组内通信时的在线成员间的连接（group_replication_communication_stack=XCOM）。Group members offer their standard SQL client connection to
joining members for distributed recovery, as specified by MySQL
Server's hostname and
port system variables, and may
(also) advertise an alternative list of distributed recovery
endpoints as dedicated client connections for joining members. For
more details, see
Section 20.5.4.1, “Connections for Distributed Recovery”.
Notice that such connections offered to a joining member for
distributed recovery is not the same
connections that are used by Group Replication for communication
between online members when the XCom communication stack is used
for group communications
(group_replication_communication_stack=XCOM).
为了保障组中的分布式恢复连接，请确保复制用户的用户凭据得到妥善保护，并在可能的情况下为分布式恢复连接使用 SSL。To secure distributed recovery connections in the group, ensure that user credentials for the replication user are properly secured, and use SSL for distributed recovery connections if possible.