MySQL 企业版包括 MySQL 企业防火墙，这是一个应用级防火墙，允许数据库管理员根据与允许的语句模式列表匹配的结果来允许或拒绝 SQL 语句的执行。这有助于加强 MySQL 服务器的安全性，防止 SQL 注入等攻击，或通过在不符合其合法查询工作负载特征的情况下使用应用程序来进行的尝试利用。MySQL Enterprise Edition includes MySQL Enterprise Firewall, an application-level firewall that enables database administrators to permit or deny SQL statement execution based on matching against allowlists of accepted statement patterns. This helps harden MySQL Server against attacks such as SQL injection or attempts to exploit applications by using them outside of their legitimate query workload characteristics.

每个注册在防火墙上的 MySQL 账户都有自己的语句允许列表，使保护可以针对每个账户进行定制。对于给定的账户，防火墙可以在记录模式或保护模式下运行，用于训练接受的语句模式或防止不可接受的语句。Each MySQL account registered with the firewall has its own statement allowlist, enabling protection to be tailored per account. For a given account, the firewall can operate in recording or protecting mode, for training in the accepted statement patterns or protection against unacceptable statements.

更多信息请参见 第 8.4.7 节，“MySQL 企业防火墙”。For more information, see Section 8.4.7, “MySQL Enterprise Firewall”.