Mysql WP Enterprise Guide
Mysql WP Enterprise Guide
Product Guide
Introduction .............................................................................................................................. 3
MySQL Enterprise Edition .......................................................................................................... 3
Data Protection and Regulatory Compliance .............................................................................. 4
MySQL Enterprise Authentication .............................................................................................. 6
MySQL Enterprise Transparent Data Encryption (TDE) ............................................................... 7
MySQL Enterprise Encryption .................................................................................................... 8
MySQL Enterprise Masking and De-identification ...................................................................... 9
MySQL Enterprise Firewall ....................................................................................................... 10
MySQL Enterprise Audit ........................................................................................................... 11
MySQL Security Technical Implementation Guide (STIG) .......................................................... 13
CIS Benchmark for MySQL Enterprise Edition ........................................................................... 14
MySQL Enterprise Scalability ................................................................................................... 14
MySQL Enterprise High Availability .......................................................................................... 17
MySQL Enterprise Backup ........................................................................................................ 18
MySQL Operator for Kubernetes .............................................................................................. 19
MySQL Enterprise Stored Programs ......................................................................................... 20
MySQL Enterprise Telemetry ................................................................................................... 21
Oracle Enterprise Manager for MySQL ..................................................................................... 23
Oracle Product Certifications/Integrations ............................................................................... 24
Oracle Premier Support ........................................................................................................... 25
HeatWave................................................................................................................................ 25
Conclusion ............................................................................................................................... 26
Additional Resources ............................................................................................................... 27
Whether you are building high volume websites, enterprise and departmental
applications, or e-commerce applications, your organization needs the tools to build and
manage these business-critical database applications. This paper explores how you can
confidently deploy MySQL as part of a cost-effective solution for delivering high-
performing, highly available, reliable and scalable applications. It examines some of the
challenges associated with delivering secure applications that protect sensitive data and
meet regulatory requirements and how MySQL Enterprise Edition can address these
challenges.
MySQL Enterprise Edition combines the most secure, scalable, “always on” version of
the MySQL database with online backup, monitoring, management and SQL
development tools, all backed by Oracle Premier Support, 24x7 global enterprise-class
support services. Further, MySQL Enterprise Edition supports your use of MySQL in
conjunction with many of the Oracle products and tools you may already be familiar with
or are currently using. MySQL Enterprise Edition is specifically designed to help you
bring MySQL applications to market faster, mitigate risk, and ensure you meet customer
and end-user Service Level Agreements (SLAs).
MySQL is the world's most popular open source database. Whether you are a fast
growing web property, software vendor, a large organization or an SMB, MySQL can
cost-effectively help you deliver high performance, scalable database applications. If
you are currently using MySQL, you probably started with MySQL Community Edition. In
fact, in many instances MySQL enters an organization via an application development
project and makes its way into the data center when the application is deployed for
production use. Challenges arise when these applications become vital to business
revenues or key business functions. The most common challenges around running
MySQL and other open source technologies are revealed by a simple line of questioning:
To help you answer these questions with confidence, Oracle provides MySQL Enterprise
Edition. MySQL Enterprise Edition is a commercial offering comprised of the MySQL
database with security, encryption, auditing, high availability and scalability, online
backup, monitoring, and management. MySQL Enterprise Edition is backed by Oracle
Premier 24x7 support for organizations delivering highly available, business critical
applications and services.
Data protection and regulatory compliance are key requirements to prevent lost revenue,
damaged reputation, and regulatory fines. According to the 2024 IBM, Cost of as Data
Breach Report, the cost of a data breach and the per-record cost of a data breach
reached new highs. These rising costs consist of business disruption, detection and
escalation efforts, post-breach response costs, and notification costs.
These data breach figures highlight just how vulnerable personal data is and how
important it is to be handled and used responsibly. In response, governments and
WHITE PAPER | MySQL Enterprise Edition Product Guide 4
Even though there are so many individual regulations, most of them share similar
requirements. For example:
The following sections provide detailed information about the MySQL Enterprise Edition
tools and technologies that enable organizations to meet these regulatory requirements
and protect sensitive data.
MySQL Enterprise Edition provides ready to use, external authentication modules for
users who authenticate users via centralized authentication infrastructure products.
Each is described below:
• MySQL External Authentication for PAM - Enables you to configure MySQL to use
Linux PAMs (Pluggable Authentication Modules) to authenticate users via PAMs for
various authentication methods, such as Linux passwords or an LDAP directory.
MySQL Enterprise Transparent Data Encryption (TDE) protects your critical data by
enabling data-at-rest encryption in the database. It protects the privacy of your
information, prevents data breaches and helps meet regulatory requirements including
the Payment Card Industry Data Security Standard (PCI DSS), Health Insurance
Portability and Accountability Act (HIPAA) and numerous others.
To protect sensitive data throughout its lifecycle, MySQL Enterprise Encryption provides
industry standard functionality for asymmetric encryption (Public Key Cryptography).
MySQL Enterprise Encryption provides encryption, key generation, digital signatures and
other cryptographic features to help organizations protect confidential data and comply
with regulatory requirements including HIPAA, Sarbanes-Oxley, and the PCI Data
Security Standard.
MySQL Enterprise Encryption gives DBAs and Developers the tools they need for:
This enables software developers to encrypt data by using RDS, DHS and DH
encryption algorithms without changing existing applications.
MySQL Enterprise Masking and De-identification protects sensitive data from unauthorized users.
MySQL Enterprise Firewall guards against cyber security threats by providing real-time
protection against database specific attacks, such as an SQL Injection. MySQL
• Real-time Threat Monitoring - All incoming queries pass through a SQL analysis
engine and are matched against an approved allowlist of expected SQL statements.
• Block Suspicious Traffic - Statements that do not match the approved allowlist are
blocked, logged and can be analyzed to help block a potential SQL injection attack.
• Learn and Build Allowlists - Automatically create user specific allowlists of pre-
approved SQL statements using a self-learning system.
• Transparent Protection - MySQL Enterprise Firewall requires no changes to your
application regardless of development language, framework or 3rd party application.
• High Performance - MySQL Enterprise Firewall runs within each MySQL instance
and provides scale-out performance.
• Logging - MySQL Enterprise Firewall tracks and provides metrics on both allowed
and blocked SQL statements. Blocked statements are logged for inspection and
alerting.
Today’s web-based applications have evolved from nice-to-have enablers to the mission-
critical revenue generating mechanisms that characterize the modern e-business model.
In this virtual marketplace, PCI compliance guidelines ensure credit card data is secure
within e-commerce apps. From a corporate standpoint, Sarbanes-Oxley, HIPAA and
other government imposed mandates guard the medical, financial, public sector and
other personal data centric industries with required logging, archiving and "upon request"
access to audit trails that reveal the eyes and hands that have viewed and acted upon
the most sensitive of data. In all use cases, requirements for capturing application level
user activity are most commonly implemented on the back-end database.
With this in mind, MySQL provides an open pluggable audit interface that enables all
MySQL users to write their own auditing solutions based on application specific
requirements. To help users quickly and seamlessly add auditing compliance to their
• Protect Sensitive Data using Powerful Filtering - Define what you audit using
templates or design highly custom filters using simple JSON filter definition. Filter on
connections, users, table access, access type, statement status (success/failure),
query content, and more.
• Meet Regulatory Compliance Standards - Provide the data your organization and
auditors need to be in compliance with requirements including PCI, HIPAA, FERPA,
SOX and more.
• Achieve Security Goals through Comprehensive Auditing - Trust but verify DBA
activity, prove your data’s validity and perform forensic analysis to investigate or
discover data breaches.
• Easy Integration with Audit Vaults and Stores - Externally archive and analyze
XML-based audit logs with ease using Oracle Audit Vault and other third party
solutions including Splunk.
• Dynamic and Easy to Manage - Dynamically enable/disable audit stream, change
filtering, and more with no downtime. Automatically rotate audit log files based on
size.
• Low Overhead - Collects critical audit data with minimal performance impact. Use
fine grain filtering to minimize audit log size and IO impact.
The United States Department of Defense (DoD) approves and publishes the Security
Technical Implementation Guide (STIG) for MySQL Enterprise Edition 8.0. The Defense
Information Systems Agency (DISA) evaluated MySQL Enterprise Edition against
stringent DoD’s security requirements. The resulting guide for MySQL Enterprise Edition
provides comprehensive steps towards meeting security requirements for government
systems.
The Center for Internet Security (CIS) is a global community of cybersecurity experts.
CIS develops CIS Benchmarks, secure configuration and implementation guidelines
used to safeguard against cyber threats. The CIS MySQL Benchmark provides
prescriptive guidance for establishing a secure configuration posture for MySQL
Enterprise Edition.
• Current model does not prioritize connection queries for execution, regardless of the
number that have been submitted or that are in a “wait” status. No prioritization of
queries means that all attempt to execute in parallel with no regard for server
resource limitations.
• More concurrency of query executions requires significantly more server memory. In
an extreme case if the amount of memory needed by all active connections exceeds
server memory, the MySQL server may revert to memory/disk swapping, which will
greatly impact user response times.
• More query executions also leads to more cache flushing, which leads to more cache
misses and disk I/O requests. More disk I/O leads to longer query execution and
user response times.
• Write intensive applications are impacted significantly as concurrent DML statement
execution times can degrade exponentially as disk I/O increases.
To meet these challenges around the most demanding “mobilized” application user and
workloads MySQL Enterprise Edition provides the MySQL Thread Pool. The Thread
Pool is a user configurable option that provides an efficient, alternate thread-handling
model designed to sustain performance and scalability as concurrent user loads continue
to grow. In these use cases the Thread Pool addresses the limitations to scalability by:
• Managing/controlling query execution until the MySQL server has the resources to
execute it.
• Splitting threads into managed Thread Groups. Inbound connections are assigned to
a group via a round-robin algorithm and the number of concurrent connections/threads
per group is limited based on queue prioritization and nature of queries awaiting
execution. Transactional queries are given a higher priority in queue than non-
transactional, but queue prioritization can be overridden at the user level as needed.
• Avoiding deadlocks when queries are stalled or executing for long period of time.
The result is sustained performance and scalability as concurrent user connections and
work loads grow as shown here in a benchmark.
MySQL Enterprise Edition provides 9x better scalability for OLTP Read/Write activity with Thread Pool
SysBench OLTP benchmarks show that the MySQL Thread Pool provides a significant
improvement in sustained performance and scalability for applications that service a
growing number of concurrent user connections and query executions.
MySQL InnoDB Cluster delivers a complete high availability solution for MySQL. Each
server in an InnoDB Cluster replicates data to all members of the cluster while providing
fault tolerance, automated failover, and elasticity. MySQL InnoDB Cluster provides built-
in group membership management, data consistency guarantees, node failure detection
and database failover, without the need for manual intervention.
MySQL InnoDB ClusterSet provides disaster tolerance for InnoDB Cluster deployments
by linking a primary InnoDB Cluster with one or more replicas of itself in different
datacenters. InnoDB ClusterSet automatically manages replication from the primary
cluster to the replica clusters using a dedicated ClusterSet replication channel. If the
primary cluster becomes unavailable due to the loss of the data center or the loss of
Backup
Restore
MySQL Enterprise Backup restores data from a full backup with full backward
compatibility. Consistent Point-in-Time Recovery (PITR) enables restoration to a specific
point in time. Using MySQL backups and binlog, you can also perform fine-grained roll
forward recovery to a specific transaction. A partial restore allows recovery of targeted
tables or tablespaces. In addition, you can restore backups to a separate location, or
create clones for fast replication setup or administration.
MySQL Enterprise Backup supports creating compressed backup files, typically reducing
backup size from 70% to over 90% when compared to the size of actual database files,
reducing storage and other costs.
Support for Oracle Storage Cloud, AWS S3 (Simple Storage Service) API to backup and
restore direct to inexpensive Cloud Storage (S3, Swift, and more)
The MySQL Operator for Kubernetes manages the lifecycle of a high availability MySQL
InnoDB Cluster inside Kubernetes. It automates the full MySQL InnoDB Cluster lifecycle
including set up, updates, backups and maintenance. For supporting best security
practices, the Operator also ensures defaulting to TLS communication, encouraging
usage of TLS certificates with integration into Kubernetes certificate management, and
restricting the container's capabilities.
MySQL is natural choice for JavaScript developers who need persistent storage.
JavaScript stored programs enable DBAs and developers to build richer, modern, more
powerful apps within the MySQL Server. Developers can express complex programming
logic directly inside the MySQL Server, minimizing data movement between the
database server and applications.
MySQL Enterprise Telemetry allows users to define, create, and collect telemetry data
from MySQL to monitor MySQL performance and behavior from a variety of observability
and management tools.
MySQL provides telemetry data, such as traces and metrics, using the CNCF (Cloud
Native Compute Foundation) OpenTelemetry observability framework– a vendor neutral
standard that includes common libraries, protocols and tools.
Traces
Telemetry tracing provides a holistic view of how your entire system operates all the way
to the MySQL Database level. OpenTelemetry traces offer several valuable benefits for
users of MySQL Enterprise Telemetry:
MySQL Enterprise Telemetry metrics are highly configurable allowing users to specify
what to send from over 300 MySQL gauges and counters. Metrics can easily be enabled
and disabled and timing intervals for exporting metrics from MySQL can be customized.
OpenTelemetry metrics offer several valuable benefits for users of MySQL Enterprise
Telemetry:
MySQL OpenTelemetry metrics equips you with the quantitative data necessary to make
informed decisions about your MySQL Enterprise database, ensuring its efficiency,
scalability, and optimal user experience.
Oracle Enterprise Manager for MySQL provides Oracle developers and DBAs with real-
time monitoring and delivers comprehensive performance, availability and configuration
information for your MySQL databases. Enterprise Manager collects more than 500
metrics covering various MySQL components. Custom critical and warning thresholds
can then be set for each of the collected metrics. Plus, DBAs can track configuration
details over time to easily keep track of configuration changes.
More information about Oracle Enterprise Manager for MySQL is available at:
http://www.mysql.com/products/enterprise/em.html
An estimated 70% of Oracle’s customers also use MySQL. MySQL Enterprise Edition
makes managing MySQL easier in these environments by certifying and supporting the
use of the MySQL Database in conjunction with many Oracle products. These include:
• Oracle Linux
• Oracle VM
• Oracle Secure Backup
• Oracle Golden Gate
• Oracle Audit Vault and Database Firewall
• Oracle Enterprise Manager
Oracle offers 24x7, global support for MySQL. The MySQL Support team is composed of
seasoned MySQL developers, who are database experts and understand the issues and
challenges you face. With Oracle Premier Support, you can lower the total cost and risk
of owning your MySQL databases, improve the return from your IT investment, and
optimize the business value of your IT solutions. MySQL support is included in the
subscription for end users, and available separately from commercial licenses for ISVs
and OEMs. Oracle Premier Support for MySQL includes the following features:
• 24 X 7 production support
• Unlimited support incidents
• Knowledge Base
• Maintenance releases, bug fixes, patches and updates
• Staffed by the most experienced MySQL Engineers in the industry
• The ability to get MySQL support in 29 languages
HeatWave
HeatWave is the cloud database service built and operated by the MySQL Engineering
Team.
HeatWave Lakehouse - Query data in various formats in object storage and optionally
combine it with transactional data in MySQL databases. HeatWave Lakehouse delivers
unmatched performance and price-performance.
HeatWave AutoML - Automate the pipeline to build, train, and explain ML models using
data in object storage and MySQL Database—without moving the data to a separate ML
cloud service and at no additional cost.
Conclusion
In this paper we explored the components that are included in MySQL Enterprise Edition.
These components are designed to help you mitigate security risk and meet Service
Level Agreements (SLAs) as you implement applications built on the lower that comes
WHITE PAPER | MySQL Enterprise Edition Product Guide 26
For customers that want a cloud service built and managed by the MySQL Engineering
Team, HeatWave provides automated and integrated generative AI and machine
learning (ML) in one cloud service for transactions and lakehouse scale analytics. Get
faster insights from all your data with unmatched performance and deploy apps in your
choice of cloud providers.
Additional Resources