Skip to content

Count TLS/non-TLS connections separately, by TLS version#4341

Merged
sougou merged 6 commits intovitessio:masterfrom
planetscale:ds-tsl-conn-counts
Nov 10, 2018
Merged

Count TLS/non-TLS connections separately, by TLS version#4341
sougou merged 6 commits intovitessio:masterfrom
planetscale:ds-tsl-conn-counts

Conversation

@deepthi
Copy link
Copy Markdown
Collaborator

@deepthi deepthi commented Nov 6, 2018

Signed-off-by: deepthi deepthi@planetscale.com

Signed-off-by: deepthi <deepthi@planetscale.com>
Signed-off-by: deepthi <deepthi@planetscale.com>
@dveeden
Copy link
Copy Markdown
Contributor

dveeden commented Nov 6, 2018

Please also count TLSv1.3 connections. I don't think I have ever seen a MySQL client that supported SSLv3 (Initially MySQL only supported TLSv1.0). And vtgate should never allow SSLv3, but I'm not sure if that's currently the case. So counts for SSLv3 are pretty much useless.

Signed-off-by: deepthi <deepthi@planetscale.com>
@deepthi
Copy link
Copy Markdown
Collaborator Author

deepthi commented Nov 7, 2018

TLS1.3 in go is still WIP.
golang/go#9671
The protocol versions covered here are the ones supported in go-1.10 (crypto/tls/common.go)
const (
VersionSSL30 = 0x0300
VersionTLS10 = 0x0301
VersionTLS11 = 0x0302
VersionTLS12 = 0x0303
)

I'll add a comment to the code to say that we should update our handling when we move to a newer version of go.

Signed-off-by: deepthi <deepthi@planetscale.com>
queryTimingKey = "Query"
connectTimingKey = "Connect"
queryTimingKey = "Query"
versionSSL30 = "SSL 3.0"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since these are tags, it's risky to use spaces (or dots). Some value parsers may treat them as separators. Underscores are safe. Even - could cause trouble. Personally, I'd just go with SSL30, TLS10, etc.

Signed-off-by: deepthi <deepthi@planetscale.com>
Signed-off-by: deepthi <deepthi@planetscale.com>
@sougou sougou merged commit 782fec9 into vitessio:master Nov 10, 2018
@deepthi deepthi deleted the ds-tsl-conn-counts branch December 5, 2018 01:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants